Applications
Active Directory penetration testing
Identity and lateral movement in the system that, if it falls, takes the estate with it.
Coverage
What a mission examines
Every finding is validated by exploitation before it is reported, so what arrives is a demonstrated path rather than a list of possibilities.
- Credential attacks
- Weak, reused and recoverable credentials, and what they unlock.
- Kerberos weaknesses
- Delegation issues and service account exposure that yield privileged access.
- ACL and object abuse
- Permission grants that quietly confer far more control than intended.
- Lateral movement
- The route from one workstation to the rest of the domain.
- Domain escalation
- The specific paths that end in domain administrative control.
- Legacy protocols
- Older authentication still enabled because disabling it once broke something.
In practice
Domain compromise is a path, not a vulnerability
There is rarely a single Active Directory flaw worth calling critical on its own. There is almost always a path: a stale account, an over-broad group, a delegation nobody documented, and a service running as something it should not.
Reporting those individually leaves the reader to assemble the risk themselves. Revelion walks the path and reports where it ends.
See what a active directory mission actually returns.
Read a finding