[LIVE] Active Directory Hacking & AMA (9/15/26)

[BLUF] Tyler Ramsby provides expert advice on navigating the ethical hacking career path, emphasizing the critical importance of industry-recognized certifications like OSCP and practical skills over obscure credentials, while demonstrating a real-world Active Directory pentest. 4:57

Key Takeaways:
• Ramsby argues that most new cybersecurity certifications lack name recognition and are ineffective for landing jobs; only a few, such as OSCP, PNPT, CPTS, and EJPT, hold significant weight with employers. 17:54
• For junior pentesters, strong web application security skills are arguably the most valuable asset for securing an entry-level role, as most organizations have internet-facing web apps requiring assessment. 15:23
• The OSCP certification remains the gold standard for entry-level roles because its fully proctored exam format provides greater credibility in an era where AI and unproctored exams make cheating easier. 23:34
• During the live demonstration, Ramsby shows how to exploit anonymous FTP access on a target machine to find a user guide containing a default password, which is then used to gain initial foothold via SMB. 47:05
• He utilizes BloodHound to map attack paths, revealing that a junior analyst can take ownership of a group to force a password change, ultimately leading to domain controller access via WinRM. 26:00

Ramsby encourages viewers to prioritize learning through realistic labs and to be honest about their knowledge gaps during interviews, as admitting ignorance is preferable to providing confidently wrong answers. 13:05

Sources:

• 4:57 Introduction of Tyler Ramsby and his organizations, HackSmart and Kyrosac.
• 17:54 Discussion on the lack of name recognition for most cybersecurity certifications.
• 15:23 Advice on the importance of web app pentesting skills for junior roles.
• 23:34 Explanation of why OSCP's proctored nature gives it an edge over unproctored certs like CPTS.
• 47:05 Demonstration of exploiting anonymous FTP to find default credentials.
• 26:00 Use of BloodHound to identify and exploit privilege escalation paths in Active Directory.