🎯 DCSync

The items that name it 10

• From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
  writeupas techniques2026-10-30

  Performed against a domain controller within seconds of obtaining a privileged certificate in Case 1.

• ADScanPro/Claude-AD
  repoas techniques2026-08-24

  Replication rights abuse listed among ACL abuse / keyword techniques

• Mimikatz Missing Manual
  repoas techniques2026-07-31
• icedracon/adhammer
  repoas classification.key entities2026-07-17
• Orca Security: ITDR for the Cloud
  articleas techniques2026-07-03
• elementalsouls/Claude-BugHunter
  repoas techniques2026-05-22

  internal AD attack technique; mentioned as out of scope for this bundle

• dMSA Ouroboros: Self-Sustaining Credential Extraction in Windows Server 2025
  writeupas techniques2026-05-04

  Used by the researchers to independently verify extracted NT hashes matched the superseded account's actual credentials before and after password rotation.

• WriteAccountRestrictions (WAR) – What is it good for?
  writeupas techniques2025-10-01

  Using DRSUAPI replication to dump domain credentials after authenticating as the DC with a null password

• Tear Down The Castle - Part 2
  writeupas techniques2025-01-30

  Using an extracted DC TGT to impersonate the DC and replicate/obtain all user password hashes

• CISA AA26-281A: Chinese Government-linked Actors Combine Automated and Hands-on Hacking Tools to Steal Data
  advisoryas classification.key entities