Person

Joe Sarkisian

person:joe_sarkisian Also: Joe

Penetration tester who describes assumed-breach assessments, credential cracking, Active Directory testing, and an accidental bank-network outage.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
outgoing MEMBER_OF Wolf & Company P.C. Explicit 149
outgoing USES Raspberry Pi Explicit 149
outgoing USES Responder Explicit 149
outgoing USES Hashcat Explicit 149
outgoing USES Amazon EC2 Explicit 149
outgoing USES Nmap Explicit 149
outgoing USES password spraying Explicit 149
outgoing USES Masscan Explicit 149

Claims

Joe Sarkisian MEMBER_OF Wolf & Company P.C.

Joe says he works for Wolf & Company P.C.

Explicit Confidence 99% · Joe Sarkisian EP 149 Details

“I work for Wolf & Company P.C. out of Boston”

Joe Sarkisian · offsets 24475–24519

Joe Sarkisian USES Raspberry Pi

Joe's firm sent a Raspberry Pi to the client as a remote access device for the assumed-breach penetration test.

Explicit Confidence 98% · Joe Sarkisian EP 149 Details

“a little Raspberry Pi that we send them”

Joe Sarkisian · offsets 24937–24976

Joe Sarkisian USES Responder

Joe says penetration testers commonly start a network test by running Responder to obtain credentials or hashes.

Explicit Confidence 99% · EvilMog EP 149 Details

“you fire up Responder the second they get on a network”

EvilMog · offsets 20390–20455

Joe Sarkisian USES Hashcat

Joe says his team uses Hashcat to crack captured password hashes.

Explicit Confidence 99% · Joe Sarkisian EP 149 Details

“we use something called Hashcat”

Joe Sarkisian · offsets 28341–28372

Joe Sarkisian USES Amazon EC2

Joe's team uses Amazon EC2 instances to obtain cloud computing power for password cracking.

Explicit Confidence 99% · Joe Sarkisian EP 149 Details

“we can spin up Amazon EC2 instances”

Joe Sarkisian · offsets 28876–28911

Joe Sarkisian USES Nmap

Joe says Nmap is used to scan a network and identify live hosts and open ports.

Explicit Confidence 98% · Jack Rhysider EP 149 Details

“A good place to start is Nmap”

Jack Rhysider · offsets 31355–31384

Joe Sarkisian USES password spraying

Joe describes password-spraying a domain controller using a discovered list of users and common passwords.

Explicit Confidence 99% · Joe Sarkisian EP 149 Details

“start password-spraying against that domain controller”

Joe Sarkisian · offsets 32250–32304

Joe Sarkisian USES Masscan

Joe's junior tester used Masscan for a port scan during a bank penetration test.

Explicit Confidence 99% · Joe Sarkisian EP 149 Details

“I always use Masscan”