مسیر یادگیری (CAPE) HTB Academy – Active Directory Penetration Tester

The Active Directory Penetration Tester Job Role Path is designed for individuals who aim to develop skills in pentesting large Active Directory (AD) networks and the components commonly found in such environments. This path equips students with the skills needed to evaluate the security of AD environments, navigate complex Windows networks, and identify elusive attack paths. This path includes advanced hands-on labs where participants will practice techniques such as Kerberos attacks, NTLM relay attacks, and the abuse of services like AD Certificate Services (ADCS), Exchange, WSUS, and MSSQL. Students will also learn how to exploit misconfigurations in Active Directory DACLs and Domain Trusts, perform evasion tactics in Windows environments, and leverage Command and Control (C2) frameworks for post-exploitation activities. By combining theoretical foundations with practical exercises and a structured methodology for identifying AD vulnerabilities, this path enables students to conduct professional security assessments on complex AD infrastructures and effectively report security weaknesses discovered by chaining multiple vulnerabilities.

Modules Included

1. Active Directory Enumeration & Attacks
2. Active Directory LDAP
3. Active Directory PowerView
4. Active Directory BloodHound
5. Windows Lateral Movement
6. Using CrackMapExec
7. Kerberos Attacks
8. DACL Attacks I
9. DACL Attacks II
10. NTLM Relay Attacks
11. ADCS Attacks
12. Active Directory Trust Attacks
13. Intro to C2 Operations with Sliver
14. Introduction to Windows Evasion Techniques
15. MSSQL, Exchange, and SCCM Attacks

HTB Academy – Active Directory Penetration Tester