Six Degrees of Domain Admin

Windows Local Privilege Escalation Cookbook

Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews.

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

A deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.

RACE is a PowerShell module for executing ACL attacks against Windows targets.

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

Active Directory Tiered Administration Model

Modify AD-Integrated DNS Zone Dynamic Update settings via LDAP. Bypasses DNS Server RPC by directly editing the dNSProperty attribute. Requires WriteProperty on dNSProperty or higher privileges on …