Forging Golden Certificates

Learn how an attacker with access to the CA's private key can forge certificates for any identity in the domain, creating a persistence mechanism that survives password resets, krbtgt rotation, and most standard incident response procedures.

View pricing Sign in

What you'll learn

CA private key
Offline forgery
Survival properties
Golden certificate vs golden ticket
Remediation cost

What premium includes

All 54 lessons: AD techniques, professional skills, each with interview answers and study kits
Complete study kit for every lesson: quizzes, flashcards, and briefs
Every learning track with full structured progression
All 12 attack paths: full compromise walkthroughs for interviews and reports
New lessons and attack paths added regularly

Continue with free content

Active Directory Structure
Identifying Privilege Paths with BloodHound
Writing Professional Security Reports