Active Directory Trust Attacks

AD trusts extend the attack surface beyond a single domain. A parent-child trust is transitive — own the child domain, escalate to the parent's Enterprise Admins. Cross-forest trusts have SID filtering by default, but misconfigurations bypass it. ExtraSids injection, SID history abuse, and golden tickets with ExtraSids are the tools. This covers the full trust escalation chain.