Hands-on walkthroughs of the techniques real attackers use — Active Directory attacks, privilege escalation, web exploitation — with the actual tool syntax, and the detection and defensive controls that stop each one. Written by practitioners, for practitioners.
⚠ For authorised testing and education only. Every technique below is demonstrated against controlled lab environments. Using these techniques against systems you do not own or have explicit written permission to test is illegal. Each walkthrough includes a Detection & Defense section — because understanding the attack is how you stop it.
Hands-on. Type real impacket and mimikatz commands in a simulated terminal and perform a full DCSync — extract the krbtgt hash and dump the domain, step by step, with hints and instant feedback.
How the DCSync attack abuses the MS-DRSR replication protocol to pull password hashes for every account in a domain — including the KRBTGT key — without ever running code on a DC. Full impacket and mimikatz syntax, plus detection.
Kerberoasting · AS-REP Roasting · Pass-the-Hash · NTLM Relay · Linux Privilege Escalation · JWT Attacks · SSRF — and more.