Active Directory Security – 101: introduction to Active Directory security

by do son · Published July 15, 2021 · Updated January 22, 2022

Active Directory Security – 101

This repository contains an introductory class on Active Directory security. The goal is to teach the basics about Active Directory and the relevant authentication protocols as well as find and exploit common flaws and misconfigurations.

Content

Slides containing the theoretical stuff
Lab Setup Guide containing instructions on how to set up a lab. Includes terraform scripts to automatically setup a lab in Microsoft Azure (not mandatory but speeds up the process if you are already familiar with Azure)
Exercises to walk through and practice different attack vectors
- Exercise 1: Reconnaissance
- Exercise 2: NTLM and Pass-the-Hash
- Exercise 3: Coerced Authentication and NTLM Relay
- Exercise 4: Kerberos Roasting
- Exercise 5: Kerberos Classic Delegation
- Exercise 6: Kerberos Ressource-based Constrained Delegation
- Exercise 7: ACL
- Exercise 8: Persistence

Where to start?

Go through the Lab Setup Guide to build a lab environment.
Go through the slides. In the slides, you will find references to the lab exercises at regular intervals. Go through the corresponding exercise to practice what you’ve learned until then.
Go on 🙂 – this is an introductory class. There’s a whole lot more craziness to explore in the wondrous world of Active Directory and we haven’t even talked about AAD yet.