Attacking Active Directory
As an aspiring penetration tester, it’s important to understand how to simulate real-world cyberattacks to perform both lateral and vertical movement within an Active Directory domain.
Vertical movement allows a penetration tester to escalate their privileges within a network, as compared to lateral movement, which focuses on using the same user privileges across multiple systems on the network. Over the next few sections, you will explore various popular tools for achieving this that are definitely needed within your arsenal as a cybersecurity professional.
Lateral movement with CrackMapExec
CrackMapExec is a post-exploitation tool that allows penetration testers to easily automate the process of gathering sensitive information from an Active Directory domain within an organization. This tool is very useful as it also allows penetration testers to compromise the trust between domain clients and domain controllers within the network.
...
