Active Directory Read-Team Engagement & Lab Setup

Learn How to Build And Attack Advanced Active Directory Red Team Penetration Testing Lab

What you'll learn

Student will learn how to build active directory lab create forests and trust between forests

Learn how to enumerate information from Active Directory, including users, groups, computers, and trust relationships. Understand the importance of information

Learn how to abuse some active directory intended functionality to established foothold and escalate privilege

Identify common attack vectors in Active Directory, such as misconfigurations, weak passwords, and insecure group memberships. Understand how attackers exploit

Understand the importance of reconnaissance in penetration testing. Learn to use tools for AD reconnaissance, such as BloodHound and PowerView.

Explore common vulnerabilities in Active Directory, such as pass-the-hash attacks, Kerberoasting, and DCSync attacks.

Understand post-exploitation activities, including lateral movement and privilege escalation.

Understand the concept of trusts in Active Directory and how they can be exploited

Learn about common trust-based attacks, such as Golden Ticket attacks.

Requirements

Basic knowledge of Ethical Hacking

Willingness to Learn

Computer with minimum of 16 of RAM and 300 GB of HDD space corei5

Description

Understanding Windows Active Directory is an invaluable skill for security professionals for several compelling reasons1 Critical Infrastructure: Active Directory is a critical component in most Windows-based networks, serving as the backbone for authentication, authorization, and resource management. Penetrating Active Directory can lead to unauthorized access to sensitive information, making it a prime target for attackers. Understanding how to test and secure it is essential for protecting overall network security.2  Common Attack Vector: Active Directory is a common target for attackers attempting to compromise an organization's network. Knowing how to conduct penetration testing allows security professionals to identify and address vulnerabilities before malicious actors can exploit them.3 Risk Mitigation: By proactively testing Active Directory, security professionals can identify and mitigate potential risks and vulnerabilities. This proactive approach is essential for preventing security incidents and data breaches.4 Career Advancement: For individuals pursuing a career in cybersecurity, having expertise in Active Directory penetration testing is a valuable skill. Employers often seek professionals who can assess and enhance the security of critical infrastructure components like Active Directory.Red Team Operations: Active Directory penetration testing is a fundamental skill for red team operations. Red teams simulate real-world attacks to test an organization's defenses, and a strong understanding of Active Directory is essential for effective red teaming.In summary, learning Active Directory penetration testing is important for enhancing cybersecurity, preventing unauthorized access, meeting compliance requirements, and staying ahead of evolving cyber threats. It equips security professionals with the skills needed to protect critical IT infrastructure and respond effectively to security challenges.

Overview

Section 1: Introduction

Lecture 1 Introduction to Active Directory

Lecture 2 Lab Setup Overview

Section 2: Lab Setup

Lecture 3 Creating VMs and Downloading Evaluation Copies of Windows Servers and Clients

Lecture 4 Installing Windows Server 2019 as root Domain

Lecture 5 Installing AD-DS on ROOT-DC01

Lecture 6 Installing and Configuring Sql Server on ROOT-DC01

Lecture 7 Installing and Configuring the Child Domain

Lecture 8 Installing TRUSTED-DC03 for Forest Trust

Lecture 9 Installing and Configuring Sql Server on TRUSTED-DC03

Lecture 10 Installing and Configuring WIndows 10 Client Machine

Lecture 11 Building Metasploitable3 on Windows Server 2008

Lecture 12 Configuring Trust Relationship between Forests

Lecture 13 Creating Domain Users

Lecture 14 Creating Groups and GPO

Lecture 15 Foreign Group Membership Configuration

Lecture 16 Creating Mssql Server logins, Databases and login Impersonation

Section 3: Tools Installation

Lecture 17 Installing Remote Server management Tool (RSAT)

Section 4: Enumeration Using RSAT

Lecture 18 DC Enumeration with RSAT

Lecture 19 Domain Users Enumeration with RSAT

Lecture 20 Domain Groups Enumeration with RSAT

Lecture 21 Domain Computers Enumeration with RSAT

Lecture 22 Trusts Enumeration with RSAT

Section 5: Enumeration Using PowerView

Lecture 23 Getting PowerView

Lecture 24 DC Enumeration with PowerView

Lecture 25 Domain Users Enumeration with PowerView

Lecture 26 Domain Groups Enumeration with PowerView

Lecture 27 Domain Computers Enumeration with PowerView

Lecture 28 Trusts Enumeration with PowerView

Section 6: BloodHound

Lecture 29 Enumerating Users, Groups, ACLs, Computers with BloodHound

Section 7: Local Privilege Escalation

Lecture 30 Hunting for User's local admin right

Lecture 31 Exploiting mssql server impersonation to Escalate local Privilege

Section 8: Domain Privilege Escalation

Lecture 32 Kerberoasting with Rubeus

Lecture 33 DCSYNC

Lecture 34 Kerberos Unconstrained Delegation - Rubeus

Lecture 35 Kerberos Unconstrained Delegation - PrinterBug

Lecture 36 Kerberos Constrained Delegation

Lecture 37 Resource-Based Constrained Delegation Part 1

Lecture 38 Resource-Based Constrained Delegation Part 2

Lecture 39 Domain Privilege Escalation with Inveigh

Lecture 40 Domain Privilege Escalation – Bruteforcing Mssql Server

Lecture 41 Domain Privilege Escalation - Trustworthy Databases Part 1

Lecture 42 Domain Privilege Escalation - Trustworthy Databases Part 2

Section 9: Cross-Forest Trust Attack

Lecture 43 Enumerating Cross-Forest Users and Groups

Lecture 44 Cross-Forest ASRepRoasting

Lecture 45 Cross-Forest Kerberoasting

Lecture 46 ACL Attack Chain

Lecture 47 Foreign Group Membership Attack

Section 10: Domain Trusts - Child -> Parent Trusts

Lecture 48 Password Spray Admin Password reuse case

Lecture 49 DA to EA ExtraSIDs Attack

Section 11: Active Directory Persistence

Lecture 50 Golden Ticket

Lecture 51 Silver Ticket

Lecture 52 AdminSDHolder OverView

Lecture 53 AdminSDHolder and ACL Attack

Students who want tp become an Active Directory Pentesting Expert,Student Intending to sit for OSCP Exam,Students who want to know how build and Exploit Active Directory Lab