Niklas Heringer
Niklas Heringer
Cybersecurity & Math.
⌘K
Subscribe Sign in
Niklas Heringer

active-directory

Active Directory explained and attacked: protocols, users and groups, GPOs, Kerberos and how a domain is built and secured.

Windows Privilege Escalation 01: Initial Enumeration
privilege-escalation

Windows Privilege Escalation 01: Initial Enumeration

Hands-on walkthrough of Windows PrivEsc fundamentals, with network recon, Defender analysis, AppLocker parsing, and process enumeration. Real command output and the reasoning behind every step.
Active Directory Pentesting: Part 02
active-directory

Active Directory Pentesting: Part 02

This post covers the full GoAD setup, SMB host discovery and OSINT-based username generation to kerbrute enumeration and a first successful authentication against a GoAD domain controller. It's the groundwork every Active Directory engagement starts with.
Active Directory Pentesting: Part 01
active-directory

Active Directory Pentesting: Part 01

Before we get offensive, we get grounded. This post covers the AD fundamentals every pentester needs locked in: domains, trees, forests, the Domain Controller as crown jewel, Kerberos SSO, multi-master replication, and why even a low-privileged domain account is worth more than it looks.
The Final Part: Active Directory Journey Day Five: Building, Securing, and Managing a Domain
ad-challenge

The Final Part: Active Directory Journey Day Five: Building, Securing, and Managing a Domain

Day Five covers key AD admin tasks - user and group creation, GPO management, and domain joins; using PowerShell with a security-focused approach.
Active Directory Journey Day Four: Rights, Privileges, GPOs and a Whole Lot More
ad-challenge

Active Directory Journey Day Four: Rights, Privileges, GPOs and a Whole Lot More

This post digs into Group Policy, Active Directory privileges, and built-in groups. I break down who has silent power, how attackers exploit User Rights, and what defenders can do to lock it down. Expect practical cheatsheets, tools, and battle-tested hardening tips.
Active Directory Journey Day Three - All about Users & Groups
active-directory

Active Directory Journey Day Three - All about Users & Groups

This post digs into Active Directory user accounts, local vs. domain context, and why SYSTEM access is a bigger deal than you think. You’ll learn where users live, how machines act like users, and how attackers use this to map, move, and mischief.
Active Directory Protocols Unpacked: A Practical Learning Journey - Day Two
ad-challenge

Active Directory Protocols Unpacked: A Practical Learning Journey - Day Two

We're back for day two! The series here are going great hehe. Last time we talked a lot
Active Directory Demystified: A Practical Learning Journey - Day One
ad-challenge

Active Directory Demystified: A Practical Learning Journey - Day One

Active Directory powers most enterprise networks, and attackers love it. This guide simplifies AD with real-world analogies and attacker-focused insights to help you learn, enumerate, and exploit it effectively.