Enumeration — Hub

Concepts for understanding what you find during recon — how services work, AD fundamentals, and what to look for.

Pair these notes with Recon tools (Nmap, Gobuster) and UseCases for ports for the full picture.


📌 Notes in This Folder

NotePurpose
NetworkingIP, subnets, routing, dual-homed hosts
ADActive Directory concepts & attack overview
KerberosKerberos auth, tickets, roasting — sync time first
Time Sync-Clock SkewClock skew / NTP sync with DC — Clock skew too great fix
Time SyncRedirect → Time Sync-Clock Skew
Kerberos Setup - krb5.conf/etc/krb5.conf — nxc --generate-krb5-file, required before -k / getTGT
RPCMSRPC, rpcbind, enumeration
GeneralGeneral enum tips & misc

Decision trees: Attack Path Graph · Credential Graph (Reference folder)


📌 Enum → Tool Mapping