Misc

• AWS
• Command Injection
• Docker
• File Inclusion
• MSSQL
• PHP
• PHAR Deserialization
• Port Forward
• Request Smuggling
• SQL Injection
• SSRF
• SSTI
• WordPress

Mobile

• Android APK

Protocols

• Kerberos
• LDAP
• NFS
• SMB

Windows

• Logon Types and Privileges
• Services and Service Abuse
• Windows Installer and AlwaysInstallElevated

Active Directory

• ACLs
• ADCS
• Delegation
• gMSA - Group Managed Service Accounts
• Group Policy Object (GPO) Abuse
• LAPS - Local Administrator Password Solution
• NTLM & Kerberos Relay
• Shadow Credentials