system

System

Test system-level security including Active Directory, privilege escalation, and exploit development.

Techniques

Type	Key Vectors
Active Directory	Kerberoasting, AS-REP roasting, DCSync, PtH, Golden/RODC Ticket, RBCD, ACL abuse, KeyList, Shadow Credentials, ADCS (ESC1-9/16)
Privilege Escalation	SUID/sudo abuse, kernel exploits, service misconfig, token manipulation
Exploit Development	Buffer overflow, format string, ROP chains, shellcode, heap exploitation

Workflow

1. Enumerate system and domain information
2. Identify escalation paths and misconfigurations
3. Exploit with appropriate techniques
4. Demonstrate impact (domain admin, root access)
5. Document attack chain with evidence

Reference

• reference/INDEX.md - Router for AD attacks, privilege escalation, and exploit-dev scenarios (see reference/scenarios/)
• reference/format-string-exploitation.md - Format string read/write primitives, architecture differences, mitigation bypass
• reference/heap-exploitation.md - Modern glibc heap techniques (tcache poison, unsorted bin leak, environ stack leak, ROP)