Active Directory Exposed Attack Surface

Hi there! In this video we continue the Active Directory Exploitation series. Specifically, the objective of this video is build intution over the typical attack surface that is exposed by an Active Directory (AD) instance. Since many protocols are exposed by AD, it is a useful exercise to analyze the role of each one. In this video we run a simple nmap command over the Domain Controller (DC) and we analyze the result. In the next videos of the series we will showcase specific attacks to specific protocols. As always, I hope to provide useful and interesting content, and if you have any feedback leave it in the comments. Thank you. ------------------------- TIMESTAMP 00:00 Introduction 01:10 Running nmap 07:50 Port 53 - DNS 11:44 Port 80 - HTTP 15:02 Port 88 - Kerberos 17:07 Port 135 - RPC 19:10 Port 139 - NetBIOS 20:10 Port 389 - LDAP 23:31 Port 443 - HTTPS 25:40 Port 445 - SMB 29:13 Port 464 - kpasswd5 30:50 Other AD services 35:25 Other services 38:40 Conclusion ------------------------- REFERENCES Material: https://github.com/LeonardoE95/yt-en/... ------------------------- CONTACTS Blog: https://blog.leonardotamiano.xyz/ Github: https://github.com/LeonardoE95?tab=re... Support: https://www.paypal.com/donate/?hosted...