# seithunaing/active-directory-penetration-testing architecture

> Architecture diagram of the GitHub repository seithunaing/active-directory-penetration-testing, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-11-12). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/seithunaing/active-directory-penetration-testing
- Repository: https://github.com/seithunaing/active-directory-penetration-testing

## Overview

This repository is a personal Active Directory penetration-testing and CAPE exam reference, not an executable tool. The principal workflow is to consult the methodology and follow its documented engagement phases—from foothold and enumeration through credential harvesting, escalation, lateral movement, and domain or forest objectives—using the relevant technique notes. Separate chapters cover supporting topics such as MSSQL, pivoting, and evasion. Relationships shown are documented by the README’s phase table and notes index; no source excerpts were provided, so implementation-level calls do not apply.

Main entry points: [`README.md`](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/README.md) (Coverage index), [`01-methodology-and-lab-setup.md`](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/01-methodology-and-lab-setup.md) (Methodology and lab), [`02-enumeration.md`](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/02-enumeration.md) (Domain enumeration), [`03-kerberos-attacks.md`](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/03-kerberos-attacks.md) (Kerberos attacks)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_workflow["Engagement Workflow"]
  node_readme["Coverage index<br/>[README.md]"]
  node_methodology["Methodology and lab"]
  node_enumeration["Domain enumeration<br/>[02-enumeration.md]"]
end

subgraph group_attacks["Attack Techniques"]
  node_kerberos["Kerberos attacks"]
  node_credentials["Credential abuse"]
  node_delegation["Delegation abuse"]
  node_acl["ACL and DACL abuse"]
  node_escalation["Privilege escalation"]
end

subgraph group_operations["Operations and Reach"]
  node_lateral["Lateral movement"]
  node_mssql["MSSQL attacks"]
  node_pivoting["Pivoting and tunnels"]
  node_persistence["Domain persistence"]
  node_trusts["Forest and trust attacks"]
  node_evasion["Defense evasion"]
end

subgraph group_reference["Exam Reference"]
  node_exam["CAPE exam reference"]
  node_references["Further references<br/>[15-references.md]"]
end

node_reader(("Authorized tester"))

node_reader -->|"consults"| node_readme
node_readme -->|"indexes"| node_methodology
node_readme -->|"indexes"| node_enumeration
node_readme -->|"indexes"| node_kerberos
node_readme -->|"indexes"| node_credentials
node_readme -->|"indexes"| node_delegation
node_readme -->|"indexes"| node_acl
node_readme -->|"indexes"| node_lateral
node_readme -->|"indexes"| node_escalation
node_readme -->|"indexes"| node_mssql
node_readme -->|"indexes"| node_pivoting
node_readme -->|"indexes"| node_persistence
node_readme -->|"indexes"| node_trusts
node_readme -->|"indexes"| node_evasion
node_readme -->|"indexes"| node_exam
node_readme -->|"indexes"| node_references
node_methodology -->|"guides phase"| node_enumeration
node_methodology -->|"guides phase"| node_credentials
node_methodology -->|"guides phase"| node_escalation
node_methodology -->|"guides phase"| node_lateral
node_methodology -->|"guides phase"| node_persistence
node_methodology -->|"guides phase"| node_trusts
node_methodology -->|"lists techniques"| node_kerberos
node_methodology -->|"lists techniques"| node_delegation
node_methodology -->|"lists techniques"| node_acl
node_methodology -->|"offers exam aid"| node_exam

