Using PowerUpSQL & goddi for Active Directory Information Gathering
From Wild West Hackin' Fest 2018 in Deadwood, SD.
Presenter: Thomas Elling
Information gathering is an essential first step in penetration tests and red team engagements against an Active Directory (AD) environment. Tools like PowerView have been very popular in the past, but this talk will explore some alternative options. During this presentation, I’ll provide an overview of AD information gathering techniques that leverage functionality in PowerShell, Go, and SQL Server. These alternatives offer flexibility that can help you avoid detection on Windows endpoints during penetration tests and red team engagements.
Additionally, examples of both PowerUpSQL and goddi will be shared to help you automate those unorthodox AD enumeration methods. This talk aims to familiarize pen testers, red teamers, and blue teamers with basic AD information gathering concepts and how they can be leveraged manually or through tools like PowerUpSQL and goddi.
Follow Wild West Hackin' Fest on Twitter here: / wwhackinfest
Website & Info: https://www.wildwesthackinfest.com/