Hacking in 2016 - How is our systems broken?
summary
Live demo shows a real compromise chain: first username enumeration + password spraying against a web login reveals GordonB/abc123 via response length differences; a command‑injection ping leads to PowerShell invoke‑webrequest downloading an msfvenom‑built executable that opens a meterpreter session; uploaded mimikatz/mimic tools extract a cleartext password and NTLM hash, cracked with hashcat (~66M/sec) to reveal manager7; MS14‑068 golden‑ticket code is used to forge a Kerberos TGT, load it and dump ntds.dit (8.4GB) — full domain compromise achieved after debugging.
AI-written summary · about
chapters (5)
related talks
51mHacker’s Perspective on Your Infrastructure: Lessons from the Field
40mHacker’s Paradise: Top 10 Biggest Threats When Working From Home
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
01h 06mHow hacking works
55mHow hacking works
33mHacked on National Television
59mMaking Hacking Childs Play
01h 01mSomething Something Cyber