#574: Hacking Windows Active Directory in 10 minutes

Thank you ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: threatlocker.com/davidbombal

// Spencer Alessi’s SOCIAL //
YouTube: / @techspence
Website: spenceralessi.com/adsecuritykit
X: x.com/techspence
LinkedIn: / spenceralessi
Swag: etsy.com/shop/ethicalthre...

// ThreatLocker’s SOCIAL //
LinkedIn: linkedin.com/company/thre...
X: x.com/threatlocker
Instagram: / threatlocker
Website: threatlocker.com

/ David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 - Coming up
0:54 - Spencer Alessi introduction & background
02:20 - Pentesting demo // Active Directory
03:34 - Control paths // Finding bad permissions with ADeleg
06:04 - Finding bad permissions with NetTools
06:52 - The most common issue
08:15 - Certificate abuse
12:20 - Quick recap
12:30 - Certificate abuse continued
15:10 - Pentesting summary
15:09 - How to become a pentester
18:48 - Recommended certifications
20:54 - Advice for blue teamers
22:15 - Overcoming being an introvert // Soft skills vs tech skills
23:43 - Windows hacking in the real world
24:54 - Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#microsoft #windows11 #hacker