Lateral Movement with CrackMapExec from Pluralsight

Large companies mostly rely on Windows domains for their day to day. In this course, you will learn how to leverage CrackMapExec to perform lateral movement techniques during a Red Team engagement.

As a pentester or red teamer, you most likely encounter Windows domains on a regular basis. If you are looking for a single tool offering a multitude of options for you to gather information, and use it to further your presence within the network, CrackMapExec is the tool to help you. In this course, Lateral Movement with CrackMapExec you will learn how to utilize CME for Windows AD navigation in a Red Team environment. First, you'll explore how to get CME up and running. Next, you'll discover how to gather credentials from endpoints and possibly domain controllers [T1021.002] and use them to further the penetration [T1021.006] of the AD network. Finally, you'll learn that you won’t always need to crack the password to authenticate against systems when you find an account where Kerberos Pre-Auth has been disabled [T1558.004]. When you’re finished with this course, you’ll have the skills and knowledge to leverage CrackMapExec for lateral movement within AD networks.

What's inside

Syllabus

Course Overview (Tool Introduction)

Lateral Movement with CrackMapExec

Resources

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Suitable for pentesters and red teamers looking to enhance their lateral movement techniques within Windows domains

Leverages CrackMapExec, a popular tool among security professionals for AD navigation and exploitation

Focuses on practical application of skills, including credential gathering and passwordless authentication

Taught by Jurriën, an experienced instructor in the field of security and penetration testing

Covers a niche topic in cybersecurity, making it valuable for those specializing in this area

May require prior knowledge of Windows domains and penetration testing techniques

Career center

Learners who complete Lateral Movement with CrackMapExec will develop knowledge and skills that may be useful to these careers:

Penetration Tester

A Penetration Tester is responsible for simulating cyber attacks on an organization's computer systems and networks to identify and exploit vulnerabilities. CrackMapExec can be a valuable tool for Penetration Testers because it allows them to quickly and easily identify and exploit vulnerabilities in a network. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Penetration Tester.

See salaries and explore the career path for Penetration Tester

Security Analyst

A Security Analyst is responsible for monitoring and analyzing security data to detect and prevent threats. CrackMapExec can be a valuable tool for Security Analysts because it allows them to quickly and easily identify and exploit vulnerabilities in a network. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Security Analyst.

See salaries and explore the career path for Security Analyst

Cybersecurity Engineer

A Cybersecurity Engineer is responsible for designing, implementing, and maintaining security measures to protect an organization's computer systems and networks. CrackMapExec can be a valuable tool for Cybersecurity Engineers because it allows them to quickly and easily assess the security of a network and identify potential vulnerabilities. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Cybersecurity Engineer.

See salaries and explore the career path for Cybersecurity Engineer

Network Engineer

A Network Engineer is responsible for designing, implementing, and maintaining computer networks. CrackMapExec can be a valuable tool for Network Engineers because it allows them to quickly and easily map out a network and identify potential vulnerabilities. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Network Engineer.

See salaries and explore the career path for Network Engineer

Security Consultant

A Security Consultant is responsible for providing advice and guidance to organizations on how to improve their security posture. CrackMapExec can be a valuable tool for Security Consultants because it allows them to quickly and easily assess the security of a network and identify potential vulnerabilities. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Security Consultant.

See salaries and explore the career path for Security Consultant

Information Security Manager

An Information Security Manager is responsible for developing and implementing an organization's information security program. CrackMapExec can be a valuable tool for Information Security Managers because it allows them to quickly and easily assess the security of a network and identify potential vulnerabilities. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Information Security Manager.

See salaries and explore the career path for Information Security Manager

IT Auditor

An IT Auditor is responsible for evaluating and reporting on the effectiveness of an organization's internal controls. CrackMapExec can be a valuable tool for IT Auditors because it allows them to quickly and easily assess the security of a network and identify potential vulnerabilities. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective IT Auditor.

See salaries and explore the career path for IT Auditor

Systems Administrator

A Systems Administrator is responsible for managing and maintaining computer systems and networks. CrackMapExec can be a valuable tool for Systems Administrators because it allows them to quickly and easily identify and exploit vulnerabilities in a network. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Systems Administrator.

See salaries and explore the career path for Systems Administrator

Network Security Analyst

A Network Security Analyst is responsible for monitoring and analyzing network traffic to detect and prevent threats. CrackMapExec can be a valuable tool for Network Security Analysts because it allows them to quickly and easily identify and exploit vulnerabilities in a network. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Network Security Analyst.

See salaries and explore the career path for Network Security Analyst

Security Engineer

A Security Engineer is responsible for designing, implementing, and maintaining security measures to protect an organization's computer systems and networks. CrackMapExec can be a valuable tool for Security Engineers because it allows them to quickly and easily identify and exploit vulnerabilities in a network. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Security Engineer.

See salaries and explore the career path for Security Engineer

Incident Responder

An Incident Responder is responsible for responding to and investigating cybersecurity incidents. CrackMapExec can be a valuable tool for Incident Responders because it allows them to quickly and easily identify and exploit vulnerabilities in a network. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Incident Responder.

See salaries and explore the career path for Incident Responder

Cybersecurity Analyst

A Cybersecurity Analyst is responsible for analyzing and reporting on cybersecurity threats. CrackMapExec can be a valuable tool for Cybersecurity Analysts because it allows them to quickly and easily identify and exploit vulnerabilities in a network. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Cybersecurity Analyst.

See salaries and explore the career path for Cybersecurity Analyst

Software Engineer

A Software Engineer is responsible for designing, developing, and maintaining software applications. CrackMapExec is an open-source tool that can be used to perform penetration testing and vulnerability assessments. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Software Engineer.

See salaries and explore the career path for Software Engineer

Data Analyst

A Data Analyst is responsible for collecting, analyzing, and interpreting data to identify trends and patterns. CrackMapExec is a tool that can be used to collect and analyze data about networks. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Data Analyst.

See salaries and explore the career path for Data Analyst

Computer Scientist

A Computer Scientist is responsible for designing, developing, and maintaining computer systems and software. CrackMapExec is an open-source tool that can be used to perform penetration testing and vulnerability assessments. This course can help you build a solid foundation in using CrackMapExec, which can make you a more effective Computer Scientist.

See salaries and explore the career path for Computer Scientist