> For the complete documentation index, see [llms.txt](https://notes.incendium.rocks/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.incendium.rocks/pentesting-notes/windows-pentesting.md).

# Windows Pentesting

- [Enumerating users (No credentials)](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/enumerating-users-no-credentials.md): Seeking for a foothold heh?
- [Privilege Escalation](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/privilege-escalation.md)
- [Post-Exploitation](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/post-exploitation.md)
- [Cross-domain enumeration](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/cross-domain-enumeration.md)
- [LDAP port (389, 636, 3268, 3269)](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/ldap.md)
- [SMB port (139,445)](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/smb.md)
- [MSSQL port (1433)](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/mssql-port-1433.md)
- [Certificate Authority (CA)](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/certificate-authority-ca.md)
- [Delegation attacks](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/delegation-attacks.md)
- [Attacking Kerberos](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/attacking-kerberos.md)
- [Relay attacks](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/relay-attacks.md)
- [Bypassing Security](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/bypassing-security.md)
- [File Transfer](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/file-transfer.md)
- [GPO (Group Policy Object)](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/gpo-group-policy-object.md)
- [Tools](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/tools.md)
- [Mimikatz](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/tools/mimikatz.md)
- [NetExec](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/tools/netexec.md)
- [Crackmapexec (CME)](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/tools/crackmapexec-cme.md)
- [Powerview](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/tools/powerview.md)
- [Bloodhound](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/tools/bloodhound.md)
- [Impacket](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/tools/impacket.md): Impacket is a collection of Python classes for working with network protocols.
- [BloodyAD](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/tools/bloodyad.md)
- [Sliver C2](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/tools/sliver-c2.md): Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. (Not only for Windows)
- [Security internals](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/security-internals.md)
- [Kernel](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/security-internals/kernel.md)
- [Remote Procedure Call](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/security-internals/remote-procedure-call.md)
- [COM/DCOM](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/security-internals/com-dcom.md)