7MS #663: Pentesting GOAD SCCM
Episode 29 min 41s

7MS #663: Pentesting GOAD SCCM

From 7 Minute Security Brian Johnson

Today we live-hack an SCCM server via GOAD SCCM using some attack guidance from Misconfiguration Manager! Attacks include:

  • Unauthenticated PXE attack
  • PXE (with password) attack
  • Relaying the machine account of the MECM box over to the SQL server to get local admin

Community discussion