文章博客

通过滥用 SSL/TLS 绕过 Web 应用程序防火墙
https://blog.pwn.al/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html

使用 Active Directory 中的 ACL 提升权限
https://blog.fox-it.com/2018/04/26/escalating-privileges-with-acls-in-active-directory/

进入区域：使用 adidnsdump 转储 Active Directory DNS
https://dirkjanm.io/getting-in-the-zone-dumping-active-directory-dns-with-adidnsdump/