So we have compromised a user account in the initial attack vectors section.
We managed to capture Frank Castle's hash.
With responder we took that hash off line and we said hey look it's password 1.
And we were able to also get on machines with SMB relay without ever having to capture a hash.
We able to dump the sand file and collect hashes that way.
And we also were able to create an account with management management's six and pretty much own the
whole domain as it was.
So we have a few different compromises that we can play with and from here we're going to take a pause.
We're gonna go ahead and look at what we can do once we have a compromise and how we can enumerate the
network using these compromises.
So we're going to look at two tools specifically we're going to look a tool called power of you now
power of you is a tool that allows us to look at the network and look at enumerate basically the Domain
Controller domain policy domain users groups.
A lot of different things.
It goes very very deep with what it's capable of doing.
And again that's a powerful tool.
And we're also going to look at a tool called bloodhound bloodhound is going to allow us to look actually
visualize in a graph form what is going on in the domain in the network and where can we find the sensitive
user that might be logged in or where can we find the shortest path to getting domain.
And it's a fantastic tool it should be used on every internal assessment that you do.
And I think these two tools will really set you apart when it comes interview time being able to talk
about them and know how to use them in an assessment.
So from here we're gonna go ahead and move on we're going to start talking about how to install power
of you use power view and then we'll move in the bloodhound and then eventually we're going to move
into these post compromise attacks once we have all this information in front of us.
So let's go ahead and move into the next video.
When we install power of you.