Active Directory Attack Paths Every Pentester Should Know

Active Directory as an Attack Surface

AD is the backbone of enterprise environments and a prime target...

Kerberoasting

Request service tickets for SPNs and crack them offline...

Pass-the-Hash

Reuse NTLM hashes without cracking them to move laterally...

DCSync

Mimic a domain controller to extract credential hashes from AD...