Windows Pentest Tutorial (Active Directory Game Over!)

Disclaimer: I was NOT paid for this interview. I wanted to make this video because it affects many of you watching and is a major topic on the OSCP exam. However, OffSec did give me access to Learn One for one year so I could see the course content. This has helped me prepare for the interview. Hopefully I'll be able to make more content covering what is in the PEN 200 course in future :)

// GitHub Code //

// Documentation //

// Offsec //

// Remi's SOCIAL //

// David's SOCIAL //

// MENU //
00:00 - Coming up
01:31 - Disclaimer
01:57 - Remi Solberg introduction & background
03:37 - Jump to a timestamp (check in description below)
03:57 - Simulated full-scale penetration test demo // Hacking Windows
05:12 - OffSec Learn One discount!
06:22 - Penetration test demo
09:38 - Documentation & enumeration // Prepping for penetration test
23:25 - Penetration test demo // Accessing users
30:10 - Privilege escalation
37:44 - Using ICACLS (Integrity Access Control Access List)
43:59 - Privilege escalation (continued)
52:14 - Getting around obstacles // Social engineering
53:23 - Privilege escalation (continued)
57:19 - Stealing credentials
59:11 - Using Mimikatz tool // Kerberos and NTLM Authentication (theory)
01:07:33 - Mimikatz tool demo
01:06:05 - Penetration test demo (continued) // Exposing passwords & credentials
01:23:25 - What a malicious hacker would do
01:25:55 - The "Golden Ticket" // How to forge a ticket
01:45:07 - Demo summary & tips
01:48:05 - Conclusion

// MY STUFF //

// SPONSORS //

oscp
pen-200
offsec
offensive sercurity
pentest
pentester
hack
hacker
hacking
ethical hacking
ethical hacker course
ethical hacker

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#hacker #pentester #oscp

[reluchan]

please get this guy back for more tutorials, really great video

[kevinneufeld]

For me as a sysadmin this video has shown many things that I will give attention even more in the future and double check and change. Thanks so so much for that awesome and free content.

[godadawgashaw]

David you always coming with intersting guests and tech explanation .thanks

[Saint_Staunch]

A Couple of retired machines on Hack The Box are good active directory practice machines with good walk through's if you get stuck 'Hathor' and 'Sekhmet'.

[Arcadiality]

This vid is a gem, and Remi is a breath of fresh air. Great explains along the way, but not too much to put off viewers with reasonable knowledge in some areas. More id definitely required from you guys if possible. Never change Remi, people who work with you must love it!!

[deltaSoT]

wow this is absolutely jam packed for a youtube video. Killer video David, I'm blown away by the depth of knowledge your guests have.

[personalPickle]

Nice work Dr Bombal - great content as always, we appreciate your service

[johnnieparker]

Very indepth and intriguing video. I'd like to see Remy provide more explanations to OffSec practices and again, with he explanations.

[Lleanlleawrg]

Right.

But seriously, good content and I appreciate taking the time to make this and posting it publicly too.

[VacentViscera]

I watched this video and immediately went and checked like 20 files on various systems. LOL. Good wake-up for anyone that might not be thinking about these attacks.

[mohammadalihanfi]

best video to overview what is a pentest and how they approach it thank you david for this king of content on youtube we are very happy to see you again with the videos like this :)))

[healthvative]

Thanks David for a great channel. From Cyber security, hacking, pen testing, networking … all in one. Also thanks to Remi for the excellent demo

[RmDGaming]

Really great to see this all done. Thanks for the video 🎉 I’m so used to seeing this done with bloodhound etc. it was really refreshing seeing it done this way.

[elmeromero]

High valuable content. Looking forward for more stuff like this. Thank you 👍

[muyangli]

This vid is brilliant, Remy explained things so well and David you asked the questions popping right into my mind. Great job! Thanks!

[ibrahimiam]

Greater job have been achieved inside this content. David, thanks again for contribution. You always try to provide the best content for your audience. Thanks

[ДмитрийКузнецов-яд]

David, you are doing fascinating content, you help me drastically to gain my knowledge in this new sphere for me

[KryptoWooks]

u always have good people as guests your good too Bombal enjoy seeing and learning from good people the best Knowledge is free God bless😇

[BarryBazzawillWilliams]

Thank you so much this is the video I have always been wanted the full pentest from initial access to lateral movement, escalation and persistence. Pretty much the whole package. Great stuff.

[owenk]

So awesome. Asked about this on your Managed vs Unmanaged switch YouTube Short. Thanks David.