Playback speed×Share postShare post at current timeShare from 0:000:00/0:00TranscriptTuesday TOOLSday: coercing SMB auth w/scheduled tasksDidn't lead to domain admin, but I'll still take it!Brian JohnsonSep 26, 2025ShareTranscriptToday I demonstrate a method to leverage local admin access to coerce SMB auth out of that system, on behalf of a higher-privilege user, and “catch” the request with downgraded authentication you can crack using something like Vast.ai. Enjoy!Leave a commentBrianMessage Brian JohnsonGet more from Brian Johnson in the Substack appAvailable for iOS and AndroidGet the appDiscussion about this videoCommentsRestacks7 Minute Security's SubstackSubscribeAuthorsBrian JohnsonRecent PostsTuesday TOOLSday: more IR fun with VelociraptorSep 19 • Brian JohnsonTuesday TOOLSday: VelociraptorSep 10 • Brian JohnsonTuesday TOOLSday: privesc with schtasksSep 4 • Brian JohnsonTuesday TOOLSday: ChimasAug 29 • Brian JohnsonTuesday TOOLSday: Ninja Hacker Academy - Part 8Aug 22 • Brian JohnsonTuesday TOOLSday: Ninja Hacker Academy - Part 7Aug 15 • Brian JohnsonTuesday TOOLSday: Ninja Hacker Academy - Part 5Jul 29 • Brian Johnson