Day 1: Active Directory Pentesting & Attack Techniques

• 1. Introduction to Active Directory Security
  • Understanding AD architecture
  • Attack surfaces in AD environments
  • Real-world AD breach case studies
• 2. Enumeration & Reconnaissance
  • Discovering users, groups, and permissions
  • Using tools like BloodHound, PowerView, SharpHound
  • Live demonstration of AD mapping
• 3. Exploiting Authentication Protocols
  • Kerberoasting & AS-REP roasting attacks
  • NTLM relay attacks & Pass-the-Hash (PTH)
  • Privilege escalation strategies
• 4. Interactive Q&A & Case Study
  • Discussing real-world AD attacks
  • Debunking common security misconceptions

Day 2: Binary Exploitation & Reverse Engineering

• 1. Introduction to Binary Exploitation
  • Understanding memory corruption vulnerabilities
  • Common attack vectors: Buffer overflows, format string attacks
• 2. Analyzing Executables & Disassembly
  • Exploring PE file structure
  • Reverse engineering with Ghidra
• 3. Buffer Overflows
  • Understanding stack-based buffer overflows
  • Writing simple shellcode payloads
  • Exploiting and mitigating vulnerabilities