Upcoming Sessions

July 16-18, 2024!  Click here for more information.

This is a hands-on, instructor-led course focused on teaching you how to find, exploit and defend against common Active Directory weaknesses. Here’s a 3 minute overview of the course:

What is it?

Light Pentest LITE is a 3-day course, with each class session being 4 hours long. This training consists of live (via Zoom), hands-on, instructor-led sessions focused on teaching you how to find, exploit and defend against common Active Directory weaknesses!

You will be given access to a “real” corporate network and a Windows virtual machine that is pre-loaded with all the tools and scripts you need to be successful during the course. We will work through a series of objectives together, with the ultimate goal of “owning” the entire enterprise!

Agenda

Day 1

• Introductions – an overview of the course, rules of engagement, housekeeping, etc.

• Tour of your student virtual machine – specifically the folder full of hacking tools and other goodies we will dig heavily into during the training

• An overview of Active Directory – what it is, what it does, and why it (unfortunately) has a ripe attack surface

• “Kerberoasting” and “ASREPRoasting” attacks

• Cracking password hashes with Hashcat

• Privilege escalation – our first task as hackers will be to break out of the “shell” of being a limited user and escalate to local admin! We will tackle that in a few different ways, including (but not limited to):

  • AMSI (Antimalware Scan Interface) bypasses

  • Unquoted service path abuse

  • SeriousSAM / HiveNightmare attack

Day 2

• Sniping cleartext passwords from GPOs with the MS14-025 vulnerability

  Active Directory attack path enumeration using PowerShell and BloodHound

• Capturing and cracking password hashes from “Kerberoastable” and “ASREPRoastable” accounts

• Abusing network protocols to capture and crack account credentials with Inveigh and Hashcat

• Exploiting Group Policy objects that have weak passwords and misconfigurations

Day 3

• Dumping all domain credentials with Mimikatz

• Setting credential “traps” and pass-the-hash attacks with CrackMapExec

• Scraping system passwords from memory with Mimikatz

• Exploiting unconstrained delegation to impersonate Domain Administrators!

Testimonials

Here’s what some of our students say about Light Pentest LITE:

“7 Minute Security’s Light Pentest LITE training gave me much-needed context around pentesting techniques for Active Directory. Brian is an excellent and efficient instructor. He’s great at using metaphors and storytelling to teach, increasing both enjoyment and retention. He explains his pentesting methods in terms of real-world situations that his team has encountered and how their usefulness has changed over time. The materials he provides are excellent too, and I find myself referring back to them often. Overall a great class that directly applies to the real world!”

“The ‘7 Minute Security Light Pentest LITE’ class, led by the incredible instructor Brian Johnson, was an absolute delight! Over three days, four hours each day, we had a hands-on learning experience at a perfect pace. Brian’s expertise and engaging teaching style made the class both educational and entertaining. With real-life examples and clear explanations, nobody was left behind. We immediately applied what we learned through practical exercises. If you’re curious about pentesting, don’t miss this informative and fun class led by Brian. It’s an unforgettable learning experience in just a short time!” – Tim, Cybersecurity Analyst