🪟Attacktive Directory

99% of Corporate networks run off of AD. But can you exploit a vulnerable Domain Controller?

Room Attributes

Value

Subscription Required

False [Free]

Type

Challenges (CTF)

Difficulty

Medium

Task 1 Intro Deploy The Machine

The first four questions are part of a mini-walkthrough that cover getting access to the target machine. They all require no answer so just follow the steps to get connected to the VPN, deploy the machine and get hacking!

Task 2 Intro Setup

Install Impacket

Impacket is a collection of Python classes for working with network protocols. Enter the following commands into your kali linux terminal to add the repo to your /opt/impacket folder and to install with python3:

sudo git clone https://github.com/SecureAuthCorp/impacket.git/opt/impacket

sudo pip3 install -r /opt/impacket/requirements.txt

cd /opt/impacket/

sudo pip3 install .

sudo python3 setup.py install

Bloodhound and Neo4j

This section of the THM walkthrough states that the lab uses Bloodhound to attack the Attacktive Directory target machine but since the May 2021 room renovation is no longer does so you can skip this section if you want.

Install Bloodhound and its database dependency neo4j via apt:

apt install bloodhound neo4j