> For the complete documentation index, see [llms.txt](https://www.xn--hy1b43d247a.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.xn--hy1b43d247a.com/privilege-escalation/ad.md).

# AD 권한 상승

- [Active Directory Certificate Services (ADCS)](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/adcs.md)
- [ESC1](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/adcs/esc1.md)
- [ESC8](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/adcs/esc8.md)
- [Shadow Credentials](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/shadow-credentials.md)
- [noPac](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/nopac.md)
- [Kerberoasting](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/kerberoasting.md)
- [AS-REP Roasting](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/asrep-roasting.md)
- [DHCPv6 포이즈닝](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/dhcpv6.md): T1557.003
- [Resource-Based Constrained Delegation (RBCD)](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/rbcd.md)
- [SCCM](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/sccm.md)
