Skip to main content
hackosquad

red · Hard · 288 XP · 10 hours 20 minutes

Active Directory Attack Techniques

In this module, you will step into the shoes of an attacker and learn how real-world adversaries abuse Active Directory misconfigurations to gain complete control over a domain.

Tactical attack scenario

NovaTech is running an Active Directory domain with legacy Trust relationships. Your task is to penetrate the corporate network and compromise the primary domain controllers.

Learning objectives

  • Perform domain controller enumeration with BloodHound
  • Exploit Kerberos tickets (Kerberoasting & AS-REP Roasting)
  • Perform lateral movements via Pass-the-Hash (PtH)
  • Abuse weak ACL configurations to hijack Enterprise Admin accounts

Recommended background

Comfort with Linux, networking, and the foundational concepts for this module is recommended.

Prerequisite: Active Directory Security Fundamentals

Estimated duration: 10 hours 20 minutes.

This public overview contains no flags, credentials, or solution steps. Practise only in the provided authorized environment.

Sign up to access hackosquad