AD Attack Methodology — From Zero to Domain Admin
Step-by-step methodology for attacking Active Directory — the chain I follow on every AD box.
Kerberos
Impacket — The Tools I Actually Use
Quick reference for the Impacket tools I use most — mssqlclient, GetUserSPNs, GetNPUsers, secretsdump, psexec, and more.