12/04/2023
Privilege Escalation 3-Day, Instructor-Led Bootcamp
Date: Wednesday/Thursday/Friday, April 19, 20, 21 - 2023
Start times (5 hour sessions): 05:00 PM UTC
This 3-Day Bootcamp is designed to be completely hands-on and will provide you with 1 month of free access to the Privilege Escalation labs on CYBER RANGES!
https://cyberranges.clickmeeting.com/privilege-escalation-3-day-bootcamp/register
Privilege escalation is the process of gaining higher levels of access or privileges than what is normally granted to a user or process. It is a common technique used by attackers to gain more control over a compromised system or network.
Privilege escalation is a vital element of the attack life cycle and is a major determinant in the overall success of a pe*******on test. The importance of privilege escalation in the pe*******on testing process cannot be overstated or overlooked. Developing your privilege escalation skills will mark you as a good pe*******on tester. The ability to enumerate information from a target system and utilize this information to identify potential misconfigurations and vulnerabilities that can be exploited to elevate privileges is an essential skill set for any pe*******on tester.
This 3-Day Bootcamp is designed for pe*******on testers or cybersecurity professionals who are looking to improve their knowledge of privilege escalation attack vectors as well as level up their Windows & Linux privilege escalation skills.
This 3-Day hands-on Bootcamp will introduce you to privilege escalation as a process, and outline the process of performing local enumeration on Windows & Linux to identify privilege escalation vulnerabilities. After learning how to find and identify privilege escalation vulnerabilities on Windows & Linux, you will learn how to correctly exploit them to elevate your privileges successfully.
This 3-Day Bootcamp will cover the following topics:
Introduction to Privilege Escalation.
Local Enumeration on Windows & Linux.
Windows Privilege Escalation via Kernel Exploits.
Windows Privilege Escalation via Impersonation Attacks.
Windows Privilege Escalation via Bypassing UAC.
Windows Privilege Escalation via Unattended Install.
Windows Privilege Escalation via Unquoted Service Paths.
Windows Privilege Escalation via DLL Hijacking.
Windows Privilege Escalation via Scheduled Tasks.
Linux Privilege Escalation via Kernel Exploits.
Linux Privilege Escalation via Linux Capabilities.
Linux Privilege Escalation via Package Managers.
Linux Privilege Escalation via SUID Binaries.
Linux Privilege Escalation via Stored Credentials
Exploiting Misconfigured SUID Binaries.
What's Included?
Free 1-month access to the "Privilege Escalation" labs on CYBER RANGES.
Accredible Certified “Privilege Escalation Professional” Badge.
Access to the official CYBER RANGES Discord server.
Hands-on support and direct access to the instructor for questions.
The recorded version of the webinar session and slides sent directly to your inbox.
Day 1
Introduction To Privilege Escalation.
Differences Between Privilege Escalation on Windows & Linux.
Windows & Linux Local Enumeration.
Automating Windows Local Enumeration with WinPEAS, JAWS, windows-exploit-suggester, etc.
Automating Linux Local Enumeration with LinPEAS, LinEnum, linux-exploit-suggester, etc.
Day 2 - Windows Privilege Escalation
Windows Privilege Escalation via Kernel Exploits.
Windows Privilege Escalation via Impersonation Attacks.
Windows Privilege Escalation via Bypassing UAC.
Windows Privilege Escalation via Unattended Install.
Windows Privilege Escalation via Unquoted Service Paths.
Windows Privilege Escalation via DLL Hijacking.
Windows Privilege Escalation via Scheduled Tasks.
Day 3 - Linux Privilege Escalation
Linux Privilege Escalation via Kernel Exploits.
Linux Privilege Escalation via Linux Capabilities.
Linux Privilege Escalation via Package Managers.
Linux Privilege Escalation via SUID Binaries.
Linux Privilege Escalation via Stored Credentials
Exploiting Misconfigured SUID Binaries.
More CYBER RANGES events:
https://www.cyberranges.com/bootcamps-and-webinars/