We are finally here.
This is my favorite section of the course and now we're gonna start actually attacking.
We've got our lab built out and we're ready to roll.
So this first section I'm calling the initial attack vectors and what I mean by that is this is the
way we're going to initially attempt to attack Active Directory.
There are a lot of posts compromise attacks which you're going to see a little bit later that require
having some sort of credential or some sort of lateral movement already occurring.
So first we have to find a way into the network when we start a penetration test especially internal.
We just have a machine we have our machine and we drop it into the network.
Typically you're remote.
You just already pee into this machine or maybe you're on site and you're working in front of this computer
but you're just drops into a network.
You are given no credentials you're given nothing.
OK.
And what we're going to do is we're going to go through how we can abuse features of Windows features.
Again these are not Miss configurations just features of Windows and utilize those to get access to
user accounts credentials and get access to machines as well.
So it's gonna be a really really fun ride.
Now when I first started getting into Active Directory pen testing my very first pen test I had no idea
what was going on and I was just kind of thrown into it.
They said Here you go go figure it out.
So I was onsite and I had my my laptop and Google.
And that's that's it.
Right.
And I found this wonderful article and I'm going to show it to you as well and this is kind of what
started me out.
Now it doesn't really have the how to do it but it just kind of has the here's what I do and this is
the 2018 edition.
So it's a little dated but most of these attacks are still very very common.
And what we're going to be covering in a lot of these are we're going to be covering all these tax first
of all and a lot of these are those initial attack vectors.
So this is the top five ways I got domain admin on your internal network before lunch.
I'm going to post this link down below in the references.
And so this Adam gentleman here he talks about net bios and Elliman are poisoning.
This is going to be our first topic that we're going to cover we come through here really attacks.
That's going to be the second topic that we cover and we keep going through.
Let's see what else he's got.
MH 17 010 that is eternal blue right.
And we covered that in the midcourse Capstone this you saw how easy it was in the midcourse Capstone.
This is truly that easy.
It is literally just discover the host running the vulnerable S&P right and then you exploit it.
Very very simple just like we did it before you get that shell pretty easy.
You would not believe it's been almost three years now.
How often we still see MH 17 010 in a network it's all the time.
OK.
And then we're in a cover Kerber roasting later on we get into post compromise attacks and man the middle
six we're actually going to be covering as well in this first part of the initial attack vectors These
are all very very good ones.
They still hold up to date very well.
Some of these are starting to be defended against and we'll talk about that as we go.
But when it comes to having a good reference point and a good starting point to learn attacks if you
knew these five going into an interview you have a leg up over just a general candidate.
So that's what we're after here is the practicality of this course and being practical with our attacks.
Understanding the attacks and the defenses and getting you ready for that that pen test interview.
So let's go ahead and move on from here.
We're going to get into our first attack which is going to be l m an R poisoning so I'll catch you in
the next video.