Back

Active Directory Pentesting Engineer

This intensive training course provides participants with hands-on experience in hacking techniques, specifically focusing on Active Directory exploitation.

Tarek

Lead Trainer

45 lectures

Description

This intensive training course provides participants with hands-on experience in hacking techniques, specifically focusing on Active Directory exploitation. The training is designed to simulate real-life scenarios exploited by threat actors, offering practical examples and exercises to understand the methods employed by attackers. Participants will gain a deep understanding of the vulnerabilities within Active Directory environments and learn how to effectively defend against malicious intrusions.

Who is this course for?

• Cybersecurity professionals wanting to advance their Active Directory exploitation skills

• Red teamers, penetration testers and ethical hackers

• IT administrators responsible for securing Active Directory environments

• Incident responders and security analysts focused on threat detection and response

• Anyone interested in understanding the tactics employed by threat actors to compromise organizational networks

Coming soon

Course Curriculum

Active Directory introduction

4 lessons

Active Directory components

Premium

Trees and forests in Active Directory

Premium

Interacting with AD (admin, client and hacker tools and commands)

Premium

Basic Active Directory enumeration

Premium

Entra ID Introduction

3 lessons

Why Entra ID?

Premium

Introduction to Entra ID

Premium

Difference between Entra ID and on-prem AD

Premium

User Accounts Deep Dive

4 lessons

Understanding security principles

Premium

Deep dive into security contexts

Premium

Understanding SID/RID and their abuses

Premium

Hunting for interesting users

Premium

Groups and OUs

3 lessons

What are groups and OUs and why do we need both

Premium

Understanding types, scopes and attributes

Premium

Enumerating and hunting for interesting groups and OUs

Premium

Access Control in Details

4 lessons

Understanding ACEs, ACLs, DACLs and SACLs

Premium

Practical examples of bad and exploitable permissions

Premium

Enumerating and honing on bad permissions

Premium

Abusing bad permissions for privilege escalation

Premium

Group Policy Objects

3 lessons

Understanding GPOs and their typical uses

Premium

Enumerating and identifying exploitable GPOs

Premium

Exploiting GPOs for persistence and escalation

Premium

Lateral Movement

2 lessons

How lateral movement happens in AD environments

Premium

Abusing different protocols for lateral movement

Premium

Bloodhound: Discovering Attacks Paths

3 lessons

Bloodhound for offense and defense

Premium

Bloodhound setup and basic queries

Premium

Custom queries with Bloodhound

Premium

On-prem Password Attacks

4 lessons

Password profiling

Premium

Understanding password policies

Premium

Enumerating password policies

Premium

Password spraying

Premium

Entra ID Password Attacks

3 lessons

Username enumeration in Entra ID

Premium

Safe password spraying

Premium

Conditional Access Policies and possible bypasses

Premium

Hashes and Authentication Protocols

6 lessons

Different types of hashes

Premium

Understanding MS-NLMP

Premium

Capturing NTLMv2 hashes

Premium

Understanding LSASS

Premium

Dumping LSASS

Premium

Pass-the-hash

Premium

Kerberos Attacks

6 lessons

Kerberos deep dive

Premium

Finding and exploiting AS-REP Roastable accounts

Premium

When and how to Kerberoast

Premium

Silver Ticket Attack

Premium

Golden Ticket Attack

Premium

Delegation Attacks

Premium