• Active Directory Architecture
• Domain Components
• Forests & Trees
• Organizational Units (OUs)
• Users, Groups & Computers
• Domain Controllers
• NTLM Authentication
• Kerberos Authentication
• LDAP Basics
• Group Policy Objects (GPO)
• AD Security Model
• Common Attack Paths

• Active Directory Lab Setup
• BloodHound
• SharpHound
• PowerView
• LDAP Enumeration
• DNS Enumeration
• SMB Enumeration
• Initial Domain Enumeration
• User & Group Discovery

• LLMNR Poisoning
• NBT-NS Poisoning
• Responder
• Inveigh
• NTLM Hash Capture
• Relay Attack Concepts
• Initial Credential Collection

• Password Policies
• Domain Password Enumeration
• User Enumeration
• Password Spraying
• Lockout Policies
• Internal Authentication Testing
• Credential Validation

• Enumerating Domain Information
• Shares Enumeration
• User Sessions
• Local Administrators
• Group Membership Analysis
• Security Controls Enumeration
• Living Off the Land (LOLBins)

• Kerberos Fundamentals
• Service Principal Names (SPNs)
• Kerberoasting
• AS-REP Roasting
• Ticket Analysis
• Service Account Security
• Offline Password Cracking

• Access Control Lists (ACLs)
• BloodHound Path Analysis
• ACL Enumeration
• WriteDACL Abuse
• GenericAll
• GenericWrite
• ForceChangePassword
• DCSync
• Privilege Escalation Techniques

This course is designed to provide participants with comprehensive knowledge and practical skills to assess the security of Microsoft Active Directory environments. Participants will learn how to enumerate Active Directory, identify common misconfigurations, abuse authentication and authorization weaknesses, perform privilege escalation, exploit trust relationships, and conduct post-compromise activities using industry-standard tools and real-world attack methodologies.

Participants should have a basic understanding of computer networks, TCP/IP, Windows operating systems, and cybersecurity fundamentals. Familiarity with Windows Server, Active Directory concepts, Windows authentication, PowerShell, and command-line environments is recommended. Basic knowledge of network security, domain environments, and common penetration testing techniques will also be helpful. Prior professional Active Directory penetration testing experience is not mandatory.

• Penetration Testers
• Red Team Members
• Security Consultants
• Active Directory Security Engineers
• SOC Analysts
• Blue Team Professionals
• Incident Responders
• Cybersecurity Students
• IT Administrators seeking offensive security knowledge

This course provides comprehensive hands-on training in Offensive Active Directory Penetration Testing, covering realistic attack vectors, vulnerability identification, and ethical penetration testing methodologies.

Penetration testers, security consultants, red team members, system administrators, and cybersecurity enthusiasts looking to specialize in offensive security.

Yes. All exercises are conducted in dedicated, authorized virtual lab environments using industry-standard penetration testing tools.

Upon successfully completing the training and practical assessments, you will receive a verified Certificate of Completion in Offensive Active Directory Penetration Testing.