> For the complete documentation index, see [llms.txt](https://michel-disbergen.gitbook.io/hack-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://michel-disbergen.gitbook.io/hack-notes/active-directory/_vulnerabilities.md).

# \_vulnerabilities

- [Certificate Vulnerabilities](https://michel-disbergen.gitbook.io/hack-notes/active-directory/_vulnerabilities/certificate-vulnerabilities.md)
- [SMB relay attack](https://michel-disbergen.gitbook.io/hack-notes/active-directory/_vulnerabilities/smb-relay-attack.md)
- [LLMNR Poisoning](https://michel-disbergen.gitbook.io/hack-notes/active-directory/_vulnerabilities/llmnr-poisoning.md)
- [IPv6 DNS takeover](https://michel-disbergen.gitbook.io/hack-notes/active-directory/_vulnerabilities/ipv6-dns-takeover.md)
- [Kerberoasting](https://michel-disbergen.gitbook.io/hack-notes/active-directory/_vulnerabilities/kerberoasting.md)
- [AS-REP roasting](https://michel-disbergen.gitbook.io/hack-notes/active-directory/_vulnerabilities/as-rep-roasting.md)