Spiceworld Virtual 2020 Practical Hacking

Spiceworks Annual IT Conference

” https://www.spiceworks.com/spiceworld/ “

For the past few years, I’ve been going to SpiceWorld and took the opportunity this year to present. My session was focused around “practical hacking”, as in, the simple flaws that I’m going to search for in your network and how I would take advantage of them to overrun your network.

The session material is available up to 6 months after the virtual conference by going to spiceworks, but I’ve opted to host the same information here.

The Presentation

The PowerPoint Slides

The Reference Information

• Password Length Related Info
  • https://www.secplicity.org/2019/05/01/three-updated-password-best-practices-for-world-password-day-2019/
• Cred Defense Toolkit
  • https://www.blackhillsinfosec.com/the-creddefense-toolkit/
• Responder Usage and Mitigations
  • https://www.4armed.com/blog/llmnr-nbtns-poisoning-using-responder/
• LAPS article
  • https://blog.thesysadmins.co.uk/deploying-microsoft-laps-part-1.html
• Essential 8 List
  • https://www.cyber.gov.au/acsc/view-all-content/publications/essential-eight-maturity-model
• 20 CIS Controls
  • https://www.cisecurity.org/controls/cis-controls-list/
• Canary PI
  • https://github.com/hackern0v1c3/CanaryPi
• Canary Tokens
  • https://canarytokens.org/generate
• Password Generator
  • https://www.lastpass.com/password-generator
• Password Manager application
  • https://keepass.info/download.html
• MITRE Attack Framework
  • https://attack.mitre.org/