Extracting Windows Credentials Using Native Tools

How to extract credentials from Windows systems using built in commands.

Kerberoasting

Kerbroasting to extract service account credentials.

Lateral Movement With Named Pipes

A demonstraton of named pipe communication using Meterpreter.

Session Enumeration With NetSessionEnum API

How to take advantage of the NetSessionEnum API to determine remotely logged in users.

BloodHound

Using BloodHound to exploit Active Directory based networks.