Hacking Domain Admin 6 ways to Sunday | PetitPotam, DCSync & Golden Tickets

Подписаться 2,5 тыс.

Просмотров 19 тыс.

50% 1

In this video we have a look at a relatively new attack called PetitPotam. This attack allows an unauthenticated attacker in your network to get Domain Admin in just a few easy steps.
Need a Penetration Test or help with Threat Hunting? cyberlinx.co.za/
LLMNR Poisoning:
• Stop Hackers Sniffing ...
Petit Potam
github.com/topotam/PetitPotam
Rubeus:
github.com/r3motecontrol/Ghos...
Mimikatz
github.com/gentilkiwi/mimikatz
Disclaimer: This video is strictly for educational and research purposes only.

Опубликовано:

16 авг 2021

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 16

@edwardamarh8461 2 года назад

Great walkthrough.

@TruthSeeker7101 Год назад

Thank you so much for the Video do you have the text transcript of the video?

@bughunter9766 2 года назад

Thanks Bro,, Do we need to upload mimikatz to the victim PC win10 ? or its running on kali as windowsVM .

@ronpetrillo9103 2 года назад

Should it be very high priority for NTLM to be disabled or is patching enough to prevent any exploit?

@Deathcapvamp 2 года назад

I can't stand MGK but love the video dude! Very cool!

@CyberlinxSecurity 2 года назад

😂😂 thanks so much! We can't judge Russell's music taste but at least the tech is good 😉

@modsmilzo644 2 года назад

Dude , can i know which is the CA server ? because i can enum the DC-AD , but i never know there is a CA server :/

@alejandroparrello6493 2 года назад

Hi! good video! i have a question, if i disable llmnr in all domian PCs, netbios, signing req allways, response only ntlmv2, shared folders off (all PCs), disable cmd, powershell to users, rdp off, win updates cuarenta, AV and ids/ips utm on all cross vlans. It's posible to do this pentest? thanks!! regards

@modsmilzo644 2 года назад

Probably DC dont have all patches , and u can execute zerologon ! :) and exploit that ! Also you can search for missconfiguration in Service Accounts , and try password spraying, bruteforce , etc . Dump ldap with bloodhunt to have more details about the DC.