Hacking Active Directory for Beginners (over 5 hours of content!)

[@ultravioletiris6241]

Heath, thank you for sticking through the tough times to continue leading this industry by example. You know this but you make a huge impact on thousands of lives. You have a wonderful team too.

[@Ransomewerewolf]

For anyone stuck at 1:23:50, Windows Defender Antivirus has been renamed Microsoft Defender Antivirus in Server 2022.

[@wrkt98]

nice one

[@martinmudaliar7542]

lol i was confused for a second, then i realised i'm still using server 2019

[@alihamid4909]

Thanks alot, it save my time

[@avichiii]

finally finished the course, learned a lot.

[@jaytboricua12]

Thanks for everything you do for the community. Can't wait to finish the PEH course, been sidetracked by other commitments, but this helps motivate me to get back into it.

[@FlewTheCoop]

Great stuff. I am learning a lot. 2:16:47 SMB Relay. Do you have to trick the one machine user to go to a share on your machine? Is this just using a broadcast capture similar to LLMNR you showed earlier?

[@davidburn69]

Same question here, did you get it solved?

[@aloisdasilva441]

I did not manage to reproduce what he did, is it the same for you ?

[@the_sandman00]

You don’t have to trick the user. In the video he pointed to his own machine IP but in general if a user mistypes while connecting to a different share, it’ll capture and point it to attackers machine

[@kaiadkins]

@@the_sandman00there’s got to be some other methods I feel like the chances of a user pointing to an incorrect UNC path is slim to none

[@the_sandman00]

@@kaiadkins Might be. But trust me it’s way more common. What we basically do is. We run a tmux session and there we start responder and leave it. Sometimes it takes a lot of time. But sometimes it doesn’t take more than a day

[@J_a_k_e_]

Thank you sifu 🙏 This is exactly what I'm getting into at the moment. Synchronicity or what 🤯

[@Tropicalplayer]

These are the best vids with the best voice that doesn't put u to sleep the cmd hashcat blew my mind didn't no cmd was so handy still thank you for the vid

[@riversmith3123]

I’m joining the courses then moving to get started with certs thank you for all the work you put into this

[@martinmudaliar7542]

A little tip for setting up windows 10 machines (for workstation only): Once you are done with the first one, right click on the windows 10 tab then: VM -> Manage -> Clone. Make sure that you do this before setting up users, and domain settings. Happy hacking! o7

[@TheBashir007]

As always the greatest content ever My advise to students Love and cherish every second of this lecture it some ones life's work

[@kokn3t]

Thank you for the awesome pentest series.

[@debrikchakraborty2845]

2:13:16 Do I have to disable the firewall in my "Punisher" windows so I can get the nmap results (It is showing filtered ports) ?

[@Linux333]

15 mins in and already amazing

[@TheElevenBravo]

Hey! New fan here.... Just wanted to drop a line expressing my gratitude for your hard work in keeping us all on top of our games. Thank you! Thank you...... May The Lord keep blessing you and your family! 🙏

[@something18999]

Amazing course for sure!!

[@Ragab0t]

On a serious note, thanks for sharing and thanks for everything you do for the community 🎉🎉

[@joel9909]

Thank you TCM

[@eye21021]

2:42:39 would it be the same if we use ip address for a normal user, or should we use the domain controller ip?

[@chrisr.8610]

Amazing video, I learned a lot. Thanks!

[@zheyingchin4194]

Are there any CPU requirements for this many VMs?

[@CD-ir1mt]

My ntlmrelayx doesn't work. Do u know if the problem is about my version of python (3.11) ?

[@MIKEalaBlackBerry]

I just tried to run responder with the flag “-rdwv” but it gives the error “no such option: -r” I checked the help page and apparently the -r option doesn’t exist anymore?

[@avichiii]

yes -r is not used in the updated versions, you need to exclude r, just go with -dwv

[@4b5urd.]

TCM you're the best! You forever have my respect. And thank you for your service, Heath!

[@Saw-o3h]

1:49:04 why the hashes are different?

[@somebody3014]

wondering about the same thing, did you find out why?

[@Saw-o3h]

@@somebody3014not yet actually

[@williamstan1780]

I am having difficulties in getting the Firefox esr to run on my kali 32bit on virtual box . Wonder if you happen to encounter the same from other people

[@dispozablehero9829]

Does anyone know if this video helps getting passed the wall you hit in the pjpt?

[@ClintonKimani-l9z]

New virtual machine and open new window in file menu is disabled in vmware workstation 17, any suggestions,?

[@ShellCode-oo2cu]

Thank you for this great video.

[@adamcope6890]

Thanks for making this course available! I’ll definitely check out your courses in the website.

[@ajayghale2623]

i cant see the computers in my network tab why is that even after enabling network sharing

[@Zachsnotboard]

Does the new course cover azure ?

