conducting-domain-persistence-with-dcsync - Conducting Domain Persistence with DCSync
Perform DCSync attacks to replicate Active Directory credentials and establish domain persistence by extracting KRBTGT and service account hashes.
Tags
Updated: 2026-09-19Capabilities
What this skill does
- Enumerate DCSync replication rights
- Extract Active Directory password hashes
- Forge Kerberos Golden Tickets
- Modify domain account ACL permissions
Inputs
- Target Active Directory domain
- Domain account credentials
- Domain Controller IP address
Outputs
- Extracted Active Directory hashes
- Forged Kerberos Golden Tickets
- Modified domain ACL entries
Requirements
- Python 3.8 or higher
- Network connection to Domain Controller
- Active Directory DCSync rights