4 Active Directory Attacks to become Domain Admin!

#pentesting #ctf #hacking #cybersecurity #activedirectory #redteaming
🔥Use Coupon THEHACKERISH and Get 5% discount on CRTP and other courses on www.alteredsec...
In this video, I demonstrate how I hacked an Active Directory target using 4 attack paths!
🚀 🔥 Become a pentester
academy.thehac...
📙 Learn the technical skills:
thehackerish.c...
📙 Become a successful bug bounty hunter: thehackerish.c...
🆓 Download your FREE Web hacking LAB and starting hacking NOW: thehackerish.c...
🌐 Read more on the blog: thehackerish.com
🇩 Discord: / discord
💪🏻 Support this work: thehackerish.c...
Facebook Page: / thehackerish
Follow us on Twitter: / thehackerish
Listen on Anchor: anchor.fm/theh...
Listen on Spotify: open.spotify.c...
Listen on Google Podcasts: podcasts.googl...

[@Eggsec]

Love! Currently putting a AD lab, to learn from inside out then to see where i can leverage attacks as a attacker. This video is on my alley.

[@Karan-ow4wl]

Got so much ideas from this video which i never know how to use these techniques before.

[@RyanBess]

@5:24, it's impossible for any human to know the password. Even if you reset it AD will automatically randomize it once again. Also on the waiting for 24hrs, all that is needed is to wait the max lifetime of a user/service ticket. Default is 10 hours so once you reset it, you need to wait another 10 hours and you can reset it again. Good video showing common AD exploits.

[@rbgtk]

Second video in a row, great stuff!

[@thehackerish]

Glad you liked it!

[@nathanalves1372]

Cool well known stuff, but powershell logging is always a concern in newer versions of windows. Would love a video using a standard bat cli

[@novianindy887]

why it's a concern?

[@Eggsec]

Nice another tool Rubeus, i learned LMNR poisoning which i think is doing the same thing.

[@MRSMITHENTOP]

I want your desktop background it’s so sick !!!!

[@GauravSharma-ks9eq]

Always a big fan of your work and always ready to work for you for free 😀

[@ghsewar989]

amazing, thank you

[@remy2885]

broo ur content is soo great its like a vlog hacking/ redteam/ blueteam video soo great!

[@thehackerish]

Glad you like them! Thanks for the warm feedback ☺

[@3rdtwirl494]

So. I’ve just noticed I’m the owner of a doman that’s not mine. Can I use it or would whomever it belongs to know

[@cvport8155]

Please make more vd for advanced active directory

[@AzmahSmith]

Great Content ❤

[@jjjww975]

What do you do - when you cannot upload PowerView ? - you can't load any tools on the domain host -- what then ???

[@zzzzzzzzZzZZzzzaZzz]

Great Video !

[@Tchatarero36]

Great Content ...

[@chindilindi888]

why is your academy site not secured?

[@mohittirkey7889]

Were you not caught by the SOC team as the commands might have created a trigger

[@thehackerish]

yes, the demo included a blue team part, which caught some of the techniques, but not all.

[@abdessalam8468]

❤❤❤❤Good luck

[@thehackerish]

How do you find the video? You were one of the requesters of active directory

[@abdessalam8468]

@@thehackerishYou have an awesome explanation bro

[@berthold9582]

Je sais si c'est mon micro mais dans cette vidéo tu parle moins fort 😢

[@Kami-hd5sh]

❤❤❤❤❤🎉😢🎉

[@NguyenTrung-ji9pq]

Your voice is low. Would you improve your video's sound?

[@thehackerish]

Hmmm...strange, Have you tried turning the volume up?

[@NguyenTrung-ji9pq]

@@thehackerishSure. The sound is louder when I watch another video. It's more clear when I use the headphone.

[@markc6714]

If you actually showed something rather than just your face, it might have been a useful video

[@thehackerish]

I bought an expensive camera just to show my face. I guess I should have waited for your comment