I. Active Directory Enumeration
We validate this area during scoped assessments, documenting impact and remediation guidance.
Why it matters
- Use scripts, built-in tools, and the Active Directory module to enumerate the target domain. - Understand and practice how useful information like users, groups, group memberships, computers, and user properties from the domain controller is available to even a normal user. - Understand and enumerate intra-forest and inter-forest trusts. Practice how to extract information from the trusts. - Enumerate Group Policies. - Enumerate ACLs (Access Control Lists) and learn to find interesting rights on ACLs in the target domain to carry out attacks.
How we test it
Our operators follow a structured checklist for this topic, adapted to your API surface and authentication model.
Testing approach
- Structured validation of I. Active Directory Enumeration during scoped assessment.
- Evidence captured with reproducible steps for your engineering team.
What we look for
- Misconfigurations and control gaps related to I. Active Directory Enumeration.
- Exploitable paths that could affect confidentiality, integrity, or availability.
Related topics
| Topic | Summary |
|---|---|
| Active Directory (AD) - Basics Understanding | Within Active Directory, there are three built-in groups that comprise the highest privilege groups in the director |
| Active Directory (AD) Terminology | We validate this area during scoped assessments, documenting impact and remediation guidance. |
| DLL | A DLL (Dynamic Link Library) is a file format used in Microsoft Windows environments to contain code, data, and resources that can be used by multiple programs simultaneously. DLLs help modularize applications, allowing them to share common functions without duplicating code acr… |
| Extended Active Directory (AD) Terminology | We validate this area during scoped assessments, documenting impact and remediation guidance. |
| II. Local Privilege Escalation | We validate this area during scoped assessments, documenting impact and remediation guidance. |
| III. Domain Privilege Escalation | We validate this area during scoped assessments, documenting impact and remediation guidance. |