HomeCoursesBlogAbout
Account
Back to courses

CSG Certification

CSAD — Active Directory Hacking

Structured modules and practice. Lessons release individually as the instructor publishes them. Topics include active directory: foundations and first steps, building the active directory practice lab, mapping active directory environments.

CSG Certificationcsg-certification
Recorded courseIntermediate9 modules
  • Active Directory: Foundations and First Steps
  • Building the Active Directory Practice Lab
  • Mapping Active Directory Environments
CSAD — Active Directory Hacking cover

ENROLLMENT

₹2.00Enroll Now

Enroll through our LMS portal. Select Enroll Now to open the portal and complete your enrollment there.

Course Description

A structured CSG Cyber School course with an ordered syllabus.

Each lesson, resource and assignment stays locked until its own file is published. Enrollment does not unlock unpublished content.

Complete Syllabus

🔒What is Active Directory: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: What is Active Directory: Explained and AppliedLocked · Awaiting publication
🔒Physical AD Components: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: Physical AD Components: Concepts and Practical UseLocked · Awaiting publication
🔒Logical AD Components: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: Logical AD Components: Concepts and Practical UseLocked · Awaiting publication
🔒AD Certificate Services (ADCS) overview: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: AD Certificate Services (ADCS) overview: Explained and AppliedLocked · Awaiting publication
🔒Delegation: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: Delegation: Concepts and Practical UseLocked · Awaiting publication
🔒AD Access Control Lists (ACLs) and DACL basics: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: AD Access Control Lists (ACLs) and DACL basics: Explained and AppliedLocked · Awaiting publication
🔒Service Principal Names (SPNs): Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: Service Principal Names (SPNs): Concepts and Practical UseLocked · Awaiting publication
🔒LM Hash Authentication: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: LM Hash Authentication: Concepts and Practical UseLocked · Awaiting publication
🔒Windows NTLM Authentication: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: Windows NTLM Authentication: Concepts and Practical UseLocked · Awaiting publication
🔒Kerberos Authentication: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: Kerberos Authentication: Concepts and Practical UseLocked · Awaiting publication

🔒AD Lab Build and Requirements: Explained and AppliedLocked · Awaiting publication
🔒Downloading Necessary Files: Explained and AppliedLocked · Awaiting publication
🔒Preparing the Domain ControllerLocked · Awaiting publication
🔒Preparing the User MachinesLocked · Awaiting publication
🔒Preparing Users, Groups & PoliciesLocked · Awaiting publication
🔒Joining machines with DC and setup Networking: Explained and AppliedLocked · Awaiting publication
🔒Preparing AD Certificate Services & LDAPSLocked · Awaiting publication
🔒Creating gMSA accounts: Explained and AppliedLocked · Awaiting publication
🔒Configuring LAPS on machines: Explained and AppliedLocked · Awaiting publication
🔒Preparing vulnerable ACL permissionsLocked · Awaiting publication
🔒Configuring delegation scenarios: Explained and AppliedLocked · Awaiting publication
🔒Disabling Kerberos Pre-Auth: Explained and AppliedLocked · Awaiting publication
🔒Preparing SMB on client machinesLocked · Awaiting publication
🔒Preparing policy for RPC EnumerationLocked · Awaiting publication
🔒Preparing GPO AdminLocked · Awaiting publication

🔒AD Enumeration: Foundations and First StepsLocked · Awaiting publication
🔒Enumeration with Nmap: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Enumeration with Nmap: Explained and AppliedLocked · Awaiting publication
🔒Enumeration with RPC: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Enumeration with RPC: Explained and AppliedLocked · Awaiting publication
🔒Enumeration wtih LDAP: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Enumeration wtih LDAP: Explained and AppliedLocked · Awaiting publication
🔒Enumeration with SMB: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Enumeration with SMB: Explained and AppliedLocked · Awaiting publication
🔒Enumeration with MSSQL: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Enumeration with MSSQL: Explained and AppliedLocked · Awaiting publication
🔒Enumeration with Bloodhound.py: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Enumeration with Bloodhound.py: Explained and AppliedLocked · Awaiting publication

