# CRTP

{% embed url="<https://mentorcruise.com/blog/how-to-pass-crtp-and-become-certified-red-team-professional-b4b5c/>" %}

{% embed url="<https://www.reddit.com/r/oscp/comments/10g140r/crtp_some_practical_questions_about_exam_lab_price/>" %}

{% embed url="<https://github.com/0xJs/CRTP-cheatsheet>" %}

{% embed url="<https://www.noobsec.net/crtp-cheatsheet/>" %}

{% embed url="<https://book.hacktricks.xyz/windows-hardening/stealing-credentials/credentials-mimikatz>" %}

{% embed url="<https://github.com/hausec/Bloodhound-Custom-Queries>" %}

{% embed url="<https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet>" %}

{% embed url="<https://countuponsecurity.files.wordpress.com/2016/09/jtr-cheat-sheet.pdf>" %}

**Videos:**

* ["How a Golden Ticket Attack Works" by NetWrix](https://www.youtube.com/watch?v=v0xKYSkyI6Q)
* ["How a Silver Ticket Attack Works" by NetWrix](https://www.youtube.com/watch?v=k9IGSmZaEHk)
* ["How a DCSync Attack Works" by NetWrix](https://www.youtube.com/watch?v=_m3u13Df7Fc)
* ["Kerberos Authentication Explained" by Destination Certification](https://www.youtube.com/watch?v=5N242XcKAsM)
* ["Kerberos and Attacks" SANS Webcast by Tim Medin](https://www.youtube.com/watch?v=LmbP-XD1SC8)
* ["Kerberos Delegation and Protocol Transition" by F5 DevCentral](https://www.youtube.com/watch?v=UGWP4ewxcTA)
* ["Certified Pre-Owned: Abusing Active Directory Certificate Services" by Will Schroeder & Lee Christensen](https://www.youtube.com/watch?v=ejmAIgxFRgM)

\\

**Related Reading:**

* [A Red Teamer's Guide to GPOs and OUs](https://wald0.com/?p=179\&source=post_page---------------------------)
* [ActiveDirectory Module - Microsoft Documentation](https://docs.microsoft.com/en-us/powershell/module/activedirectory/?view=windowsserver2022-ps)
* ["He Perfected a Password-Hacking Tool - Then the Russians Came Calling"](https://www.wired.com/story/how-mimikatz-became-go-to-hacker-tool/) by Wired (story behind Mimikatz)
* [Exploiting Unconstrained Delegation](https://medium.com/@riccardo.ancarani94/exploiting-unconstrained-delegation-a81eabbd6976)
* [Service Principal Names (SPNs) - Microsoft Documentation](https://docs.microsoft.com/en-us/windows/win32/ad/service-principal-names)
* [What is a Pass-the-Hash Attack?](https://www.crowdstrike.com/cybersecurity-101/pass-the-hash/)
* [Cracking Kerberos TGS Tickets Using Kerberoast – Exploiting Kerberos to Compromise the Active Directory Domain](https://adsecurity.org/?p=2293)

{% embed url="<https://www.alteredsecurity.com/adlab>" %}
