GOAD — Game of Active Directory Lab

AWS-hosted Active Directory pentest lab with multi-forest, multi-domain topology for practicing AD attacks, lateral movement, and Kerberos exploitation.

Network Topology

Internet → Jumpbox (15.188.19.167) → Private Subnet (192.168.56.0/24)
                                        ├── DC01  (192.168.56.10)  sevenkingdoms.local        [PDC]
                                        ├── DC02  (192.168.56.11)  north.sevenkingdoms.local  [Child DC]
                                        ├── DC03  (192.168.56.12)  essos.local                [Separate forest]
                                        ├── SRV02 (192.168.56.22)  north.sevenkingdoms.local  [Member]
                                        └── SRV03 (192.168.56.23)  essos.local                [Member]

Server Configuration

Jumpbox (Ubuntu 22.04)