About
Thank you ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal
// Spencer Alessi’s SOCIAL //
YouTube: / @techspence
Website: https://spenceralessi.com/adsecuritykit/
X: https://x.com/techspence
LinkedIn: / spenceralessi
Swag: https://www.etsy.com/shop/ethicalthre...
// ThreatLocker’s SOCIAL //
LinkedIn: https://www.linkedin.com/company/thre...
X: https://x.com/threatlocker
Instagram: / threatlocker
Website: https://www.threatlocker.com/
/ David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
// MENU //
0:00 - Coming up
0:54 - Spencer Alessi introduction & background
02:20 - Pentesting demo // Active Directory
03:34 - Control paths // Finding bad permissions with ADeleg
06:04 - Finding bad permissions with NetTools
06:52 - The most common issue
08:15 - Certificate abuse
12:20 - Quick recap
12:30 - Certificate abuse continued
15:10 - Pentesting summary
15:09 - How to become a pentester
18:48 - Recommended certifications
20:54 - Advice for blue teamers
22:15 - Overcoming being an introvert // Soft skills vs tech skills
23:43 - Windows hacking in the real world
24:54 - Conclusion
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Disclaimer: This video is for educational purposes only.
#microsoft #windows11 #hacker
// Spencer Alessi’s SOCIAL //
YouTube: / @techspence
Website: https://spenceralessi.com/adsecuritykit/
X: https://x.com/techspence
LinkedIn: / spenceralessi
Swag: https://www.etsy.com/shop/ethicalthre...
// ThreatLocker’s SOCIAL //
LinkedIn: https://www.linkedin.com/company/thre...
X: https://x.com/threatlocker
Instagram: / threatlocker
Website: https://www.threatlocker.com/
/ David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
// MENU //
0:00 - Coming up
0:54 - Spencer Alessi introduction & background
02:20 - Pentesting demo // Active Directory
03:34 - Control paths // Finding bad permissions with ADeleg
06:04 - Finding bad permissions with NetTools
06:52 - The most common issue
08:15 - Certificate abuse
12:20 - Quick recap
12:30 - Certificate abuse continued
15:10 - Pentesting summary
15:09 - How to become a pentester
18:48 - Recommended certifications
20:54 - Advice for blue teamers
22:15 - Overcoming being an introvert // Soft skills vs tech skills
23:43 - Windows hacking in the real world
24:54 - Conclusion
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Disclaimer: This video is for educational purposes only.
#microsoft #windows11 #hacker