Modules

Getting Started
- Downloading and Installing Server 2022
- Building Domain Controller
- Not so secure

Finding Users
- Using Windows and PowerShell
- Using Linux

Password Must Change
- Status Password Must Change

Kerberos
- AsRepRoasting
- Kerberoasting
- Unconstrained Delegation
- Constrained Delegation
- Resource-Based Constrained Delegation
- Alternate Services
- Relay (ntlmrelayx)
- Silver Ticket
- Golden Ticket
- Pass-the-Ticket (PTT)

Obtaining Hashes
- UAC Bypass
- DCSync

DACL Attacks
- Bloodhound
- Force Change Password
- Write SPN Targeted Kerberoasting
- Add Members
- Read LAPS Password
- Read GMSA Password
- Generic All
- Add Key Credential Link
- Write SPN
- Logon Scripts

MarauderSec Training