[@sreenathshenoy9387]

Can i Follow trough the course if I go with windows 11 Enterprise

[@حسينالعربي-د8ص]

Thank you ❤❤❤❤

[@BrianCastillo-n4p]

Got stuck installing Kali linux . I am on macbook air m1 chip . i downloaded the virtual box software . and i dont know what exactly we are to do with 7z

[@BrianCastillo-n4p]

kzbin.info/www/bejne/i2GcpKKbrM6oZ5o

[@profesurtom]

Hey one tip from me is . i am currently running on 8 gb of total system ram with i3 5005 cpu. its really old but the way i set up is i installed backbox and as it is ubuntu with hacking tools i just do a distro upgrade and then now i have given 1.5gib to 2 windows respectivels and 2 gib to windows server having a ubuntu with hacking tools . NOT ALL TOOLS BUT it will be fine for low end users>>. one more thing is download a 32 bit of windows 10 as they are low>

[@christophercahall3092]

just made a active directory lab in virtualbox too

[@josephalan31]

At 02:44:00 when I run ntlmrelayx I get the error saying Errorno 104 connection reset by peer can someone help me resolve it pls

[@UserMS101]

were you able to sort the issue? I have a similar problem

[@josephalan31]

@@UserMS101 yes I was able to sort it

[@othmankarouch7560]

@@josephalan31how?

[@user-4theloveoftech]

Thank You! This helps a lot with getting data! 😊

[@Harishkumar-lt6pu]

Hi TCM , currently I'm doing PEH , but I have one doubt from where I need to start to get into cloud security. Like product based or multi cloud . Can u give me a suggestion

[@ignite137]

Windows server&Enterprise on ARM?

[@kams196]

The only bad thing about PNPT and the others certs here is the financial side. The price is super affordable but still got no payment plan or financial arrangement whatsoever. Not everyone has the money ready to go. But a short monthly plan. 3 to 6 months would bring me in

[@IntelliVisionTheAI]

hey i cant download workstation. it shows me error over and over again.

[@ogclassicjones332]

getting error when downloading PMK darklab is allegedly infected.. researched and they are supposed to be updating to remove it

[@williamstan1780]

Hi it seems that I have some difficulties in running Virtual Box on MacBook for 64 bits just wonder if anyone has encountered the same situation

[@softwaresinner]

For some reason I get an error when trying to join the workstations to the domain "That domain could not be found" I followed the video exactly. I also ensured on the server that DNS was running and could be reached. Any thoughts?

[@Eric-ey7rm]

having the same issue here. I also noticed that my ipv4 address is the same for all 3 of my machines....

[@leihsee]

@@Eric-ey7rm if you use virtualbox change the NAT to the NATnetwork,your ip's will be different(I wrote it because,if anybody will face this problem)

[@whyYUbee]

I had the same issue, turns out for all machines Windows Defender has to be manually disabled and IPv6 turned off in Network properties. I found YT video that actually helped me after 8 hours of trying to solve this -> Made by Kindson The Tech Pro "How to Setup Active Directory Domain With VirtualBox and Join Computers - 2020". I hope that helps!

[@chaturvedi.jayant_12]

Hi. I couldn't join the Domain of one vm to the local administrator. Can anyone help or guide me?

[@whyYUbee]

I have the same issue, trying to research that. If I find anything I will let you know.

[@jeebugorn]

shared with my co-workers (work for a managed security company). one of my co-workers with working towards PJPT, so this will be helpful

[@Psyb3rN4ut]

Thanx so much for publishing this material. I would love to connect.

[@anon3027]

Wow amazing thank you

[@hannah-bw1rx]

does anyone have problem like mine, error while powering on: this host does not support intel vt-x. what should i do?

[@Adivasi7777]

I guess turn on hypervisor...did you try BIOS..

[@Jupiterxice]

TCM you are awesome a gift to rising pentesters............. GODSPEED..

[@rafaelcabral2037]

Last video before bed 😊

[@darrylwest3106]

This came in at the right time

[@onurceydakaran]

Thank you for your kind share

[@youcef2851]

thanks tcm for this valuable free content

[@SayantanHack]

Thanks amazing course

[@rochdiferjani6778]

I love it 🥰

[@donats2010]

Great video! From a Pentester perspective, what are the requirements to ask to a client in order to do an effective Active Directory pentest? Thank you

[@TheMan-r6p]

hey i have a question. what if your vm machine runs slow? is there an alterntive? also kali linux is false postive for me

[@mohammadtorikulislam3981]

I am just waiting for this tutorials Thanks a lot...

[@manobrodeful]

Could I detonate ransomware on this lab?

[@CatesAstadan]

Hello Heath, Thank you for this video. Question, what is the difference between joining in your Attack AD Defend from PEH training? I can see almost the same topics?

[@TCMSecurityAcademy]

A good chunk of the material can be found in the AD sections of the Practical Ethical Hacking course, which is part of our Academy. There are a few topics we'll be covering that aren't covered there, but the big benefit of the live class would be for those that prefer to learn in a classroom setting, would prefer not setting up their own labs, prefer direct instructor interaction, etc. So it just depends on your learning style.

