Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Gaining Domain Admin from Outside Active Directory- 29

markitzeroday.comPosted 6 Years Ago
  • Just a story about an internal pentest. A super fun read! The highlights will be listed below:
  • Test the easy stuff! Even when you do not think it is going to work, it's a free pass :)
  • The cracked password was Winter2018!. Remember to look at the password rules for a given company. This will give you an idea on what the password may be. In particular, if it is a quarterly password change, people may use the season + year of the password.
  • Use all avenues, even the stupid simple ones :)