Step into the world of Active Directory attacks, from breaching the domain to lateral movement, then prove yourself in two live challenges.

Active Directory sits at the heart of nearly every corporate network, which makes it one of the most valuable targets in any engagement. This module takes you behind the scenes, starting with how AD authentication actually works under the hood before walking through the full attack chain: breaching the domain, enumerating users and machines, harvesting credentials, and moving laterally to expand your foothold. Two live AD challenges close the module, so the full chain is something you’ve executed end to end.

Active Directory Basics

This room will introduce the basic concepts and functionality provided by Active Directory.

Intro to AD Authentication

Examine how AD authentication works and the various protocols it uses.

Intro to AD Breaching

Explore AD breaching including username enumeration, password spraying, coercion, and mitigations.

AD: Basic Enumeration

Learn how to enumerate an Active Directory network and get initial access.

AD: Authenticated Enumeration

Explore how to breach and enumerate Active Directory with an authenticated account.

Intro to Credential Harvesting

Learn how credentials are stored, cached, and exposed in Windows and Active Directory environments.

Intro to AD Lateral Movement

Explore AD lateral movement and pivoting using PsExec, WinRM, PtH, and SSH tunnels.

Forward

Now is the time to move forward in this AD challenge.

Lock in what you learned with a recap. Earn points and keep your streak.

Need to know

Windows Fundamentals

Get hands-on access to Windows and it's security controls. These basics will help you in identifying, exploiting and defending Windows.

Networking

Learn about the OSI model and TCP/IP networking layers. Explore the different plaintext and secure networking protocols that we use every day.

Next steps

Pentesting Methodologies and Reporting

Understand the methodology and reporting behind every professional pentest, from threat modeling and scoping to re-testing fixes.

What are modules?

A learning pathway is made up of modules, and a module is made of bite-sized rooms (think of a room like a mini security lab).

Hierarchical diagram showing how learning pathways contain modules, which contain individual rooms.

Active Directory Security Testing Basics