Burning Down the Forest
During a penetration test, it is often beneficial to demonstrate
a forest compromise as an ultimate illustration
of design vulnerability.
We'll take two approaches
to accomplish this in the following sections.
We will leverage a compromised domain admin account in a
child domain and we'll leverage unconstrained
Kerberos delegation.