Evaluate Active Directory Vulnerabilities through Reconnaissance and Enumeration
About This Course
In this module, participants will gain in-depth knowledge of Windows Active Directory (AD) enumeration and exploitation techniques. The module covers domain reconnaissance, AD roles, and the reliance of AD on DNS and LDAP. Additionally, learners will explore common attack vectors for Microsoft Exchange Server and SQL Server, including privilege escalation techniques. Through practical exercises, participants will develop the skills necessary to identify and exploit vulnerabilities within AD environments, ensuring they can effectively assess and secure complex Windows networks.
What You'll Learn
LO2: Locate key servers and analyze internal browse lists and accessible SMB shares.
LO3: Understand the reliance of Active Directory on DNS and LDAP, and analyze Group Policy and Local Security Policy settings.
LO4: Identify and exploit common attack vectors for Microsoft Exchange Server.
LO5: Recognize common attack vectors for Microsoft SQL Server.
LO6: Understand and execute privilege escalation techniques for systems compromised via database connections.
Entry Requirements
Language: Obtained at least Grade C6 in GCE 'O' Level English Language, or
Be able to listen, speak, read and write English at a proficiency level equivalent to WSQ Workplace Literacy (WPLN) Level 5. Academic: Obtained at least Grade C6 in 3 GCE ‘O’ Level Subject, or Higher NITEC or equivalent.