Playback speed×Share postShare post at current timeShare from 0:000:00/0:00TranscriptTuesday TOOLSday: coercing SMB auth w/scheduled tasksDidn't lead to domain admin, but I'll still take it!Brian JohnsonSep 26, 2025ShareTranscriptToday I demonstrate a method to leverage local admin access to coerce SMB auth out of that system, on behalf of a higher-privilege user, and “catch” the request with downgraded authentication you can crack using something like Vast.ai. Enjoy!Leave a commentBrianMessage Brian JohnsonGet more from Brian Johnson in the Substack appAvailable for iOS and AndroidGet the appDiscussion about this videoCommentsRestacks7 Minute Security's SubstackSubscribeAuthorsBrian JohnsonRecent PostsTuesday TOOLSday: how to fix the ESC8 vulnerabilityDec 23 • Brian JohnsonTuesday TOOLSday: coercion attacks against Windows 11Dec 16 • Brian JohnsonTuesday TOOLSday: DIY pentest dropbox tipsDec 4 • Brian Johnson Tuesday TOOLSday: SQL server defense 101Nov 27 • Brian JohnsonTuesday TOOLSday: Lithnet AD Password ProtectionNov 20 • Brian JohnsonTuesday TOOLSday: LAPS quick installNov 13 • Brian JohnsonTuesday TOOLSday: PretenderNov 6 • Brian JohnsonTuesday TOOLSday: Kerberoasting KleanupOct 30 • Brian Johnson