A complete PowerView and SharpView reference for AD enumeration : users, groups, computers, GPOs, ACLs, trusts, shares, and delegation.

A practical reference for querying Active Directory via LDAP , covering PowerShell, ADSI, WMI, ldapsearch, and LDAP filter syntax with real examples.

A full-lifecycle reference covering every major phase of an Active Directory penetration test, from initial recon to domain compromise. Tools, commands, context, and detection notes for each technique.

A practical cheatsheet and reference guide for using BloodHound, SharpHound, and AzureHound during Active Directory and Azure assessments.

Full writeup for the machine Kobold

Complete walkthrough of the Variatype HackTheBox machine.

Advanced techniques for bypassing the hardest EDR's and antivirus protections with AI protections , tamper protection , and kernel level protections.

Full writeup for the Active Directory machine Pirate