Pwning Reflection Using NTLM Reflection
Pwning Reflection from Vulnlab using the new NTLM Reflection attack
Shibuya - Vulnlab
active directory, cross-session relay, esc1
Abusing Unconstrained Delegation
Abusing Unconstrained Delegation from linux
Redelegate - Vulnlab
active directory, mssql, ACLs, delegation
Retro2 - Vulnlab
Pre-Windows 2000 Computers, ACLs, RpcEptMapper registry key exploit
Reflection - Vulnlab
MSSQL, NTLM relay attacks, LAPS, and RBCD
Windows Privilege Escalation
practical techniques for abusing some windows privileges and built-in security groups