7MS #667: Pentesting GOAD SCCM - Part 2!

Hey friends, our good buddy Joe “The Machine” Skeen and I are back this week with part 2 (check out part 1!) tackling GOAD SCCM again! Spoiler alert: this time we get DA! YAY!

Definitely check out these handy SCCM resources to help you – whether it be in the lab or IRL (in real life):

• GOAD SCCM walkthrough
• MisconfigurationManager – tremendous resource for enumerating/attacking/privesc-ing within SCCM
• This gist from Adam Chester will help you decrypt SCCM creds stored in SQL