conducting-domain-persistence-with-dcsync - Conducting Domain Persistence with DCSync
Replicate Active Directory credentials and establish domain persistence via DCSync and Golden Ticket creation.
Tags
Updated: 2026-09-19Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Identify accounts with DCSync rights
- Extract KRBTGT account password hash
- Dump domain user password hashes
- Forge Kerberos Golden Tickets
- Grant DCSync rights to accounts
Inputs
- Target Active Directory domain credentials
- Domain Controller IP address
- Domain Security Identifier (SID)
- Test or lab environment access
Outputs
- Extracted Active Directory password hashes
- Forged Kerberos Golden Ticket file
- Modified Active Directory ACL permissions
- Attack chain and persistence documentation
Requirements
- Python 3.8+
- Mimikatz
- Impacket library
- PowerView
- Authorized security testing permission