nmap, Cookies, SQL Injection, /var/logs, gobuster, XSS, Bypassing WAF, pypykatz, NTLM hash, Kerbrute, dnschef, bloodhound-python, Bloodhound, net rpc password, hashcat, Username Anarchy, evil-winrm, whoami /all, SeBackupPrivilege, nxc, Check the scheduled jobs, Getting NTLMv2 hash, net use, responder.