PLAY PODCASTS
7MS #671: Pentesting GOAD

7MS #671: Pentesting GOAD

7 Minute Security · Brian Johnson

April 18, 202525m 18s

Audio is streamed directly from the publisher (traffic.libsyn.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.

Show Notes

Hello! This week Joe "The Machine" Skeen and I kicked off a series all about pentesting GOAD (Game of Active Directory). In part one we covered:

  • Checking for null session enumeration on domain controllers
  • Enumerating systems with and without SMB signing
  • Scraping AD user account descriptions
  • Capturing hashes using Responder
  • Cracking hashes with Hashcat