7MS #671: Pentesting GOAD

Hello! This week Joe "The Machine" Skeen and I kicked off a series all about pentesting GOAD (Game of Active Directory). In part one we covered:

• Checking for null session enumeration on domain controllers
• Enumerating systems with and without SMB signing
• Scraping AD user account descriptions
• Capturing hashes using Responder
• Cracking hashes with Hashcat