> For the complete documentation index, see [llms.txt](https://lanzt.gitbook.io/cheatsheet-pentest/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things.md).

# WINDOWS THINGS

- [Enumeration](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/enumeration.md)
- [Privilege Escalation](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/privilege-escalation.md)
- [Useful Commands](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/useful-commands.md)
- [Active Directory Methodology](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology.md)
- [Commands to create AD environment](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/commands-to-create-ad-environment.md)
- [Attacks](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks.md)
- [Kerberos](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos.md)
- [User enumeration](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos/user-enumeration.md)
- [ASREP-Roast](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos/asrep-roast.md)
- [Kerberoasting](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos/kerberoasting.md)
- [ASREP-Roast VS Kerberoasting](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos/asrep-roast-vs-kerberoasting.md)
- [Golden Ticket](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos/golden-ticket.md)
- [Resource Based Constrained Delegation](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos/resource-based-constrained-delegation.md)
- [Secrets dump](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/secrets-dump.md)
- [Pass The Hash](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/pass-the-hash.md)
- [Dump NTDS](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/dump-ntds.md)
- [Tickets](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/tickets.md)
- [TGT](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/tickets/tgt.md)
- [NTML Password Spray](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/ntml-password-spray.md)
- [LDAP Authentication](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/ldap-authentication.md)
- [LDAP Pass-back](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/ldap-authentication/ldap-pass-back.md)
- [Rogue LDAP Server](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/ldap-authentication/rogue-ldap-server.md)
- [SMB Relay (LLNMR, NTB-NS & WPAD)](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/smb-relay-llnmr-ntb-ns-and-wpad.md)
- [NTLM Relay](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/ntlm-relay.md)
- [Tools to exploit AD things](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/tools-to-exploit-ad-things.md)
- [SCF Files](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/scf-files.md)
- [Kerberos](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/kerberos.md)
- [SAM & LSA secrets](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/sam-and-lsa-secrets.md)
- [Enumeration](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/enumeration.md)
- [BloodHound](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/enumeration/bloodhound.md)
- [PowerView](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/enumeration/powerview.md)
- [CheatSheet of Commands](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/enumeration/powerview/cheatsheet-of-commands.md)
- [Set DNS & DOMAIN](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/enumeration/set-dns-and-domain.md)
- [Resources](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/resources.md)
- [RunAs](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/runas.md)
- [Post Explotation](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/post-explotation.md)
- [Persistence](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/post-explotation/persistence.md)
- [Mimikatz](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/post-explotation/mimikatz.md)
- [Common used tools](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/common-used-tools.md)