Attack Active Directory Like Real Adversaries.
Master Kerberoasting, delegation abuse, and domain escalation paths through hands-on attack chains against realistic enterprise labs.
Starting at $250 · Taught by industry-certified ThreatBlock instructors.
What You'll Learn
What you'll master.
6 modules — tap any topic to expand the details.
One-time payment for full course access. Flexible EMI options available at checkout.
Reviews & Testimonial
The delegation abuse module finally made RBCD and S4U click for me. Within a week I was chaining these attacks on a real engagement.
BloodHound to DCSync in a single structured path was exactly how I needed to learn AD. The labs mirror actual enterprise environments.
Kerberoasting and AS-REP roasting were demystified completely. The instructor showed both the attack and the detection angle, which helped my reports.
The forest trust and AD CS ESC attacks are rarely taught this well. This course took me from domain user to enterprise admin with confidence.
Hands-on from day one. Pass-the-ticket, golden tickets, and DCSync all in realistic labs made the concepts stick far better than any video course.
The delegation abuse module finally made RBCD and S4U click for me. Within a week I was chaining these attacks on a real engagement.
BloodHound to DCSync in a single structured path was exactly how I needed to learn AD. The labs mirror actual enterprise environments.
Kerberoasting and AS-REP roasting were demystified completely. The instructor showed both the attack and the detection angle, which helped my reports.
The forest trust and AD CS ESC attacks are rarely taught this well. This course took me from domain user to enterprise admin with confidence.
Hands-on from day one. Pass-the-ticket, golden tickets, and DCSync all in realistic labs made the concepts stick far better than any video course.
Hands-on from day one. Pass-the-ticket, golden tickets, and DCSync all in realistic labs made the concepts stick far better than any video course.
The forest trust and AD CS ESC attacks are rarely taught this well. This course took me from domain user to enterprise admin with confidence.
Kerberoasting and AS-REP roasting were demystified completely. The instructor showed both the attack and the detection angle, which helped my reports.
BloodHound to DCSync in a single structured path was exactly how I needed to learn AD. The labs mirror actual enterprise environments.
The delegation abuse module finally made RBCD and S4U click for me. Within a week I was chaining these attacks on a real engagement.
Hands-on from day one. Pass-the-ticket, golden tickets, and DCSync all in realistic labs made the concepts stick far better than any video course.
The forest trust and AD CS ESC attacks are rarely taught this well. This course took me from domain user to enterprise admin with confidence.
Kerberoasting and AS-REP roasting were demystified completely. The instructor showed both the attack and the detection angle, which helped my reports.
BloodHound to DCSync in a single structured path was exactly how I needed to learn AD. The labs mirror actual enterprise environments.
The delegation abuse module finally made RBCD and S4U click for me. Within a week I was chaining these attacks on a real engagement.
Frequently Asked Questions
How long is the AD Pentesting course?
The course runs for 36 Hours.
Is the course live or pre-recorded?
Classes are taught live online by ThreatBlock instructors.
How many learners are in each batch?
Each batch is capped at 18 learners, so every learner gets time with the instructor.
What level is the AD Pentesting course?
The course is set at Advanced level.
Does the AD Pentesting course prepare me for a certification?
Builds the practical skill set assessed by the CRTP (Certified Red Team Professional) and OSCP Active Directory objectives.
Which tools will I use?
You work hands-on with BloodHound, Mimikatz, Rubeus, Impacket, Responder and Hashcat.
What does the course cover?
The course is organised into 6 modules: AD Fundamentals & Enumeration; Credential Access & Kerberoasting; Delegation Abuse; Lateral Movement & Privilege Escalation; Domain Dominance & Persistence; Forest Attacks & Reporting.