LLMNR / NBT-NS Poisoning
SMB Relay Attacks
IPv6 DNS Takeover Attacks
Pass-the-Password
Pass-the-Hash
Token Impersonation
Kerberoasting
Golden Ticket
PowerView / BloodHound etc
Credential Dumping with Mimikatz