conducting-domain-persistence-with-dcsync - Conducting Domain Persistence with DCSync
Perform DCSync attacks to replicate Active Directory credentials and establish domain persistence by extracting account hashes for Golden Ticket creation.
Tags
Updated: 2026-09-19Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Enumerate accounts with DCSync rights
- Perform DCSync credential extraction
- Extract KRBTGT account hash
- Forge Golden Tickets for persistence
- Grant DCSync rights to accounts
Inputs
- Target domain credentials
- Target Domain Controller IP address
- Target domain SID
Outputs
- Extracted account password hashes
- Forged Kerberos Golden Tickets
- Modified Active Directory ACLs
Requirements
- Python 3.8+ environment
- Test or lab environment access
- Appropriate testing authorization
- Mimikatz or Impacket tools