{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"7MS #729: Pwning Dracarys","description":"Hey friends! Still your grieving pal over here, but also your happy hacking host \u2014 because today we\u2019re diving into baby\u2019s first Dracarys! (Yes, I\u2019m probably pronouncing that wrong. Yes, I\u2019m going to keep saying it anyway.) Quick housekeeping: A few days ago I published a mini-series episode from our How to Secure Your Family During and After a Disaster series, where I shared the news that my dad passed away last Friday. So many of you reached out with condolences \u2014 thank you from the bottom of my heart. I\u2019ll share a little life update at the end of this episode. But first \u2014 Dracarys! I didn\u2019t know it existed until recently. If you knew about it and didn\u2019t tell me, I\u2019m mad at you. But we made up. We\u2019re friends forever. Here\u2019s what we cover: What is Dracarys? It\u2019s a smaller, CTF-style Active Directory pentesting lab from the same crew that brought us Game of Active Directory (GOAD), GOAD-SCCM, GOAD-Light, and Ninja Hacker Academy. Where GOAD holds your hand through the vulnerabilities, Dracarys and Ninja Hacker Academy take more of a \u201chere\u2019s your starting point, now figure it out\u201d approach \u2014 which I love. The lab setup: One Linux VM, a Windows domain controller, and a Windows application server. Your only hint? Start with the Linux box. That\u2019s it. Good luck! TuesdayTOOLSday preview: Over on 7MinSec.club, I did a TuesdayTOOLSday episode walking through initial setup \u2014 getting your hosts file configured, running a NetExec sweep to map out the attack surface, and doing some light enumeration on that Linux box. No big spoilers, just enough to get your Kali box ready to rock. What I\u2019ve learned since: After the TuesdayTOOLSday recording, I kept digging. My methodology has been: nmap to identify open ports and service versions, then research whether any of those versions have known exploits. Once I spotted an interesting web service, AI pointed me toward FeroxBuster for directory and file enumeration \u2014 a tool I hadn\u2019t used before but am now a huge fan of. It\u2019s fast, configurable, and once I got my scan tuned properly\u2026 I found a jewel. That jewel feels like the next step deeper into this lab. More on that in future TuesdayTOOLSday episodes! Shameless plug: All of this walkthrough content lives at 7MinSec.club. Subscriptions are free, and subscribing just means you get an email when I publish new content. No spam, no sales pitches \u2014 just hacking stuff. (And if you want to financially support the show, there\u2019s a paid tier too. Just sayin\u2019.) Life update: We\u2019ve moved into funeral planning mode. My dad, thankfully, had already mapped out his whole service \u2014 the pastor, the verses, everything \u2014 which has made things a little easier. We\u2019re picking photos for a tribute slideshow and I\u2019ve been asked to share some words and sing a song. The song I chose is \u201cJesus, Savior, Pilot Me\u201d \u2014 which my dad once described as \u201cthat song about Jesus flying airplanes.\u201d (He wasn\u2019t wrong. Sort of.) I\u2019ve been practicing it all week and can barely make it through verse two. Prayers, good vibes, and a large supply of Kleenex would be appreciated. Again, you can find the Dracarys lab here. And if you\u2019re not already on 7MinSec.club, come hang out \u2014 that\u2019s where the deeper dives live. ","author_name":"7 Minute Security","author_url":"https:\/\/7MinSec.com","html":"