Active Directory & Kerberos Enumeration — INDRA

What problem does it solve?

This Skill helps identify and analyze potential vulnerabilities in Active Directory, focusing on Kerberos attack paths, AD misconfigurations, and other security concerns.

Core Features & Use Cases

• Active Directory Enumeration: Enumerate users, groups, service accounts, and SPNs to understand the domain structure.
• Kerberos Attack Paths: Detect Kerberoasting, AS-REP Roasting, and other Kerberos-based attacks.
• AD Misconfigurations: Identify misconfigurations such as null binds, guest access, and delegation issues.
• BloodHound Analysis: Analyze shortest paths to Domain Admin and identify high-value attack paths.
• Domain Trusts: Enumerate domain trusts and assess risks associated with bidirectional forest trusts.
• Guest & Anonymous Access: Check for enabled guest and anonymous access in the domain.
• Use Case: Use this Skill to conduct a comprehensive security assessment of an Active Directory environment, identifying potential attack vectors and misconfigurations.

Quick Start

Execute the 'network-pentest' skill to begin the Active Directory assessment process.