Hacking (and Defending) Active Directory – Live Training

Description

Next Live Training Session is Friday, September 19th, 2025

Join the Waitlist to be Notified of Upcoming Live Training Dates.

One (1) Day Live Training Access
Includes 50 Hours of Online Virtual Lab Access
6 Months Access to On-Demand Training
1 Practical Junior Penetration Tester (PJPT) Certification Voucher (12 Months Access)

With this package, students receive access to the one-day training, which includes the following curriculum*:

Active Directory Overview

• What is Active Directory?
• Physical Active Directory Components
• Logical Active Directory Components

Pre-Compromise AD Attacks and Defenses

• LLMNR Poisoning Attacks and Defenses
• SMB Relay Attacks and Defenses
• IPv6 Attacks and Defenses
• AS-REP Roasting Attacks and Defenses
• Passback Attacks and Defenses
• Inside the Attacker’s Mindset

Post-Compromise AD Enumeration

• Reviewing common enumeration tools, such as: Bloodhound, Plumhound, Pingcastle, ldapdomaindump, and much more
• Understanding common mistakes from an Administrator’s perspective

Post-Compromise AD Attacks and Defenses

• Pass Attacks and Defenses
• Kerberoasting Attacks and Defenses
• Token Impersonation Attacks and Defenses
• URL File Attacks Attacks and Defenses
• GPP Attacks and Defenses
• Credential Dumping Attacks and Defenses
• Certificate Attacks and Defenses
• Persistence Attacks and Defenses
• Inside the Attacker’s Mindset – Revisited

AD Case Studies

• Real case studies from real pentests AKA “How they got owned”

*Curriculum is dependent on class skillset and other varying factors. Curriculum may change at the instructor’s discretion.

Please be advised, your computer must have the ability to run virtualized environments in software such as VMWare, VirtualBox, etc.

• 8GB RAM
• 256GB HDD
• Up-to-Date Operating System & Internet Browser
• Stable internet connection