Active Directory Exploitation
Designed specifically for large-scale deployment,
Active Directory is a central component of most mid to
large-size organizations,
seamlessly handling multiple authentication types.
The complexity of Active Directory object permissions,
Kerberos delegation, and Active Directory trust in particular
sets the stage for several interesting and often-neglected
attack vectors that we will explore in this module.
As we will discover, a weak or insecure AD configuration in
any subsidiary or department of a large organization can lead to
complete compromise of that organization,
making this topic particularly relevant for penetration testers.