Part 1: Hacking Active Directory - (StellarComms)
Source: YouTube · Tyler Ramsbey - Hack Smarter · published Sep 17, 2026 · 19:26
Part one of the Stellar Comms Medium AD lab on HackSmarter covers scoping, enumeration, and finding a foothold clue via anonymous FTP 1:05.
Key Takeaways:
• Objective: simulate a compromised remote worker, pivot internally, and hit high-value AD targets, starting with username junior.analyst and no password 1:31
• Scanning uses rustscan piped into nmap -A; notes are kept in free Notion with headers for a floating table of contents 2:28
• RDP (3389) reveals domain stellarcoms.local and DC dc-stellar.stellarcoms.local, both added to /etc/hosts—critical for many AD attacks 5:30
• Anonymous FTP (docs, it, pix dirs) is confirmed; an onboarding doc reveals default password Galaxy123!, ideal for spraying 8:11, 17:21
• Realism emphasized: stego is CTF-only, but anonymous/unencrypted FTP and default passwords are real reportable findings 13:08
The video challenges viewers to test the discovered credentials against the DC before part two 19:00.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
What is up everyone? Welcome back to another video. This video is going to be part one of us working through the Stellar Comm's Medium Active Directory challenge lab from the Hacksmarter platform. Now, this is part one. So, we will dive into notetaking, enumeration, and all of that fun stuff. Here's the thing. You will learn a lot by just watching this video and going through this series with me, but you will learn significantly more by hacking alongside of me. So, if you haven't already, head over to hacksmarter.org. Launch a Stellar's machine. Get your black hoodie on. I just have my black t-shirt on because it's warm in my basement for once tonight. Get your Kali Linux machine booted up or paired or Arch Linux if you're really cool or Temple OS if you're a better hacker than all of us a…