Windows Privilege Escalation
Price: Free
Level: Intermediate
Sections: 3
Videos: 19
Duration: 9+ hours
Description
This course covers basic exploitation concepts and vulnerabilities in the context of Windows privilege escalation. It designed for people who are already familiar with linux but with limited experience in the context of windows security. Take this course if you want to build solid foundations over windows privilege escalation. If instead you're already used to the field, this course might showcase a new way of thinking about an exploitation technique you already know.
Participants will learn to identify and exploit common system misconfiguration in the context of windows systems. Participants will also learn the different techniques to enumerate common assets exposed by windows systems. For every exploitation technique analyzed, different hands-on examples are showcased in order to build practical knowledge and intuition.
Learning Objectives
By the end of the course, participants will develop a deeper understanding over Windows privilege escalation.
Specifically, the following practical skills will be transfered:
- Basic windows security concepts.
- Enumerate a windows system to find common system misconfigurations.
- Exploit common windows system misconfigurations to achieve privilege escalation.
Requirements
As a starting point, we assume the following knowledge:
- Basic understanding of the Windows operating system
Syllabus
- Section I - Introduction
- Introduction to the Windows Shells
- Windows Permissions
- Reverse Shells in Windows
- Section II - Basic Exploitation Techniques
- SeImpersonatePrivilege Exploitation
- On Cross Compilation
- Windows Services
- Weak Service Permissions
- Unquoted Service Path
- DLL Hijacking
- UAC Bypass
- Always Install Elevated
- Files with Sensitive Data
- Windows Hashes
- Stored Credentials and the Windows Vault
- Scheduled Tasks
- Critical Registry Paths
- Section III - Conclusion
- Useful Tools
- AMSI Bypass
- A Cheatsheet and A Methodology