Active Directory Red Team
PowerShell Basics
- Tips And Tricks
I. Active Directory Enumeration
II. Local Privilege Escalation
- Lateral Movement
- PowerUp Exploits
III. Domain Privilege Escalation
IV. Domain Persistence and Dominance
V. Cross Trust Attacks
VI. Forest Persistence and Dominance
VII. Defenses – Monitoring
VIII. Defenses and bypass – Architecture and Work Culture Changes
IX. Defenses and Bypass – Deception
X. Defenses and Bypass – PowerShell
New Server
- Move Lat-AppLocker
- Move Lat-Invoke-Command

Powered by GitBook

On this page

Was this helpful?

V. Cross Trust Attacks

PreviousPersistence - Golden Ticket NextVI. Forest Persistence and Dominance

Last updated 4 years ago

Was this helpful?

Learn to elevate privileges from Domain Admin of a child domain to Enterprise Admin on the forest root by abusing Trust keys and krbtgt account.
Execute intra-forest trust attacks to access resources across forest.
Abuse database links to achieve code execution across forest by just using the databases.

Trust Domain Enumeration

Trust Abuse - MSSQL Servers

Priv Esc - Across Trusts using Trust Tickets

Priv Esc – Across Forest using krbtgt Ticket