🔒Breaching Active Directory: Foundations and First StepsLocked · Awaiting publication
🔒Practice Task: Breaching Active Directory: Foundations and First StepsLocked · Awaiting publication
🔒Getting a foothold via Phishing: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Getting a foothold via Phishing: Explained and AppliedLocked · Awaiting publication
🔒Password Spraying Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Password Spraying Attacks: Explained and AppliedLocked · Awaiting publication
🔒LLMNR and NBT-NS Poisoning Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: LLMNR and NBT-NS Poisoning Attacks: Explained and AppliedLocked · Awaiting publication
🔒SMB Relay Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: SMB Relay Attacks: Explained and AppliedLocked · Awaiting publication
🔒IPV6 Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: IPV6 Attacks: Explained and AppliedLocked · Awaiting publication
🔒Pass Back Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Pass Back Attacks: Explained and AppliedLocked · Awaiting publication
🔒ASRepRoasting: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: ASRepRoasting: Explained and AppliedLocked · Awaiting publication

🔒Post-Compromise Enumeration: Foundations and First StepsLocked · Awaiting publication
🔒Practice Task: Post-Compromise Enumeration: Foundations and First StepsLocked · Awaiting publication
🔒Enumeration with Powerview: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Enumeration with Powerview: Explained and AppliedLocked · Awaiting publication
🔒Enumeration with Bloodhound: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Enumeration with Bloodhound: Explained and AppliedLocked · Awaiting publication

🔒Lateral Movement via NetExec: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Lateral Movement via NetExec: Explained and AppliedLocked · Awaiting publication
🔒Lateral Movement via WMI & WinRM: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Lateral Movement via WMI & WinRM: Explained and AppliedLocked · Awaiting publication
🔒Lateral Movement via PsExec: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Lateral Movement via PsExec: Explained and AppliedLocked · Awaiting publication
🔒Lateral Movement via PassTheHash: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Lateral Movement via PassTheHash: Explained and AppliedLocked · Awaiting publication
🔒Lateral Movement via Overpass The Hash: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Lateral Movement via Overpass The Hash: Explained and AppliedLocked · Awaiting publication
🔒Lateral Movement via Pass The Ticket: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Lateral Movement via Pass The Ticket: Explained and AppliedLocked · Awaiting publication
🔒Lateral Movement via DCOM: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Lateral Movement via DCOM: Explained and AppliedLocked · Awaiting publication
🔒Lateral Movement via RDP: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Lateral Movement via RDP: Explained and AppliedLocked · Awaiting publication

🔒Kerberoasting Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Kerberoasting Attacks: Explained and AppliedLocked · Awaiting publication
🔒LNK File Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: LNK File Attacks: Explained and AppliedLocked · Awaiting publication
🔒GPP Attacks - cPassword Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: GPP Attacks - cPassword Attacks: Explained and AppliedLocked · Awaiting publication
🔒Credential Dumping with Mimikatz: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Credential Dumping with Mimikatz: Explained and AppliedLocked · Awaiting publication
🔒Credential Hunting with Laps: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Credential Hunting with Laps: Explained and AppliedLocked · Awaiting publication
🔒Kerberos Delegation Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Kerberos Delegation Attacks: Explained and AppliedLocked · Awaiting publication

🔒Abusing ReadLAPSPassword: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Abusing ReadLAPSPassword: Explained and AppliedLocked · Awaiting publication
🔒Abusing First Degree Object Control: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Abusing First Degree Object Control: Explained and AppliedLocked · Awaiting publication
🔒Abusing DACL Write Access: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Abusing DACL Write Access: Explained and AppliedLocked · Awaiting publication
🔒Abusing ReadGMSAPassword: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Abusing ReadGMSAPassword: Explained and AppliedLocked · Awaiting publication
🔒Abusing GenericWrite: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Abusing GenericWrite: Explained and AppliedLocked · Awaiting publication
🔒Abusing GenericAll: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Abusing GenericAll: Explained and AppliedLocked · Awaiting publication
🔒Abusing First Degree Group Membership: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Abusing First Degree Group Membership: Explained and AppliedLocked · Awaiting publication

