Perform automated internal pentesting with 3 tools: pentest-machine for information enumeration and potential low hanging fruit like default SSH creds, Icebreaker for gaining access to active directory credentials via reverse bruteforce + LLMNR poisoning + SMB relay, and finally Deathstart for automatic lateral spread until domain admin is achieved.

Recorded at NolaCon 2018