Active Directory Attack Path Lab
$89.99
Active Directory attack path lab: real Vagrantfile (StefanScherer/windows_2022 eval boxes) with a promoted lab.local DC, member server and workstation, provisioned with deliberate misconfigurations — Kerberoastable SPN account, AS-REP roastable user, GenericAll ACL abuse and an Enterprise ADCS CA. Plus 8 attack playbooks.
Key Features
- • Vagrant lab: dc01 (DC+DNS), srv01, ws01 on 192.168.56.0/24
- • Provisioned vulns: svc_sql (SPN), asrep_user (no preauth), amanda → GenericAll(jdoe), ADCS CA
- • 8 attack modules with commands, detection notes and escalation steps
- • genlab alternative: lab_config.json + setup_lab.ps1
Requirements
- Vagrant + VirtualBox; several GB for eval images.
Changelog
- v3.1 — added the real Vagrant lab (was playbook-only).
Package Contents
Exact contents of the download archive (10 files):
| scripts/ | 0 B |
| scripts/join_member.ps1 | 588 B |
| scripts/vulns.ps1 | 606 B |
| scripts/dc_provision.ps1 | 2,138 B |
| README.md | 1,520 B |
| ad_attack_lab.py | 14,814 B |
| Vagrantfile | 1,542 B |
| ad_lab/ | 0 B |
| ad_lab/setup_lab.ps1 | 4,257 B |
| ad_lab/lab_config.json | 4,458 B |
Related Tools
Training & Courses
Buffer Overflow Lab — Stack Smashing 101
Training & Courses
Web Application Hacking Challenges Pack
Training & Courses
Red Team Operations Playbook
Training & Courses