Active Directory attacks
Active Directory is a high-profile target for attackers. Because of its common architecture (single point), it is a targeted system. There are many Active Directory attacks. It is a complex system, so the following subsections will discuss different types of attacks from different attacking vectors.
PowerView
Reconnaissance is a crucial step in information security. PowerView is an amazing recon tool – it is a domain-network situational awareness tool. You can grab it from https://github.com/PowerShellMafia/PowerSploit/blob/master/Recon/PowerView.ps1.
As usual, clone the project or simply download it as a .zip file, as shown:
git clone https://github.com/PowerShellMafia/PowerSploit.git
PowerView will give you the ability to perform many reconnaissance tasks, as follows:
- Users:
Get-NetUser - Groups:
Get-NetGroup - Sessions:
Get-NetSession - GPO locations:
Find-GPOLocation - Active Directory objects:
Set-ADObject - Forests:
Get-NetForest
Kerberos attacks
Kerberos is a high-profile target...
