مدرسان آکادمی راوین

• پیشرفته
• مسیر قرمز
• ۱۵ درس

دربارۀ این دوره

مخاطبان

• کارشناسان ارشد ارزیابی امنیت، تست نفوذ و تیم قرمز
• مشاوران امنیت سایبری
• متخصصان امنیت زیرساخت و مراکز داده
• تیم‌های Blue/IR به‌منظور درک بهتر روش‌های حمله

پیش‌نیازها

• تسلط بر مفاهیم امنیت سایبری
• آشنایی با مفاهیم زیرساخت شبکه
• آشنایی با mcse یا mcsa
• حداقل یک سال تجربۀ کاری در زمینۀ امنیت سایبری و تست نفوذ

• Active Directory Fundamentals
  • Domains, Trees, and Forests
  • Trusts and Replication
• Enumeration & Reconnaissance
  • PowerView & Active Directory PowerShell Module
  • ADExplorer, NetExec, Impacket toolkit, …
  • Anonymous & Credentialed Enumeration
• Lab Setup & Usage
  • Building and Configuring an AD Pentesting Lab
• Kerberos Deep Dive
  • Ticket Lifecycle: TGT & TGS
  • Kerberos Messages & Encryption
  • Kerberos Attacks (Detection & Bypass)
  • Kerberos Relay
• BloodHound & AD Graph Analysis
  • Graph Visualization & Cypher Queries
  • Privilege Escalation Pathways
• NTLM Relay Attacks
  • NTLM Authentication Workflow
  • Tools: Responder, Inveigh, Mitm6
  • NTLMv1/v2 Relay Scenarios
• Delegation Attacks
  • Unconstrained Delegation
  • Constrained Delegation (S4U2Self, S4U2Proxy)
  • Resource-Based Constrained Delegation (RBCD)
• Privilege Escalation Techniques
  • Windows PrivEsc (“Potato” Exploits)
  • KrbRelayUp & RBCD Abuse
  • Common Exploits
• Active Directory Certificate Services (ADCS)
  • PKI Fundamentals & Kerberos PKINIT Integration
  • Certipy Enumeration & Exploitation
  • ESC1–ESC8 Attack Paths
  • Shadow Credentials & Persistence Mechanisms
  • Golden Certificates
• ACL Attacks
  • ACL Concepts & Misconfigurations
  • Object Abuse
  • DCSync Attack & Detection Bypass
• Persistence & Lateral Movement
  • Overview of Common Techniques for Maintaining Access and Moving Laterally
  • Credential Reuse Attacks (Pass-the-Hash, Pass-the-Ticket, OverPass-the-Hash, Pass-the-Certificate)
• Trust Attacks
  • Domain Trust Exploitation
  • Forest Trust Abuse
  • SID History Injection
• SQL Server Attacks
  • SQL Enumeration in Active Directory
  • Impersonation & Privilege Escalation via SQL Server
  • MSSQL as a Lateral Movement Vector
  • Linked Server Abuse (Pivoting via SQL)
• SCCM Attacks
  • Overview of SCCM & MECM Architecture
  • SCCM Enumeration Techniques
  • Lateral Movement via SCCM Infrastructure
  • Misconfigurations & Attack Surface (PXE Boot, SMB, SQL Relays)
  • Secrets Extraction / Abuse
• Azure AD & Hybrid Environments
  • Entra ID Fundamentals
  • Identity Synchronization (Hybrid Join)
  • Enumeration & Reconnaissance in Hybrid Environments
  • Golden SAML & Federation Abuse
  • Azure AD Connect Sync Account Abuse
  • Application Secrets & Certificates Abuse
  • On-Prem to Cloud Pivot Scenarios
  • Cloud-to-OnPrem Attack Paths

گواهینامه‌ی دوره