Pluralsightintermediateen

Active Directory Privilege Escalation and Lateral Movement

Learn Active Directory exploitation techniques for privilege escalation and lateral movement. Gain domain admin access. Hands-on skills for security professionals.

41m
Certificate
Ricardo Reimao
Ricardo ReimaoInstructor

Course Content

Active Directory Privilege Escalation and Lateral Movement is an intermediate-level Pluralsight course taught by Ricardo Reimao. It runs 41m, is taught in English, and includes a certificate of completion. It is a paid course, first published March 2025.

Active Directory (AD) is a prime target for sophisticated cyberattacks. As the central authentication and authorization system for a domain, a misconfigured AD environment presents a significant vulnerability. Attackers can exploit these weaknesses to gain domain administrator privileges and then move laterally throughout the network.

This course, Active Directory Privilege Escalation and Lateral Movement, equips you with the skills to identify and exploit vulnerabilities that enable attackers to achieve elevated access and spread within an organization.

Here's what you'll learn:

  • Account Access & Impersonation: Discover techniques to gain access to other accounts within the domain and successfully impersonate legitimate users.
  • Exploiting Weak ACLs: Learn how to identify and exploit poorly configured Access Control Lists (ACLs) to ultimately obtain domain administrator privileges.
  • Password Hash Dumping: Master methods for dumping hashed passwords for all users in the domain, granting access to any server within the environment.

By completing this course, you'll gain practical knowledge and the necessary skills in AD exploitation to effectively prevent privilege escalation and lateral movement attacks. Understand how to secure your Active Directory environment against these critical threats.

$ whoami — the devs behind tutorialsearch.io

Need a web app built? Hire the team behind TutorialSearch.io

We ship fast, production-grade full-stack apps (Next.js, React, edge infra) — the same stack that powers this site.