StatusISOLATED LAB
Phase03_INITIAL_ACCESS
EgressBLOCKED?
Resume Session
RED TEAM OPS // PHASE 06

AD Enumeration

With a foothold, map the domain: users, groups, ACLs, sessions. Feed the graph to BloodHound.

Objectives

  1. 01Collect SharpHound data from WIN01.
  2. 02Identify attack paths to Domain Admins.
  3. 03List Kerberoastable and AS-REP-roastable accounts.

ATT&CK techniques

T1087.002T1482T1069.002

Operator Checklist

operator@linux01 ~ /ops/adenum
[*] SharpHound collection complete -> bh.zip (412 KB)
[+] Found 1 SPN: HTTP/web01.lab.local -> svc_web
$

Command Reference

← PHASE 05 Privilege EscalationPHASE 07 Lateral Movement →