Full kill-chain pentest against GOAD — AS-REP roasting, Kerberoasting, constrained-delegation abuse, DCSync and Golden Ticket. Three independent paths to Domain Admin on north.sevenkingdoms.local. 41 findings mapped to MITRE ATT&CK with detection signals and mitigations. Graduation thesis.
active-directory bloodhound penetration-testing kerberos offensive-security ethical-hacking red-team impacket mitre-attack kerberoasting windows-security goad ad-cs dcsync ptes golden-ticket as-rep-roasting certipy constrained-delegation esc8
-
Updated
Aug 31, 2026 - Shell