Active Directory

AutoDane at BSides Cape Town

07 December 2015 ~5 min By Dane Goodwin
Active Directory B-Sides Conferences Internals Post-Exploitation Tools Zacon
Given the prevalence of Microsoft Active Directory domains as the primary means of managing large corporate networks both globally and in South Africa specifically; one of the common first goals of many internal penetration tests is to get Domain Administrator (DA) level access. To assist with this, a plethora of tools and techniques exist, from the initial “in” through to elevation of privilege and eventually extracting and cracking all domain credentials.