Hacking & Defending Active Directory

انظر إلى Active Directory بعين المهاجم ثم حصّنه. تتعرّف إلى بنيته، والهجمات الشائعة قبل الاختراق وبعده، والاستطلاع بأدوات مثل BloodHound وPingCastle، والدفاعات التي توقف كل أسلوب.

يوم واحدمتوسط5 وحدات

سجّل أو استفسر ←اسأل عبر واتساب

نظرة عامة

ما ستتعلّمه

المحتوى التقني أدناه معروضٌ باللغة الإنجليزية كما ورد في منهاج الدورة، حفاظاً على دقّة المصطلحات.

Understand the structure and components of Active Directory, including both physical and logical elements
Identify and defend against common pre-compromise Active Directory attacks such as LLMNR poisoning, SMB relay, IPv6 spoofing, AS-REP roasting, and passback attacks
Use key post-compromise enumeration tools (e.g., BloodHound, PingCastle) to assess AD environments and recognize common administrative misconfigurations
Analyze and defend against post-compromise attacks including Kerberoasting, token impersonation, credential dumping, and persistence techniques
Adopt an attacker’s mindset to better anticipate and mitigate real-world AD exploitation tactics
Apply lessons from real penetration test case studies to strengthen Active Directory security posture

المنهاج

5 وحدات

What is Active Directory?
Physical Active Directory Components
Logical Active Directory Components

LLMNR Poisoning Attacks and Defenses?
SMB Relay Attacks and Defenses?
IPv6 Attacks and Defenses?
AS-REP Roasting Attacks and Defenses?
Passback Attacks and Defenses?
Inside the Attacker’s Mindset?

Reviewing common enumeration tools, such as: Bloodhound, Plumhound, Pingcastle, ldapdomaindump, and much more
Understanding common mistakes from an Administrator’s perspective

Pass Attacks and Defenses
Kerberoasting Attacks and Defenses
Token Impersonation Attacks and Defenses
URL File Attacks and Defenses
GPP Attacks and Defenses
Credential Dumping Attacks and Defenses
Persistence Attacks and Defenses
Inside the Attacker’s Mindset - Revisited

Real case studies from real pentests AKA “How they got owned”

لمن هذه الدورة

مديرو الأنظمة والمدافعون ومختبِرو الاختراق.

قبل أن تبدأ

This is a beginner level class, but students should have basic knowledge of computers and networking. CompTIA A+/Net+ knowledge equivalent or the free Practical Help Desk course in TCM Security Academy will prepare you to take this class.

الدبلومات