Shibuya - Vulnlab
active directory, cross-session relay, esc1
Abusing Unconstrained Delegation
Abusing Unconstrained Delegation from linux
Redelegate - Vulnlab
active directory, mssql, ACLs, delegation
Retro2 - Vulnlab
Pre-Windows 2000 Computers, ACLs, RpcEptMapper registry key exploit
Reflection - Vulnlab
MSSQL, NTLM relay attacks, LAPS, and RBCD
Windows Privilege Escalation
practical techniques for abusing some windows privileges and built-in security groups
Abusing Resource-Based Constrained Delegation
Notes on how to abuse Resource-Based Constrained Delegation (RBCD) and SPN-less RBCD from linux