[@CatesAstadan]

@@TCMSecurityAcademy Thank you Heath, I love what you do for the community and helping me in my career. Almost taking all your training in TCM academy. Hoping for more training in the future. More power to you and your team!

[@marcelinemulaji2463]

​@@TCMSecurityAcademysir I would like to know how to have access to your academy for paid course if there are any

[@haryodes5675]

Thank u for share this, i have no money sign up at tcm, so i enjoy watch on youtube

[@FulcanelliRosetta]

Good review for the PJPT!

[@ienabellamy]

Awesome course. Thanks!!

[@MosquitoHunt3r]

Working out Heath? Looking fitter! Hahaha Thanks for the great content as always!

[@brunosm0]

Muchas gracias!

[@Trevor_90]

What brand of glasses do you wear?

[@bullettraderscircle]

You have so much important content, it is discouraging for an absolute beginner because they do not know where to start and how to measure their progress and most important how they can match their current progress with real life demands in the security industry. I am sure it will take a full video just to help put followers on a study/progress path, overall your videos are ablolute bangers 100% tumbs up

[@sulavadhikari5843]

1:25:00

[@NagendraMurari]

Thank you so much TCM Sec.

[@БэтманАполло-р1б]

Большое спасибо !

[@Rabah_RAHLI]

thank you

[@arshdeeprobin1525]

Thanks Dear

[@ghostexist988]

Hi there, i am curiouse how you are running the Oracle VirtualBox on M1 MacBook, is it already available in a live stable version. Last time i tryed to manage VMs with VBox it was in beta version and not really usable.

[@KRU.Infosec]

Is there any student discount on All access membership?

[@mohammedadil672]

Hi Heath, Thanks for This video, i have a installed windows 10 and made it as Marvel/thePunisher and also have windows 7 installed in my vmware wondering if i can make my windows 7 machine to join as a Spiderman 2nd machine or do i have to make a windows 10 clone in order for everything to be working smoothly.

[@aga1nstall0dds]

Heath Adams aka the beyonder

[@johnbeal6592]

hi, my ipv6 attack is not working it says connection reset by peer. and is the authentication of the punisher was done because we provided the credentials or it captured the credentials and did the authentication in the ipv6 attack.?

[@avichiii]

is your problem solved, if not i can help!

[@johnbeal6592]

@@avichiii I think the problem was due to the sudden closing of vm . I have 16 gb of ram and i was running 4 vm kali 4gb, windows server 2gb and 2 windows 10 with 2gb each and windows as the base operating system. I think due to lack of ram not all 4 stays one suddenly shuts down after some time. SO, that was interrupting I think. But if you have something I'd be happy to listen, problems arise everytime so, your solution may be helpful next time. Thank You.

[@johnbeal6592]

@@avichiii I think I need your help. Can you help me out? Its really not working the ipv6 attack.

[@avichiii]

@@johnbeal6592 ya sure, tell me!

[@rivestream2530]

Did you manage to solve this ? I'm encountering the same problem.

[@ourdazakaria4182]

Unbelieveable ❤️

[@EliteBuildingCompany]

Thanks you sir, much appreciated.

[@eno88]

welp, I had nothing better to do this weekend

[@bigaripolaylar8993]

4:07:35

[@kamilpolak9739]

I see that the current version of VirtualBox does not support Mac OS. Any alternatives?

[@cheeto3604]

vmware workstation player

[@jojootw-j9o]

windows hacking world is big, like the cloud stuff

[@daljeetbhati8353]

Big fan

[@Takeonm]

Awesome! Thank youuuuu

[@rodrigo1300]

Someone here tried the MITM6 attack using Windows Server 2022 and workstation Windows 11?

[@ienabellamy]

yes, it works. I tried win server 2019 and 2022 with windows 11 arm machines, worked flawlessy.

[@rodrigo1300]

@@ienabellamy Thank you for your answer. Then I have to check what I'm doing wrong. Somehow my mitm6 script doesn't spoof any request. So literally nothing happens.

[@DaRedT]

thank you 👍👋👋

[@itech7354]

Thanks for this great course please make one advance active DIRECTORY hacking ❤❤❤❤

[@JerrySpallone]

For beginners… das me!

[@ChrisHaastrup]

yes sir

[@_frhaktal_4099]

thank you is verry cool

[@upup5133]

When will You make malware development course so we can be as real as possible when it comes to testing real enviroment? Meterpreter is triggering AV and in real scenario You wouldn't get shell with simple meterpreter payload if AV was running. We (at least I 🙂) want to learn the part where we are crypting our payload but we can't do that without specific pre-knowledge, and we don't know how to get there. I hope You will at least read my comment.

[@x0rZ15t]

Woow dude!

[@kook_armygirl97]

Hi bdg hack banao

[@Ragab0t]

First? 😅

[@jimmyfitzsimmons7170]

God the first hour and half is messy and little bit rush.

[@bryansolis7063]

Please subtitle

[@nixduschemitstrom]

All this hash and crack really paints a bad picture of the CySec Community -.-