← All Lessons
Premium
TechniqueActive Directory
Forging Golden Certificates
Learn how an attacker with access to the CA's private key can forge certificates for any identity in the domain, creating a persistence mechanism that survives password resets, krbtgt rotation, and most standard incident response procedures.
Sign in or upgrade to unlock the full premium library.
What you'll learn
- CA private key
- Offline forgery
- Survival properties
- Golden certificate vs golden ticket
- Remediation cost
What premium includes
- All 68 lessons: AD techniques, professional skills, each with interview answers and study kits
- Complete study kit for every lesson: quizzes, flashcards, and briefs
- Every learning track with full structured progression
- All 12 attack paths: full compromise walkthroughs for interviews and reports
- New lessons and attack paths added regularly
