Hacking Walkthrough: Lateral Movement & Privilege Escalation | Keynote From Veza NHI Summit 2024

[@Zetalpa187]

Dude...I got my Sec+ earlier this year and went through a few months of job searching and became so disillusioned with it all that I lost all interest in IT subjects period. I don't know why, or how to explain it, but this video suddenly just re-ignited my interests. Bravo sir, top notch presentation!

[@twoBitSoda]

I got my sec+ and have been searching for jobs for months. I’m not gonna give up though, even if it takes me years I want to work in cyber security

[@cfairm]

@@twoBitSoda Cybersecurity is not entry level, Sec+ will not be enough for a security role.

[@twoBitSoda]

@@cfairm I've got a master's degree in cyber security as well, but it's not getting me far. I'm failing to hear back from tech support roles and I've applied to about a hundred

[@hamiltonfungula63]

​@twoBitSoda review your CV make suis it's appropriately written and make sure you look for cyber security online projects to showcase yr skills.

[@RandyMedina-e3w]

​@@twoBitSoda have you thought about getting a hands on practice cert, like cpts from hack the box, Oscp?

[@raiders18dr]

Marcus, man, this was a perfect video. Love the demo, and definitely love the advice/remediation/mitigation for incident responders

[@izzuddinafif]

Would like to see more videos like this!

[@rgb123-jm5mc]

Awesome man, your explanations are easy to follow

[@sahal9236]

Interesting breakdown! Just a note that Mimikatz can often be detected and blocked by Windows Defender by default. However, attackers can bypass this by disabling Defender, which is a straightforward step for many APTs. It would be helpful to know if Defender was disabled in this scenario, as it wasn’t mentioned in the video.

[@lucpuffle]

I agree. I think that the attacker would have disabled windows defender using a powershell command from the web shell which would have been run by the System user account

[@AlwaysInstallElevated]

Not offten, always

[@mczen84]

@@AlwaysInstallElevated Its possible to modify the source code of mimikatz but its a lot of work, its also possible to bypass amsi.

[@HuntrOffSec]

thanks for the info always marcus! if you make an ethical hacking course beginner stuff ill totally buy or watch! great stuff legend!

[@LimitedState]

Amazing breakdown. Very educational.

[@etziowingeler3173]

Love the demo! Great stuff!

[@fuzzinn]

Very interesting breakdown, loved the demo you did.

[@ellehooq]

Thank you for a great video!

[@Madara-j9v]

saw your story wish you good luck in the future

[@guilherme5094]

Thanks man!

[@kingofthesummer5180]

This is great. Can you share the playbook ?

[@Gamer-zo2dm]

Pretty good demo 👍

[@Michael-wr7gi]

For the URL to work, a port has to be open on the machine. How did they manage to open up a port for HTTPS ( I assume they didn't make it the default 80 and 443 ) without anyone knowing?

[@mariosoliz6013]

hola como estas soy de argentina y me gustaria que me guies para aprender de una pagina que sea verdaderamente interesante ingresar al mundo de el hack ya que hay muchas falsas que no enseñan nada solo marketing, gracias.

[@diegodejesus9668]

Te recomiendo hackthebox academy, absolutamente todo lo que menciona en el video lo puedes aprender ahi

[@Dygear]

What's an APT?

[@Serpensin]

Advanced Persistent Threat

[@neloangelo__13]

Annoying Persistent Threat

[@rgb123-jm5mc]

Ass Persistent Threat

[@Sqedabantwana]

​@@Serpensinwhats an EDR

[@iHakku_D9]

@@Sqedabantwana Endpoint Detection and Response (imagine an AV on steroids)

[@MichaelMyers_ioi]

:)

[@Messier74]

pls do a vid about lotl