How to use AD misconfigurations and features in order to gain access or to escalate privileges. AD is in the heart of most of enterprise networks and is usually a main pilar for identity and access management. Owning AD usually means owning the complete enterprise, so it is quite interesting target for attacks. We will explore some of the most common attack venues against AD.