Sign inOpen the app
7 Minute Security

7MS #663: Pentesting GOAD SCCM

Feb 21, 2025 · 29 min · 28.6 MB
0:00-29:41

Streams straight from the publisher. podnod never proxies or re-hosts episode audio.

Open in podnod

Today we live-hack an SCCM server via GOAD SCCM using some attack guidance from Misconfiguration Manager! Attacks include:

  • Unauthenticated PXE attack
  • PXE (with password) attack
  • Relaying the machine account of the MECM box over to the SQL server to get local admin