Thank you ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
// MENU //
0:00 - Coming up
0:54 - Spencer Alessi introduction & background
02:20 - Pentesting demo // Active Directory
03:34 - Control paths // Finding bad permissions with ADeleg
06:04 - Finding bad permissions with NetTools
06:52 - The most common issue
08:15 - Certificate abuse
12:20 - Quick recap
12:30 - Certificate abuse continued
15:10 - Pentesting summary
15:09 - How to become a pentester
18:48 - Recommended certifications
20:54 - Advice for blue teamers
22:15 - Overcoming being an introvert // Soft skills vs tech skills
23:43 - Windows hacking in the real world
24:54 - Conclusion
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Disclaimer: This video is for educational purposes only.
Podden och tillhörande omslagsbild på den här sidan tillhör
David Bombal. Innehållet i podden är skapat av David Bombal och inte av,
eller tillsammans med, Poddtoppen.