Sept. 29, 2023, 4:55 p.m. | Brian Johnson

7 Minute Security 7ms.us


Today we talk about an awesome path to internal network pentest pwnage using downgraded authentication from a domain controller, a tool called ntlmv1-multi, and a boatload of cloud-cracking power on the cheap from vast.ai. Here's my chicken scratch notes for how to take the downgraded authentication hash

authentication called cloud controller cracking domain domain controller hash internal internal network network path pentest pentesting podcast power today tool vast

Senior Associate, Cybersecurity Operations

@ Ares Management Corporation | Los Angeles, CA - CULVER CITY

Senior DevSecOps Engineer

@ Peraton | Fort Gordon, GA, United States

Senior DevSecOps Engineer

@ Diverto | Zagreb, Croatia

Lead DevSecOps Engineer

@ DTCC | Tampa, FL, United States

Incident Responder (Fraud Threat Management)

@ Scotiabank | Toronto, ON, CA, M5H1H1

Penetration Tester, Expert (Federal agency) - Tysons, VA - Full Time

@ iSoftTek Solutions | Tysons, Virginia, United States