This is a cheatsheet of commands and processes to compromise an Active Directory environment. Everything documented in this repository is based on my own experience with the CRTA exam, and the context and circumstances may vary. For educational purposes only.
☆29May 18, 2025Updated last year
Alternatives and similar repositories for CRTA-CheatSheet
Users that are interested in CRTA-CheatSheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A practical, hands-on Nmap enumeration guide packed with commands, workflows, AD tips, and cheat-sheets for authorized pentesting.☆23Nov 5, 2025Updated 10 months ago
- INE/eLearnSecurity Web Application Penetration Tester eXtreme (eWPTXv3) Notes☆40Apr 15, 2025Updated last year
- This repository contains 5 junior-level exercises for developers who wish to build cool projects for their portfolio and train skills tha…☆50Mar 28, 2024Updated 2 years ago
- These are my customization scripts written in ansible for every time I have to perform a Kali clean install.☆28Apr 26, 2025Updated last year
- An operator-focused XSL stylesheet that transforms Nmap XML output into a clear, service-centric HTML report designed for use during acti…☆15Feb 3, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆14Jan 4, 2021Updated 5 years ago
- This repository contains a series of entry-level exercises that can be solved in any programming language. The purpose of these exercises…☆16Apr 16, 2024Updated 2 years ago
- MikroTik RouterOS API client for node.js.☆11Aug 22, 2019Updated 7 years ago
- PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll.☆75Oct 22, 2025Updated 10 months ago
- ☆10Aug 10, 2024Updated 2 years ago
- CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution☆33Jan 13, 2026Updated 8 months ago
- Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface !☆44Mar 24, 2026Updated 5 months ago
- Resource links (video, slides & code) for my conference talks | presentations | workshops☆22Aug 26, 2026Updated 3 weeks ago
- Windfall - Unauthenticated RCE exploit chain for Windmill & Nextcloud Flow (CVE-2026-29059). Path traversal + credential leak + PostgreSQ…☆18Apr 7, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This is the report that goes with my mock full-scope red team engagement against Game of Active Directory.☆20Oct 26, 2025Updated 10 months ago
- A PoC Cobalt Strike UDRL written in Rust☆34Sep 12, 2026Updated last week
- CEH Practical Preparation☆11Oct 2, 2022Updated 3 years ago
- Red Team Operations Architecture Map Comprehensive Operator Reference — From Infrastructure to Impact☆28Updated this week
- Advanced Command and Control Framework for Authorized Red Team Operations☆55Mar 1, 2026Updated 6 months ago
- A collection of slides and presentations from BSides Ahmedabad 2024, held on October 12th and 13th. This repository features key insights…☆38Oct 17, 2024Updated last year
- wpDiscuz 7.0.4 Remote Code Execution☆19Jun 15, 2021Updated 5 years ago
- HHousen's writeups to various HackTheBox machines and challenges from https://hackthebox.com.☆22Mar 3, 2023Updated 3 years ago
- Notes for the PJPT exam!☆14Aug 8, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Active Directory engagement workspace that combines offline tradecraft, operator-ready commands, attack path analysis, and automated play…☆23Jun 24, 2026Updated 2 months ago
- OSINT Toolkit – Wayback Collector & URL Checker☆23Nov 13, 2025Updated 10 months ago
- This Python program allows users to encrypt or decrypt messages using the Cesar's cipher. For educational purposes only.☆13Apr 18, 2024Updated 2 years ago
- ☆80Aug 6, 2024Updated 2 years ago
- Writeups for Hack The Box machines/challenges☆25Nov 4, 2021Updated 4 years ago
- Defensive security canary tool that detects unauthorized access via decoy files with Discord/Telegram alerts, geofencing, and threat inte…☆18Jul 5, 2026Updated 2 months ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆34Feb 17, 2026Updated 7 months ago
- ☆20Sep 2, 2026Updated 2 weeks ago
- ☆15Jul 15, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- yublueflower is a security workflow to discover real-world threats using open-source tools such as urlfinder, katana, httpx, nuclei, and …☆22Updated this week
- Hides in your attic... I mean process☆26Apr 29, 2026Updated 4 months ago
- S4vitar's desktop enviroment automatic☆12Feb 9, 2023Updated 3 years ago
- Python script to execute commands via Erlang/OTP Distribution Protocol☆15Feb 6, 2024Updated 2 years ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 5 months ago
- C library for quantum-resistant cryptographic algorithms.☆15Jun 21, 2018Updated 8 years ago
- ☆11Nov 5, 2018Updated 7 years ago