Windows Pentest Tutorial (Active Directory Game Over!)

Get your 10% discount here: https://www.offsec.com/review/david-pwk-2023/ Disclaimer: I was NOT paid for this interview. I wanted to make this video because it affects many of you watching and is a major topic on the OSCP exam. However, OffSec did give me access to Learn One for one year so I could see the course content. This has helped me prepare for the interview. Hopefully I'll be able to make more content covering what is in the PEN 200 course in future :) // GitHub Code // Commands: https://github.com/davidbombal/Ethical-Hacking/blob/main/Windows%20Pentesting%20with%20OffSec // Documentation // Changes: https://www.offsec.com/offsec/pen-200-2023/ Course: https://www.offsec.com/courses/pen-200/ // Offsec // Twitter: https://twitter.com/offsectraining Website: https://www.offsec.com/ LinkedIn: https://www.linkedin.com/company/offsec-training/ // Remi's SOCIAL // LinkedIn: https://no.linkedin.com/in/remi-solberg-8991b910a // David's SOCIAL // Discord: https://discord.gg/davidbombal Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal // MENU // 00:00 - Coming up 01:31 - Disclaimer 01:57 - Remi Solberg introduction & background 03:37 - Jump to a timestamp (check in description below) 03:57 - Simulated full-scale penetration test demo // Hacking Windows 05:12 - OffSec Learn One discount! 06:22 - Penetration test demo 09:38 - Documentation & enumeration // Prepping for penetration test 23:25 - Penetration test demo // Accessing users 30:10 - Privilege escalation 37:44 - Using ICACLS (Integrity Access Control Access List) 43:59 - Privilege escalation (continued) 52:14 - Getting around obstacles // Social engineering 53:23 - Privilege escalation (continued) 57:19 - Stealing credentials 59:11 - Using Mimikatz tool // Kerberos and NTLM Authentication (theory) 01:07:33 - Mimikatz to