Internal / AD Pentest
Beginner
AD Recon & Enumeration
Map the domain. Who's a Domain Admin? Which boxes have SMB-null? Which service accounts use RC4?
0/4 modules complete · 0%
- 1Quiz+90 XP
AD Recon & Enumeration Fundamentals Quiz
This quiz validates your understanding of Active Directory reconnaissance concepts including authentication protocols, service principal names, access controls, and trust relationships. You must demonstrate knowledge applicable to real-world domain enumeration.
open quiz - Hands-on Labeasy+30 XP
BloodHound Path Discovery
Query a mock LDAP graph to find the shortest path from a kerberoastable user to Domain Admin.
complete the module above first - Hands-on Labeasy+25 XP
SMB Null-Session Enumeration
A misconfigured DC allows anonymous SMB sessions. Enumerate shares, users, and dump LSA secrets.
complete the module above first - CTF Challengeeasy+100 XP
Quiet Forest: The Hidden Administrator
You've obtained a BloodHound JSON export from the QUIETFOREST.LOCAL domain during a red team engagement. The client wants you to identify all privileged account
complete the module above first
Sign in to track your progress.
sign in