Advanced Penetration Testing: From Foothold to Domain Admin

Wishlist Share

Lifetime course access · up to 120 lab hours within 60 days

When your lab time ends, your course access doesn’t.

About Course

Go from an initial foothold to full domain compromise in a realistic Active Directory lab, then report it the way clients expect.

What you’ll do

  • Gain and keep a foothold in a Windows domain
  • Move laterally and escalate through Active Directory
  • Reach domain admin and prove impact safely
  • Report attack paths with clear fixes

Part of the Penetration Tester track, aligned with DoD 8140 work role 541 Vulnerability Assessment Analyst.

Taught by practitioners who do this work every day. Finish the course to earn a certificate with CPE hours.

Lab access terms

  • 60-day window: starts the first time you select Start my lab.
  • 120 lab hours: are included within that window.
  • Always-off controls: the pod stops after 30 minutes without activity, after four hours in one session, and overnight; start it again when you are ready.
  • At expiry: the private pod is retired and access to it ends. Your course access remains available.
Show More

Course Content

Module 0 — Authorization, Scope, and Pod Orientation
Establish the rules of engagement, assigned assets, and evidence discipline.

  • Your Authorized Engagement: Scope, Evidence, and Stop Conditions
  • Build Your Evidence Record
  • Map Your Assigned Pod

Module 1 — Foothold and Active Directory Enumeration
Turn an authorized foothold into a structured domain attack map.

Module 2 — Credential-Access Opportunities
Identify and validate eligible credential paths in the assigned lab seed.

Module 3 — Ticket and Credential Abuse
Apply ticket and credential techniques only within the assigned environment.

Module 4 — Lateral Movement and Pivot Discipline
Move through authorized systems while preserving an evidence trail.

Module 5 — Rights, Delegation, and Domain Control
Trace the seeded privilege path to domain-level control.

Module 6 — Full-Chain Engagement
Re-run the approved chain and assemble defensible findings.

Module 7 — Capstone: Foothold to Domain
Produce a client-style Active Directory penetration-test report.

Student Ratings & Reviews

No Review Yet
No Review Yet
Shopping Cart
Scroll to Top