Active Directory Enumeration & Attacks

ℹ️ Informations¶

• 🌐 Website: HackTheBox
• 🔥 Level: Medium
• 📚 Category: Offensive
• 🔗 Link: Active Directory Enumeration & Attacks

📜 Module description¶

Active Directory (AD) is the leading enterprise domain management suite, providing identity and access management, centralized domain administration, authentication, and much more. Due to the many features and complexity of AD, it presents a large attack surface that is difficult to secure properly. To be successful as infosec professionals, we must understand AD architectures and how to secure our enterprise environments. As Penetration testers, having a firm grasp of what tools, techniques, and procedures are available to us for enumerating and attacking AD environments and commonly seen AD misconfigurations is a must.

📋 Sections¶

1. External Recon and Enumeration Principles
2. Initial Enumeration of the Domain
3. LLMNR/NBT-NS Poisoning - from Linux
4. LLMNR/NBT-NS Poisoning - from Windows
5. Enumerating & Retrieving Password Policies
6. Password Spraying - Making a Target User List
7. Internal Password Spraying - from Linux