Attacking And Defending Active Directory: AD Pentesting

Embark on a cybersecurity journey with our course, “Attacking and Defending Active Directory.” This comprehensive program is tailored for both cybersecurity enthusiasts and professionals seeking to master the complexities of Active Directory security and Active Directory Pentesting.

The course kicks off with fundamental topics such as Active Directory basics, authentication processes, and essential PowerShell and file transfer skills.

• Gain an in-depth understanding of Active Directory structure and components.
• Explore the intricacies of domains, forests, trust relationships, and organizational units.
• Learn to identify and assess vulnerabilities within Active Directory configurations.
• Analyze Group Policy settings and other security parameters for weaknesses.
• Explore common misconfigurations and security weaknesses in Active Directory.
• Develop proficiency in exploiting vulnerabilities to gain unauthorized access.
• Develop strategies for securing and hardening Active Directory environments.
• Understand best practices for defending against common attack techniques.

In the initial stages, participants will build a solid foundation in understanding the structure of Active Directory, exploring its components, organizational units, and trust relationships. The focus then shifts to authentication mechanisms, ensuring a secure environment for user identities and access controls. The course further hones skills in PowerShell and file transfer techniques, providing essential tools for effective penetration testing in a Windows environment for Active Directory Pentesting.

As the journey progresses, participants will delve into the heart of offensive security, learning to breach, enumerate, and exploit vulnerabilities within Active Directory environments. Engaging lectures, hands-on labs, and real-world simulations offer a dynamic learning experience. The course culminates in a comprehensive understanding of lateral movement, pivoting, persistence strategies, and advanced exploitation techniques. Throughout the program, ethical hacking principles and responsible disclosure practices are emphasized, ensuring participants are well-equipped to navigate, assess, and fortify Active Directory environments confidently.

Join us in mastering the art of attacking and defending Active Directory—enroll now to elevate your cybersecurity expertise in Active Directory Pentesting!

Course Curriculum:

1. Introduction
   1. Introduction
2. Active Directory Basics
   1. Active Directory Basics
   2. Task
   3. Quiz
3. Active Directory Authentication
   1. Active Directory Authentication Overview
   2. Hashing algorithms in windows
   3. Kerberos basics
   4. Components of kerberos
   5. kerberos explanation with diagram
   6. kerberos explanation with diagram
   7. Group policy in active directory
   8. Task
   9. Quiz
4. Active Directory Pentesting Lab setup
   1. Overview of lab setup
   2. Necessary files for lab setup
   3. Domain controller installation and setup
   4. Windows client installation
   5. Domain Controller configuration
   6. Joining computers with domain controller
   7. Client machines configuration
   8. Client machines configurations -2
5. Powershell Basics and file transfer basics
   1. Powershell overview
   2. Powerhsell commands practical
   3. File transfer methods overview
   4. File transfer practical
   5. Quiz
6. Breaching In Active Directory Pentesting
   1. Breaching overview
   2. OSINT and phishing
   3. Initial access using web attacks
   4. LLMNR poisoning overview and mitigations
   5. LLMNR poisoning practical attack using SMB
   6. LLMNR poisoning practical attack using WPAD
   7. SMB relay attack overview and mitigations
   8. SMB relay attack practical
   9. AS-REP Roasting overview
   10. AS-REP Roasting practical attack
   11. PasswordSpray attack overview
   12. PasswordSpray attack practical
   13. More methods of initial access on AD
   14. Breaching mitigations
   15. Quiz
7. Enumeration In Active Directory Pentesting
   1. Enumeration in active directory overview
   2. Enumeration using powershell native commands
   3. PowerView overview
   4. PowerView – 1
   5. Lab Update
   6. PowerView – 2
   7. PowerView – 3
   8. BloodHound overview
   9. BloodHound Practical
   10. AD lab troubleshooting
   11. Task
   12. Quiz
8. Lateral Movement in Active Directory Pentesting
   1. Lateral movement overview
   2. Pass-the-hash attack overview and mitigations
   3. Pass-the-hash attack practical
   4. Pass-the-ticket overview
   5. Pass-the-ticket attack practical
   6. Overpass-the-hash overview
   7. Overpass-the-hash attack practical
   8. RDP Hijacking overview
   9. RDP Hijacking attack practical
   10. Task
   11. Quiz
9. Pivoting In Active Directory Pentesting
   1. Pivoting intro
   2. Lab setup overview
   3. Chisel intro
   4. Pivoting practical
   5. Quiz
10. Exploitation In Active Directory Pentesting
    1. Exploitation overview
    2. Kerberosting overview
    3. kerberosting Practical
    4. Exploiting permission delegation overview #1
    5. Exploiting permission delegation practical #1
    6. Exploiting permission delegation overview #2
    7. Exploiting permission delegation practical #2
    8. Group memebership abuse overview #1
    9. Group memebership abuse practical #1
    10. Group memebership abuse overview #2
    11. Group memebership abuse practical #2
    12. More on group membership abuse
    13. GPO abuse overview
    14. GPO abuse practical
    15. Extracting logged on admins hashes
    16. Printnightmare attack overview
    17. Printnightmare attack practical
    18. Zerologgon attack overview
    19. Zerologgon attack practical
    20. Keberos delegation overview
    21. Task
    22. Quiz
11. Persistence In Active Directory Pentesting
    1. Persistance overview
    2. Golden and silver ticket attack overview and mitigations
    3. Golden and silver ticket attack practical
    4. Diamond ticket attack overview
    5. Diamond ticket attack practical
    6. DCSync overview
    7. DCSync attack practical
    8. DSRM abuse overview
    9. DSRM Abuse practical
    10. GPO for persistance
    11. Task
    12. Quiz
12. Bonus Lecture
    1. Bonus lecture

Thank You,

Vivek Pandit