How to automate active directory labs for pentesting

Introduction to what will be covered in this course. High level overview using a basic network diagram.

Hyper-V is a pre-requisite for setting up the active directory pentest lab. Before installing Hyper-V, remove VMware/VirtualBox, as it not compatible with Hyper-V. Hyper-V is enabled in the “Turn Windows features on or off” section as outlined below. Download the manual from resources section to follow along. 

In Hyper-V, we will create two switches “Private” and “External.” The External switch is used for internet connectivity, and the Internal switch is for internal network communications. Download the manual from resources section to follow along. 

In this tutorial, we will install Windows 2102 server which will later be promoted to Domain Controller. Download the trial version from Microsoft site: https://www.microsoft.com/en-US/evalcenter/evaluate-windows-server-2012-r2

Download the manual from resources section to follow along. 

In this tutorial, we will see how to install Windows 10 client operating system. Later on, this system will to joined to domain.  Download trial version from Microsoft site: https://www.microsoft.com/en-us/evalcenter/evaluate-windows-10-enterprise

In this tutorial, we will see how to install Windows 7 client operating system. Later on, this system will to joined to domain.  

In this tutorial, we will see how to install File Server Windows 2012 server operating system. Later on, this system will to joined to domain.  

pfSense is an open source firewall/router computer software distribution based on FreeBSD. It is installed on a computer to make a dedicated firewall/router for a network and is noted for its reliability and offering features often only found in expensive commercial firewalls. It can be configured and upgraded through a web-based interface, and requires no knowledge of the underlying FreeBSD system to manage. pfSense is commonly deployed as a perimeter firewall, router, wireless access point, DHCP server, DNS server, and as a VPN endpoint. 

PFSense must be configured prior to configuring our pentest lab. From Windows 2012 system or any other lab systems, open explorer and go to https://192.168.1.1

Default user name/password is admin/pfsense to login to web console.

Let’s promote Windows 2012 to Domain Controller. This server will act as Active Directory, DNS, and DHCP server in our network. We can create/delete user accounts, enforce security policies, and manage systems from one centralized location.

Since all system communicate with the Domain Controller, it is strongly recommended to have static ip for the DC. In this tutorial, we will see how to set static IP.

Our domain controller will hand out IPs to all systems in the local network. In this tutorial, we will see how to enable DHCP role using the "Server Manager"

Let's see how to create DHCP scopes which will be used to hand out IPs to clients in the local network. 

We will join the Windows 7 system to domain, so all system can be managed centrally. 

We will join the Windows 10 system to domain, so all system can be managed centrally.

We will join the FileServer system to domain, so all system can be managed centrally.

Let's see how to export and create snapshots. We can restore or import from these back up files. 

Since the internal lab systems can communicate with the HOST system, malware and viruses can propagate and infect the host system. In this tutorial, we will see how to protect the host system by using firewall rules in PFSense.