Active Directory Exploitation Techniques

📋 Course Outline

1. Active Directory fundamentals
2. AS-REP roasting
3. Kerberoasting
4. GPO abuse and detection
5. DCSync attack
6. Golden Ticket attacks
7. Kerberos delegation abuse
8. RPC coercion attacks

📖 1. Active Directory fundamentals

🔑 Key Concepts & Definitions

• Active Directory : A directory service for Windows enterprise environments that centralizes management and provides authentication, authorization, and related directory functions.
• LDAP : A network protocol used for systems to communicate with Active Directory so clients can query and receive directory information from domain controllers.
• Domain Controller : A server role that administers an Active Directory domain and provides authentication and authorization with the highest authority within its directory environment.
• NTDS.DIT : An Active Directory data-store database file stored by domain controllers in %SystemRoot%\NTDS that holds directory information for users and services.
• Organizational Unit : A logical container in Active Directory used to organize users, groups, computers, and other OUs for permissioning and policy targeting.

📝 Essential Points