Coercion & AD CS Attacks

Turn forced authentication into domain compromise. Understand how NTLM authentication works, coerce it out of privileged hosts, relay it to AD CS, and forge certificates for durable access.

View pricing Sign in

What premium includes

All 54 lessons: AD techniques, professional skills, each with interview answers and study kits
Complete study kit for every lesson: quizzes, flashcards, and briefs
Every learning track with full structured progression
All 12 attack paths: full compromise walkthroughs for interviews and reports
New lessons and attack paths added regularly

Continue with free content

Active Directory Structure
Identifying Privilege Paths with BloodHound
Writing Professional Security Reports