> For the complete documentation index, see [llms.txt](https://oscp.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oscp.adot8.com/active-directory/post-domain-compromise.md).

# Post-Domain Compromise

## Playbook

* Do it again
  * Take a different approach
  * Find more vulnerabilities
  * Provide more value to the customer
* [Dump the NTDS.dit](/active-directory/post-domain-compromise/dumping-the-ntds.dit.md) and crack the passwords
* Find Shares and sensitive information
* Persistence via creating a Domain Admin account or [Golden Ticket](/active-directory/post-domain-compromise/golden-ticket-attack.md)
* Plant a flag :P