net-assessment-pentest

| | Responder | LLMNR/NBT-NS/mDNS poisoning | | Impacket | AD attack suite (secretsdump, psexec, wmiexec, etc.) | | BloodHound | AD attack path visualization | | NetExec (CrackMapExec) | Network service enumeration and spraying | | Evil-WinRM | PowerShell remoting client | | Certipy | AD Certificate Services exploitation | | Mimikatz | Windows credential extraction | | Hashcat | Password hash cracking | | Nmap | Network scanning and enumeration | | LinPEAS/WinPEAS | Privilege escalation enumeration |

References

• Cobalt Internal Network Pentesting Methodology: https://docs.cobalt.io/methodologies/internal-network/
• MITRE ATT&CK Enterprise: https://attack.mitre.org/matrices/enterprise/
• PTES: http://www.pentest-standard.org/
• Impacket: https://github.com/fortra/impacket
• BloodHound: https://github.com/BloodHoundAD/BloodHound