Active Directory Attacks

Kick off the Active Directory Attacks path. Review prerequisites, set a weekly study cadence, and follow recommended nodes first.

• Confirm prerequisites
• Bookmark this roadmap
• Plan your first 2 weeks

• CyberA4U Academy — courses

Build competence in AD architecture for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind AD architecture
• Apply AD architecture in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in Enumeration for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind Enumeration
• Apply Enumeration in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in BloodHound thinking for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind BloodHound thinking
• Apply BloodHound thinking in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in Kerberoasting for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind Kerberoasting
• Apply Kerberoasting in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in AS-REP roasting for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind AS-REP roasting
• Apply AS-REP roasting in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in NTLM relay concepts for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind NTLM relay concepts
• Apply NTLM relay concepts in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in ACL abuse for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind ACL abuse
• Apply ACL abuse in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in Delegation attacks for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind Delegation attacks
• Apply Delegation attacks in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in Golden/silver tickets concepts for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind Golden/silver tickets concepts
• Apply Golden/silver tickets concepts in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in Lateral movement for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind Lateral movement
• Apply Lateral movement in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in Domain persistence for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind Domain persistence
• Apply Domain persistence in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in Defender detections for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind Defender detections
• Apply Defender detections in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in Hardening AD for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind Hardening AD
• Apply Hardening AD in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Build competence in Lab scenario for the Active Directory Attacks track. Focus on practical application, not trivia.

• Explain core ideas behind Lab scenario
• Apply Lab scenario in a lab or exercise
• Document findings in your notes

Tools & tech: AD

Validate readiness before finishing Active Directory Attacks. Revisit weak nodes and close open exercises.

• Self-assess gaps
• Retake weak labs
• Update portfolio notes

• CyberA4U CTF Arena — practice challenges

You completed the Active Directory Attacks roadmap. Keep practicing, contribute writeups, and start an adjacent track.

• Ship a portfolio artifact
• Choose a next roadmap

• CyberA4U CTF Arena — practice challenges