Active Directory Attacks

To perform Kerberoasting against an Active Directory domain controller, you use tools like Rubeus or Impacket to extract service ticket hashes. This skill provides the exact commands needed for credential harvesting.

Yes, you can exploit critical vulnerabilities like ZeroLogon (CVE-2020-1472) and PrintNightmare (CVE-2021-1675) using tools such as Impacket and Mimikatz. The skill details the exploitation steps for these specific Windows CVEs.

The best way to perform Active Directory reconnaissance and discover domain trust relationships is by using BloodHound. This skill provides instructions for mapping users, groups, and trust structures.

Yes, you need tools like Rubeus and Mimikatz to execute Pass-the-Hash and Golden Ticket attacks in Windows environments. The skill outlines how to leverage these tools for lateral movement and privilege escalation.

DCSync works for credential theft in Active Directory penetration testing by simulating a domain controller to request password hashes. The skill provides commands using Impacket and Mimikatz to perform this credential harvesting technique.

AS-REP Roasting for credential harvesting in Active Directory is limited because it requires pre-authentication to be disabled for target accounts. This skill covers how to identify vulnerable users and extract hashes using Impacket.