7MS #671: Pentesting GOAD

18/04/2025 25 min
7MS #671: Pentesting GOAD

Listen "7MS #671: Pentesting GOAD"

Episode Synopsis

Hello! This week Joe "The Machine" Skeen and I kicked off a series all about pentesting GOAD (Game of Active Directory).  In part one we covered: Checking for null session enumeration on domain controllers Enumerating systems with and without SMB signing Scraping AD user account descriptions Capturing hashes using Responder Cracking hashes with Hashcat