Active Directory & Pentesting Lab Part 1 (Recon & Attacking Web Servers)

Michael Koczwara
6 min readSep 5, 2021

Entry Level Pentesting/Active Directory Lab

The lab is available on snaplabs:

https://dashboard.snaplabs.io/templates/786d607a-f49e-4ceb-0d25-ca4adc78c2eb

Recon & Attacking Web Servers -Walkthrough

Targets: External Webservers

  • 10.10.0.181
  • 10.10.0.103
nmap -p- 10.10.0.181 -vv

Only two ports are opened here 22 and 80 so lets move on to the next target.

Nmap scan result for 10.10.0.181
nmap -p- 10.10.0.103 -vv

Much more interesting results here, especially open port 21/FTP service.

Nmap scan result for 10.10.0.103

--

--