RED TEAM Operator: Privilege Escalation in Windows Course
Buy now
Learn more
Intro and Setup
Introduction to Windows Security
Intro Addendum
Course VM Setup
RTO-LPE.ova
RTO-LPE.zip
Credentials
"Low Hanging Passwords"
"The X Files" - Interesting Files
"Swimming in Hives" - Registry
"A Boss with Creds" - Abusing Credent...
"The King is Naked" - Robbing Credent...
"A Thief" - Asking User for Creds
Unsecured Objects
"Boundless Servant" - Unsecured Servi...
"Lonely Vassal"- Unsecured Service [2]
"Hornets' Nest"- Unsecured Service [3]
Execution Flow Hijacking
"Folding Papers"- Unsecured File System
"Hi Jack, Show Me THE WAY" - Exploiti...
"Closed. No Service" - Missing Service
"Jobless" - Missing Task
"Library Has Fallen" - DLL Hijacking
"You Ain't Corner Me" - UACME
Getting SYSTEM
"! NeverRemoveDepressed" - AlwaysInst...
"Hi, Sis!" - New Service for SYSTEM
"Nick Has a Leak: Prelude" - Leaked H...
"Nick Has a Leak: Demon" - Leaked HAN...
"Nick Has a Leak: Sequel" - Leaked HA...
"Chip & Dance: Prologue" - Abusing To...
"Chip & Dance Show" - Abusing Tokens [2]
"Broken Calumet: Overture" - Exploiti...
"Broken Calumet Exposed" - Exploiting...
Assigments
Assignment #1
Assignment #2
Assignment #3
Summary
Course Closing Information
Products
Course
Section
Lesson
Assignment #3
Assignment #3
RED TEAM Operator: Privilege Escalation in Windows Course
Buy now
Learn more
Intro and Setup
Introduction to Windows Security
Intro Addendum
Course VM Setup
RTO-LPE.ova
RTO-LPE.zip
Credentials
"Low Hanging Passwords"
"The X Files" - Interesting Files
"Swimming in Hives" - Registry
"A Boss with Creds" - Abusing Credent...
"The King is Naked" - Robbing Credent...
"A Thief" - Asking User for Creds
Unsecured Objects
"Boundless Servant" - Unsecured Servi...
"Lonely Vassal"- Unsecured Service [2]
"Hornets' Nest"- Unsecured Service [3]
Execution Flow Hijacking
"Folding Papers"- Unsecured File System
"Hi Jack, Show Me THE WAY" - Exploiti...
"Closed. No Service" - Missing Service
"Jobless" - Missing Task
"Library Has Fallen" - DLL Hijacking
"You Ain't Corner Me" - UACME
Getting SYSTEM
"! NeverRemoveDepressed" - AlwaysInst...
"Hi, Sis!" - New Service for SYSTEM
"Nick Has a Leak: Prelude" - Leaked H...
"Nick Has a Leak: Demon" - Leaked HAN...
"Nick Has a Leak: Sequel" - Leaked HA...
"Chip & Dance: Prologue" - Abusing To...
"Chip & Dance Show" - Abusing Tokens [2]
"Broken Calumet: Overture" - Exploiti...
"Broken Calumet Exposed" - Exploiting...
Assigments
Assignment #1
Assignment #2
Assignment #3
Summary
Course Closing Information
(optional)
Develop
C/C++ version of
cms.ps1
as a
standalone DLL
.
Tip:
use code templates from
DLL-hijack
folder