Introduction At this point in our engagement we have credentials for r.nilson - obtained through password spraying, as covered in the first post. With those credentials we ran Kerberoasting agains...

Introduction In Active Directory Penetration Testing: How It All Starts I mentioned both AS-REP Roasting and Kerberoasting as techniques for getting a first credential. But I glossed over the deta...

Introduction We’ve covered the path from a Linux foothold to Active Directory enumeration and getting first credentials in Active Directory Penetration Testing: How It All Starts. From there, we w...

Introduction In the previous post - Active Directory Penetration Testing: How It All Starts - I briefly showed how Responder fits into the picture when you’re stuck in a network segment with nothi...

Introduction If we’re talking about Active Directory pentesting, we’re already inside the client’s internal network. (Not a victim’s network - that would be illegal, and also a very different kind...