7MS #313: Push-Button Domain Admin Access

As I was preparing for my Secure 360 talk a month or so ago, I stumbled upon this awesome article which details a method for getting Domain Admin access in just a few minutes - without cracking passwords or doing anything else "loud." The tools you'll need are:

• PowerShell Empire
• DeathStar
• Responder
• Ntlmrelayx

I've written up all the steps in a gist that you can grab here. Enjoy!