HackPathHackPath
CoursesRoadmapPracticePricing

Course

Hacking Windows & Active Directory: Pass-the-Hash, Mimikatz, and Pivoting

Master attack techniques for Windows and Active Directory environments: enumeration, Pass-the-Hash, Kerberoasting, Mimikatz, Golden Tickets, and DCSync.

Structured path preview

1 free lesson to get started, then 13 premium lessons with exercises, scenarios, and detailed solutions.

First locked checkpoint: AD Protocols: LDAP, Kerberos and SMB

Start free lessonUnlock Full Access

Lessons

14

Completed

0

Progress

0%

Lessons

Understanding Active Directory

Lesson 01

Active Directory Structure — Domains, Forests, and Controllers

Free

Lesson 02

AD Protocols: LDAP, Kerberos and SMB

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock

Lesson 03

Setting Up the Windows Active Directory Lab

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock
Active Directory Enumeration

Lesson 01

Active Directory Enumeration: enum4linux, ldapdomaindump, and CrackMapExec

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock

Lesson 02

BloodHound and SharpHound: Mapping Attack Paths

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock
Credential Attacks

Lesson 01

Pass-the-Hash: Reusing an NTLM Hash

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock

Lesson 02

Kerberoasting: Attacking Service Accounts

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock

Lesson 03

AS-REP Roasting: Attacking Accounts Without Pre-authentication

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock
Lateral Movement

Lesson 01

Lateral Movement: PSExec and SMB

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock

Lesson 02

Lateral Movement: WMI and WinRM

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock
Windows Privilege Escalation

Lesson 01

Mimikatz: Extracting Credentials from LSASS

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock

Lesson 02

Token Impersonation: Windows Privilege Escalation

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock
Active Directory Persistence

Lesson 01

Golden Ticket: Ultimate Kerberos Persistence

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock

Lesson 02

DCSync: Dumping All Domain Hashes

Members only

Unlock exercises, detailed solutions, and the next steps.

Unlock