🔒Silver Ticket Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Silver Ticket Attacks: Explained and AppliedLocked · Awaiting publication
🔒Golden Ticket Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Golden Ticket Attacks: Explained and AppliedLocked · Awaiting publication
🔒DC Sync Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: DC Sync Attacks: Explained and AppliedLocked · Awaiting publication
🔒Abusing GPO for Persistence: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Abusing GPO for Persistence: Explained and AppliedLocked · Awaiting publication
🔒Dumping NTDS.dit: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Dumping NTDS.dit: Explained and AppliedLocked · Awaiting publication
🔒Dumping Shadow Copies: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Dumping Shadow Copies: Explained and AppliedLocked · Awaiting publication

Technical prerequisites

["A computer and an internet connection."]

Learning outcomes

  • Active Directory: Foundations and First Steps
  • Building the Active Directory Practice Lab
  • Mapping Active Directory Environments
  • Initial Access Paths in Active Directory
  • Enumeration After Initial Access
  • Moving Across Domain Systems
  • Domain Attack Paths After Compromise
  • Assessing ACLs and Delegated Permissions
  • Persistence Paths and Defensive Considerations

Prepare for your learning

Explore the basics and plan your practice before enrolling.

  • Cybersecurity roadmap in Hindi ↗
  • Build your practice lab ↗
  • Understand security reporting ↗
CSG Cyber School

Cybersecurity learning with hands-on practice.

HomeAll CoursesLearning GuidesAll BlogsAbout UsPrivacy PolicyTerms & ConditionsRefund & Cancellation PolicyDigital Delivery PolicyContact Us

© 2026 CSG Cyber School. All rights reserved.

YOUR QUESTIONS, ANSWERED

Frequently Asked Questions

Do I need an account before enrolling?+

Create your student account or sign in on the learning website. Email registration uses an OTP sent to your email. Google Authenticator is optional.

What should I check before buying a course?+

Check the published curriculum, prerequisites, lesson language, recorded or live format, schedule and price. Ask support about missing information before paying.

Where do I find my course after payment?+

After the payment is confirmed and your enrollment is verified, open Student Portal to find your purchased course. Your payment records are available under Receipts.

Who can view recorded lessons?+

Private course recordings require your signed-in student account and verified access to that course. A public course page does not grant recording access.

What refund window applies?+

The school policy provides a seven-day window for live courses and a 48-hour window for recorded courses. A refund is unavailable after more than 15 resources have been downloaded. Read the Refund and Cancellation Policy for the full applicable conditions.

How can I get help with enrollment or access?+

Use Contact Us or Request Callback before enrollment. Signed-in students can use the Support section for account, course, payment or technical questions.

Other courses

CSSCP — CSG Cyber School Certified Penetration Tester

Computer basics through penetration testing, web security and Active Directory. Content releases topic by topic.

View course →

CSWA — Web Application Hacking

Structured modules and practice. Lessons release individually as the instructor publishes them.

View course →

CSEH — Ethical Hacking Bundle

Structured modules and practice. Lessons release individually as the instructor publishes them.

View course →

CSSCP — CSG Cyber School Certified Penetration Tester

Computer basics through penetration testing, web security and Active Directory. Content releases topic by topic.

View course →

CSWA — Web Application Hacking

Structured modules and practice. Lessons release individually as the instructor publishes them.

View course →

CSEH — Ethical Hacking Bundle

Structured modules and practice. Lessons release individually as the instructor publishes them.

View course →

Related articles

WiFi Hacking & Wireless Security Guide

A practical Wi-Fi security guide covering wireless network risks, authentication, encryption and steps to protect your own network.

Read article →

WiFi Hacking & Wireless Security Guide

A practical Wi-Fi security guide covering wireless network risks, authentication, encryption and steps to protect your own network.

Read article →