Boxes To Pwn

Ippsec has recorded videos explaining the paths through many of these boxes and more. As a resource, Ippsec's site is a great resource to search for videos and write-ups pertaining to many different subjects. Check out his videos and write-ups if you get stuck or want a great primer dealing with Active Directory and wish to see how some of the tools work.


ProLabs

Pro Labs are large simulated corporate networks that teach skills applicable to real-life penetration testing engagements. The Dante Pro Lab is an excellent place to start with varying vectors and some AD exposure. The Offshore Pro Lab is an advanced-level lab that contains a wealth of opportunities for practicing AD enumeration and attacks.

Great Videos to Check Out

Six Degrees of Domain Admin from DEFCON 24 is a great watch for an introduction to BloodHound.

Designing AD DACL Backdoors by Will Schroeder and Andy Robbins is a gem if you haven't seen it.Kicking The Guard Dog of Hades is one of the original releases for Kerberoasting and is a great watch. In Kerberoasting 101, Tim Medin does an excellent job dissecting the Kerberoasting attack and how to perform them.

There are so many more, but building a list here would take a whole other section. The videos above are a great start to advancing your AD knowledge.

Writers and Blogs To Follow

Between the HTB Discord, Forums, and blogs, there are plenty of outstanding write-ups to help advance your skills along the way. One to pay attention to would be 0xdf's walkthroughs. These are also a great resource to understand how an Active Directory attack path may look in the real world. 0xdf writes about much more, and his blog is an excellent resource. The list below contains links to other authors and blogs we feel do a great job discussing AD security topics and much more.