StatusISOLATED LAB
Phase03_INITIAL_ACCESS
EgressBLOCKED?
Resume Session
RED TEAM OPS // PHASE 08

Domain Dominance

Escalate to DA in the isolated lab. Practice restraint: no golden ticket without a clear rollback plan.

Objectives

  1. 01Dump LSASS on a jump host after gaining local admin.
  2. 02Extract the krbtgt hash on DC01 in a controlled window.
  3. 03Simulate a golden ticket and verify authentication.

ATT&CK techniques

T1003.001T1558.001T1207

Operator Checklist

operator@linux01 ~ /ops/dominance
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] krbtgt:502:aad3b435...:8846f7eaee...
$

Command Reference

← PHASE 07 Lateral MovementPHASE 09 Detection Review →