Active_Directory.md

Hacking Active Directory - Learning and Practice

Hands on Labs / Systems for AD Practice

Throwback lab - TryHackMe - Available outside THM subscription

HoloLive - TryHackMe - Requires THM Subscription

Wreath - TryHackMe - Pivoting / Empire Practice but no AD. Requires THM Subscription or 7 day streak for free users.

HTB Active Directory 101 - Requires HTB Subscription

TryHackMe Rooms with AD Practice - Most require THM Subscription

• Active Directory Basics
• Attactive Directory
• Post Exploitation Basics
• Attacking Kerberos
• Zero Logon
• Vulnet: Roasted
• Vulnet: Active
• RazorBlack
• Enterprise

Dante - HTB ProLab - appears to have limited AD but plenty of pivoting practice. Pricey and probably overkill for OSCP study

Courses that Cover AD (with hands on)

Practical Ethical Hacking - TCM Academy

Movement, Pivoting & Persistence - TCM Academy

Attacking and Defending Active Directory - Pentester Academy - Live course (extra $$) or Pre-recorded course/labs with subscription

AD Methodology & Further Reading

Attacking Active Directory

Active Directory Attacks

Active Directory Exploitation Cheat Sheet

AD Attack / Defense - Huge list of resources

OSCP Tools allowed (related to AD)

(from OSCP Exam Update 11/1/22)

• BloodHound
• SharpHound
• PowerShell Empire
• Covenant
• Powerview
• Rubeus
• evil-winrm
• Responder (Spoofing is not allowed in the labs or on the exam)
• Crackmapexec
• Mimikatz