7 Minute Security

7MS #671: Pentesting GOAD

Apr 18, 2025 · 25 min · 24.4 MB
0:00-25:18

Streams straight from the publisher. podnod never proxies or re-hosts episode audio.

Hello! This week Joe "The Machine" Skeen and I kicked off a series all about pentesting GOAD (Game of Active Directory). In part one we covered:

  • Checking for null session enumeration on domain controllers
  • Enumerating systems with and without SMB signing
  • Scraping AD user account descriptions
  • Capturing hashes using Responder
  • Cracking hashes with Hashcat