click node_readme "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/README.md"
click node_methodology "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/01-methodology-and-lab-setup.md"
click node_enumeration "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/02-enumeration.md"
click node_kerberos "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/03-kerberos-attacks.md"
click node_credentials "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/04-password-attacks-and-credential-abuse.md"
click node_delegation "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/05-kerberos-delegation-attacks.md"
click node_acl "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/06-acl-dacl-abuse.md"
click node_lateral "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/07-lateral-movement.md"
click node_escalation "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/08-domain-privilege-escalation.md"
click node_mssql "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/09-mssql-attacks.md"
click node_pivoting "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/10-pivoting-and-tunneling.md"
click node_persistence "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/11-domain-persistence.md"
click node_trusts "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/12-forest-and-trust-attacks.md"
click node_evasion "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/13-defense-evasion.md"
click node_exam "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/14-cape-exam-tips-and-cheatsheet.md"
click node_references "https://github.com/seithunaing/active-directory-penetration-testing/blob/main/15-references.md"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_readme,node_methodology,node_enumeration toneBlue
class node_kerberos,node_credentials,node_delegation,node_acl,node_escalation toneAmber
class node_lateral,node_mssql,node_pivoting,node_persistence,node_trusts,node_evasion toneMint
class node_exam,node_references toneRose
class node_reader toneIndigo
```

## Components

### Engagement Workflow

- [Coverage index](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/README.md): `README.md`
- [Methodology and lab](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/01-methodology-and-lab-setup.md): `01-methodology-and-lab-setup.md`
- [Domain enumeration](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/02-enumeration.md): `02-enumeration.md`

### Attack Techniques

- [Kerberos attacks](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/03-kerberos-attacks.md): `03-kerberos-attacks.md`
- [Credential abuse](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/04-password-attacks-and-credential-abuse.md): `04-password-attacks-and-credential-abuse.md`
- [Delegation abuse](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/05-kerberos-delegation-attacks.md): `05-kerberos-delegation-attacks.md`
- [ACL and DACL abuse](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/06-acl-dacl-abuse.md): `06-acl-dacl-abuse.md`
- [Privilege escalation](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/08-domain-privilege-escalation.md): `08-domain-privilege-escalation.md`

### Operations and Reach

- [Lateral movement](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/07-lateral-movement.md): `07-lateral-movement.md`
- [MSSQL attacks](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/09-mssql-attacks.md): `09-mssql-attacks.md`
- [Pivoting and tunnels](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/10-pivoting-and-tunneling.md): `10-pivoting-and-tunneling.md`
- [Domain persistence](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/11-domain-persistence.md): `11-domain-persistence.md`
- [Forest and trust attacks](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/12-forest-and-trust-attacks.md): `12-forest-and-trust-attacks.md`
- [Defense evasion](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/13-defense-evasion.md): `13-defense-evasion.md`

### Exam Reference

- [CAPE exam reference](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/14-cape-exam-tips-and-cheatsheet.md): `14-cape-exam-tips-and-cheatsheet.md`
- [Further references](https://github.com/seithunaing/active-directory-penetration-testing/blob/main/15-references.md): `15-references.md`

### Other components

- **Authorized tester**

## Connections

- Authorized tester → Coverage index: consults (evidence: `README.md`)
- Coverage index → Methodology and lab: indexes (evidence: `README.md`)
- Coverage index → Domain enumeration: indexes (evidence: `README.md`)
- Coverage index → Kerberos attacks: indexes (evidence: `README.md`)
- Coverage index → Credential abuse: indexes (evidence: `README.md`)
- Coverage index → Delegation abuse: indexes (evidence: `README.md`)
- Coverage index → ACL and DACL abuse: indexes (evidence: `README.md`)
- Coverage index → Lateral movement: indexes (evidence: `README.md`)
- Coverage index → Privilege escalation: indexes (evidence: `README.md`)
- Coverage index → MSSQL attacks: indexes (evidence: `README.md`)
- Coverage index → Pivoting and tunnels: indexes (evidence: `README.md`)
- Coverage index → Domain persistence: indexes (evidence: `README.md`)
- Coverage index → Forest and trust attacks: indexes (evidence: `README.md`)
- Coverage index → Defense evasion: indexes (evidence: `README.md`)
- Coverage index → CAPE exam reference: indexes (evidence: `README.md`)
- Coverage index → Further references: indexes (evidence: `README.md`)
- Methodology and lab → Domain enumeration: guides phase (evidence: `README.md`)
- Methodology and lab → Credential abuse: guides phase (evidence: `README.md`)
- Methodology and lab → Privilege escalation: guides phase (evidence: `README.md`)
- Methodology and lab → Lateral movement: guides phase (evidence: `README.md`)
- Methodology and lab → Domain persistence: guides phase (evidence: `README.md`)
- Methodology and lab → Forest and trust attacks: guides phase (evidence: `README.md`)
- Methodology and lab → Kerberos attacks: lists techniques (evidence: `README.md`)
- Methodology and lab → Delegation abuse: lists techniques (evidence: `README.md`)
- Methodology and lab → ACL and DACL abuse: lists techniques (evidence: `README.md`)
- Methodology and lab → CAPE exam reference: offers exam aid (evidence: `README.md`)