Active Directory Pentesting Resources 📚
This post contains Active Directory Pentesting resources to prepare for new OSCP (2022) exam.
Youtube/Twitch Videos
Active Directory madness and the Esoteric Cult of Domain Admin! - alh4zr3d
TryHackMe - Advent of Cyber + Active Directory - tib3rius
Common Active Directory Attacks: Back to the Basics of Security Practices - TrustedSec
How to build an Active Directory Lab - The Cyber Mentor
Zero to Hero (Episode 8,9,10) - The Cyber Mentor
Blogs
Top Five Ways I Got Domain Admin on Your Internal Network before Lunch
https://medium.com/@Dmitriy_Area51/active-directory-penetration-testing-d9180bff24a1
https://book.hacktricks.xyz/windows/active-directory-methodology
https://zer1t0.gitlab.io/posts/attacking_ad/
Cheatsheets
https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet
https://infosecwriteups.com/active-directory-penetration-testing-cheatsheet-5f45aa5b44ff
TryHackMe VIP/Free Labs
Active Directory Basics - Easy
Post-Exploitation Basics - Easy
Vulnnet Roasted - Easy
Attacktive Directory - Medium
raz0r black - Medium
Enterprise - Medium
Vulnnet Active - Medium
Zero Logon - Hard
TryHackMe Paid Labs ($10 - $60 / month)
Holo - Hard
Throwback - Easy
HackTheBox Subscription/Free Labs
Forest - Easy
Active - Easy
Fuse - Medium
Cascade - Medium
Monteverde - Medium
Resolute - Medium
Arkham - Medium
Mantis - Hard
APT - Insane
HackTheBox Pro Labs ($95 + $27/month)
Dante - Beginner
Offshore - Intermediate
RastaLabs - Intermediate
Cybernetics - Advanced
APT Labs - Advanced
HackTheBox Academy (Paid)
ActiveDirectory LDAP - Medium
ActiveDirectory Powerview - Medium
ActiveDirectory BloodHound - Medium
CyberSecLabs Walkthrough
Certifications
OSCP - Offensive Security Certified Professional - Offsec - Intermediate
CRTP - Certified Red Team Professional - Pentester Academy - Beginner
CRTE - Certified Red Team Expert - Pentester Academy - Expert
CRTO - Certified Red Team Operator - Zeropoint Security - Intermediate
Courses
Practical Ethical Hacking - TCM Security
Active Directory Pentesting Full Course - Red Team Hacking
Red Team Ethical Hacking - Beginner
Red Team Ethical Hacking - Intermediate
Tools and Repositories
Proving Grounds Playground - Offensive Security
Hutch, Heist & Vault