Active Directory on Amit Agarwal Linux Blog

Abusing Active Directory Certificate Services with Certipy: From Initial Access to Beyond Root

Tue, 30 Dec 2025 00:00:00 +0530

This post covers an alternative attack path in an Active Directory lab using AD CS misconfigurations. It walks through Certipy-based enumeration, certificate abuse, domain escalation, and advanced post-compromise recon beyond Domain Admin.

Building and Breaking a Vulnerable Active Directory Lab: Full Exploitation Walkthrough

Mon, 29 Dec 2025 00:00:00 +0530

This post shows how to build a vulnerable Active Directory lab and then exploit it step by step, with real commands, real attack paths, and real lessons.

GOAD_Provisioning_ActiveDirectory

Sun, 02 Mar 2025 00:00:00 +0530

Today we will talk about GOAD, from its creators:

GOAD is a pentest active directory LAB project. The purpose of this lab is to give pentesters a vulnerable Active directory environment ready to use to practice usual attack techniques.

This lab is extremely vulnerable, do not reuse recipe to build your environment and do not deploy this environment on internet without isolation (this is a recommendation, use it as your own risk). This repository was build for pentest practice.