Active Directory: Initial Access & Pwnage
17-18 November 2026 | Bucharest
Master the attack
The workshop emphasizes practical tradecraft and realistic attack paths, focusing on how adversaries chain multiple techniques together to achieve their objectives. By the end of the workshop, you will have a clear understanding of the attack lifecycle within Active Directory environments, the common mistakes organizations make, and how attackers exploit them.
This is a hands-on session built around real-world offensive techniques used in penetration testing and red team engagements, combining the theoretical foundations with the practical execution behind each step.
Why is this workshop relevant?
This workshop is aimed at participants at an intermediate skill level who already know at least the basics of Active Directory and want to build real offensive capability on top of that foundation.
It is highly relevant for penetration testers, red teamers, security engineers and system administrators who need to understand how Active Directory environments are actually attacked, and what the consequences of common configuration mistakes look like in practice.
Who is it for?
Ideal Participants:
- penetration testers
- red teamers
- security engineers
- system administrators
who need to understand how Active Directory environments are actually attacked, and what the consequences of common configuration mistakes look like in practice.
Primary Audience:
This workshop is aimed at participants at an intermediate skill level who already know at least the basics of Active Directory and want to build real offensive capability on top of that foundation.
Workshop agenda
The detailed agenda follows the structure of the trainer’s published course.
About the trainer
IULIAN SCHIFIRNET
Iulian Schifirnet is a seasoned Offensive Team Lead at Data Core Systems with over five years of hands-on experience in the offensive cybersecurity field. Known for his deep technical expertise and strategic mindset, Iulian works across the full offensive spectrum, from initial access through post-exploitation, with a particular focus on Active Directory environments. Throughout his career, Iulian has actively contributed to the cybersecurity community by winning prestigious contests, delivering impactful presentations, and speaking at numerous industry events.
Certifications
OSCE3 · OSEP · OSWE · OSCP · CRTO · CRTP · W200 · CRTA · eCPPT · PNPT · and others
Key learning objectives:
✔ The full attack lifecycle within an Active Directory environment, from initial access to full domain compromise.
✔ How adversaries chain multiple techniques together rather than relying on isolated exploits.
✔ The common misconfigurations and design mistakes organizations make in Active Directory.
✔ How those weaknesses are identified and exploited in practice.
✔ Offensive tradecraft applicable directly to penetration testing and red team engagements.
Other information & prerequisites
To follow the workshop successfully, participants should have:
- Basic networking concepts.
- Experience with Python.
- Familiarity with the Linux command line.
- Basic knowledge of Active Directory.
Technical requirements for attendees:
- Participants bring their own laptop.
- A Kali virtual machine prepared in advance, updated to the latest version.
Estimated Workshop Duration: 2 days, minimum 5 hours per day (10 hours total)
Language of Instruction: Romanian
Lab environment: the lab infrastructure is hosted and provided by the trainer, in collaboration with HackSmarter (Tyler Ramsbey). Every participant receives an individual account with access to the lab, so the environment scales regardless of the number of attendees. No lab setup is required from participants beyond the Kali virtual machine listed above.
Participation fee: EUR 280
FAQs
If we do not meet the minimum number of participants, you can either transfer to another workshop and pay or receive a refund for any difference in price, or opt for a full refund. You will be notified in advance and given options to choose what works best for you.
The workshop price covers food. However, accommodation is not included, but we can recommend nearby options for your convenience.
Yes, full refunds are available up to 15 days before the workshop start date. However, if you cancel after that, we can offer only 50% of the price.
You will receive an email with all the necessary details, including the workshop location, prerequisites, and schedule, at least one week before the event. If you have any immediate questions, feel free to reach out to us directly.