RED TEAM Operator: Privilege Escalation in Windows Course

Intro and Setup
Introduction to Windows Security
10 mins
Intro Addendum
3 mins
Course VM Setup
4 mins
RTO-LPE.ova
RTO-LPE.zip
1.25 MB
Credentials
"Low Hanging Passwords"
9 mins
"The X Files" - Interesting Files
5 mins
"Swimming in Hives" - Registry
4 mins
"A Boss with Creds" - Abusing Credential Manager
13 mins
"The King is Naked" - Robbing Credential Manager
4 mins
"A Thief" - Asking User for Creds
5 mins
Unsecured Objects
"Boundless Servant" - Unsecured Service [1]
9 mins
"Lonely Vassal"- Unsecured Service [2]
10 mins
"Hornets' Nest"- Unsecured Service [3]
10 mins
Execution Flow Hijacking
"Folding Papers"- Unsecured File System
17 mins
"Hi Jack, Show Me THE WAY" - Exploiting PATH
6 mins
"Closed. No Service" - Missing Service
6 mins
"Jobless" - Missing Task
10 mins
"Library Has Fallen" - DLL Hijacking
21 mins
"You Ain't Corner Me" - UACME
11 mins
Getting SYSTEM
"! NeverRemoveDepressed" - AlwaysInstallElevated Hack
8 mins
"Hi, Sis!" - New Service for SYSTEM
4 mins
"Nick Has a Leak: Prelude" - Leaked HANDLE [1]
4 mins
"Nick Has a Leak: Demon" - Leaked HANDLE [2]
12 mins
"Nick Has a Leak: Sequel" - Leaked HANDLE [3]
9 mins
"Chip & Dance: Prologue" - Abusing Tokens [1]
3 mins
"Chip & Dance Show" - Abusing Tokens [2]
6 mins
"Broken Calumet: Overture" - Exploiting Named Pipes [1]
4 mins
"Broken Calumet Exposed" - Exploiting Named Pipes [2]
8 mins
Assigments
Assignment #1
Assignment #2
Assignment #3
Summary
Course Closing Information
3 mins