# Persistence

> AD persistence via tickets, ACLs, shadow creds, and backdoor accounts

- **URL:** https://hackindex.io/platforms/active-directory/persistence
- **Platform:** [Active Directory](https://hackindex.io/platforms/active-directory.md)
- **Published:** 2026-04-05
- **Updated:** 2026-04-30

AD persistence techniques survive password resets, ticket expiration, and host reboots. Golden Tickets forged with the krbtgt hash grant domain-wide access until that hash is rotated twice. Silver Tickets target individual services without touching the DC.

Skeleton Key patches LSASS on a domain controller to accept a master password alongside real credentials. DSRM abuse and AdminSDHolder modification provide backup access paths that are rarely monitored. SID History injection lets a low-privilege account carry high-privilege SIDs without group membership changes visible in standard queries.

## Guides

- [Account and ACL Persistence](https://hackindex.io/platforms/active-directory/persistence/ad-account-and-acl-persistence.md): Techniques for maintaining AD access via account manipulation, ACL abuse, and permission backdoors to ensure long-term persistence in compromised environments.
- [ADCS Certificate Persistence](https://hackindex.io/platforms/active-directory/persistence/ad-adcs-certificate-persistence.md): Abuse AD Certificate Services to establish long-term persistence via certificate-based authentication, ESC techniques, and rogue template exploitation.
- [DSRM and Skeleton Key](https://hackindex.io/platforms/active-directory/persistence/ad-dsrm-and-skeleton-key.md): Covers DSRM password abuse and Skeleton Key injection for persistent stealthy access to Active Directory domain controllers, bypassing standard authentication.
- [Golden and Silver Ticket Persistence](https://hackindex.io/platforms/active-directory/persistence/golden-and-silver-ticket-persistence.md): Forging Kerberos golden (krbtgt) and silver (service account) tickets for persistent AD access, bypassing standard authentication controls.