This paper conducts a detailed investigation into critical vulnerabilities and exploitation techniques that target Active Directory (AD), a core component of enterprise network infrastructure responsible for user and resource management. Due to its central role, AD is frequently targeted by sophisticated cyber- attacks seeking to compromise network integrity and gain unauthorized access. Utilizing Cobalt Strike, a tool for threat emulation and red teaming, we simulate various AD attacks within an isolated virtual environment. This approach bridges the gap between theoretical knowledge and real-world application. Cobalt Strike is a command-and-control server that has many features such as payload delivery, but it focuses mainly on the phases that come after the initial access, which is called post-exploitation activities. In this research, we will dive into few AD attack techniques, including kerberoasting attack, unconstrained delegation attack, Active Directory Certificate Services (AD CS) misconfigurations, golden ticket attack, and DCSync attack. These methods are analyzed to demonstrate how attackers can identify and exploit vulnerabilities in Active Directory configurations, escalate privileges, perform lateral movements, and establish persistence within network environments. By examining each attack, we provide a detailed understanding of the processes involved, illustrating how attackers penetrate AD environments and the subsequent impact on organizational security. Furthermore, this study highlights mitigation strategies and best practices to enhance AD security, offering guidance for cybersecurity professionals to implement preventive measures against these vulnerabilities. By integrating theoretical perspectives with practical examples, this research contributes valuable insights to the field of cybersecurity, aiding professionals in developing robust defense strategies against threats targeting essential infrastructure.