Active Directory

Manual Setup on AWS

• https://fatrodzianko.com/2019/08/05/creating-an-active-directory-lab-in-aws/

• https://sethsec.blogspot.com/2017/05/pentest-home-lab-0x1-building-your-ad.html

• https://www.c2.lol/setting-up-an-active-directory-lab/part-1

• https://hausec.com/2021/03/04/creating-a-red-blue-team-home-lab/

On Virtual Box

• https://1337red.wordpress.com/building-and-attacking-an-active-directory-lab-with-powershell/

Challenge Labs Review:

• https://github.com/ryan412/ADLabsReview

Automated AD Lab Setup

Pre-requisites:

• Azure Free Subscription

• BadBlood

  • Security tool for Active Directory. After BadBlood is run on a domain, security analysts and engineers can practice using tools to gain an understanding and to prescribe securing the Active Directory.

  • https://github.com/davidprowe/BadBlood

• AutomateLab

  • Enables you to setup test and lab environments on Hyper-v or Azure with multiple products or just a single VM in a very short time.

  • https://github.com/AutomatedLab/AutomatedLab

• Setup Guide

  • https://www.linkedin.com/pulse/automated-ad-lab-badblood-installed-automatically-part-aleem-ladha?articleId=6726066154969817088

  • https://www.youtube.com/watch?v=1MyXJachX4s

  • https://www.youtube.com/watch?v=Ko2AMv6x5ug

Sysadmin Stuff

#Disable Internet Explorer Enhanced Security
function Disable-InternetExplorerESC {
    $AdminKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}"
    $UserKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}"
    Set-ItemProperty -Path $AdminKey -Name "IsInstalled" -Value 0
    Set-ItemProperty -Path $UserKey -Name "IsInstalled" -Value 0
    Stop-Process -Name Explorer
    Write-Host "IE Enhanced Security Configuration (ESC) has been disabled." -ForegroundColor Green
}Disable-InternetExplorerESC


#Set SPN for a service
setspn -a <logonname>/<hostname:any port> <logonname>
Get-ADUser <logon name> -Properties ServicePrincipalName

#SSL/TLS related errors
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12