Active Directory Attacks

What problem does it solve?

This Skill provides comprehensive guidance and tools for attacking Microsoft Active Directory environments, enabling red team operations and penetration testing.

Core Features & Use Cases

• Reconnaissance: Discover domain structure, users, groups, and sensitive information.
• Credential Harvesting: Employ techniques like Kerberoasting, AS-REP roasting, and DCSync to obtain credentials.
• Lateral Movement & Privilege Escalation: Utilize methods like Pass-the-Hash, Golden Tickets, and NTLM relay to gain higher privileges and access.
• Vulnerability Exploitation: Exploit critical CVEs like ZeroLogon and PrintNightmare.
• Use Case: A penetration tester needs to simulate a real-world attack on a client's Active Directory domain to identify security weaknesses before malicious actors do.

Quick Start

Use the Active Directory Attacks skill to enumerate domain controllers and find service accounts with SPNs.