---
title: "Post-Compromise Attacks in AD: Credential Validation with CrackMapExec"
url: https://daily.dev/posts/post-compromise-attacks-in-ad-credential-validation-with-crackmapexec-pgk3qi69i
source_url: https://infosecwriteups.com/post-compromise-attacks-in-ad-credential-validation-with-crackmapexec-8eb31304f924
type: article
source: "InfoSec Write-ups"
published: 2026-07-04T06:13:12.080Z
updated: 2026-07-04T06:13:33.437Z
tags: ["security", "active-directory"]
reading_time: 3
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Post-Compromise Attacks in AD: Credential Validation with CrackMapExec

**[InfoSec Write-ups](https://daily.dev/sources/infosecwriteups)** · 3 min read · 0 upvotes · 0 comments

## Summary

A beginner-level walkthrough of post-compromise attacks in an Active Directory lab environment. Covers using CrackMapExec to validate stolen credentials across a subnet via SMB, dumping SAM hashes with the --sam flag and Impacket's secretsdump, gaining a shell via psexec.py, and cracking NTLM hashes with Hashcat. The lab uses Windows Server 2016 with two Windows Enterprise machines, and credentials were initially obtained via LLMNR poisoning.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://infosecwriteups.com/post-compromise-attacks-in-ad-credential-validation-with-crackmapexec-8eb31304f924>

## Similar posts on daily.dev

- [TryHackMe — Operation Endgame: Pwning an Active Directory Domain from Zero Credentials](https://daily.dev/posts/tryhackme-operation-endgame-pwning-an-active-directory-domain-from-zero-credentials-1jqkay38a) · InfoSec Write-ups · 0 upvotes · 0 comments
- [ShadowGate Active Directory Lab Walkthrough \[HackSmarter\]](https://daily.dev/posts/shadowgate-active-directory-lab-walkthrough-hacksmarter--ovegbtw2c) · InfoSec Write-ups · 1 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#active-directory](https://daily.dev/tags/active-directory)

[View this post on daily.dev](https://daily.dev/posts/post-compromise-attacks-in-ad-credential-validation-with-crackmapexec-pgk3qi69i)