Domain Trust Discovery
Discovering trust relationships with other domains and forests to hop between them.
How it shows up on Hack The Box
BloodHound and nltest /domain_trusts show the trusts. A parent-child trust inside the same forest falls to a golden ticket with ExtraSids.
Techniques in our catalog that match this one (the number is their machines):
Machines to practice it
Sorted from easiest to hardest. The ▶ link takes you to the minute of the IppSec video where it is used.
Commands
Taken from our cheatsheets and tool pages. Type your details and they are filled into every command.
PowerView › Enumerate
Domain trusts
Target
Get-DomainTrustNo command matches.