> For the complete documentation index, see [llms.txt](https://heapbytes.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://heapbytes.gitbook.io/notes/active-directory/attack-list-for-pentest.md).

# Attack list for pentest

### Passback attack 

If there's a printer sitting on a network with default credentials or if we have access to the printer, we can try this attack

{% embed url="<https://medium.com/r3d-buck3t/pwning-printers-with-ldap-pass-back-attack-a0d8fa495210>" %}