Advanced Windows Privilege Escalation with Hack The Box

About this course

New Launch for Spring 2021!This is a 100% hands on course as you will be using the same tradecraft and techniques Red Teamer's and advanced adversaries use to escalate privileges on Windows endpoints after they have gained initial access and established a foothold. This course is not "death by PowerPoint", in fact there is not a single Powerpoint slide in the course.  This course is aimed for intermediate to advanced users who are hungry to know how to discover and exploit novel escalation paths on patched fully patched Windows 10 endpoints.  Everything is carefully, explained - step-by-step.Additionally, although Metasploit is used in some attacks, we will be using less Metasploit and more manual walk-throughs because I wanted to take the time to carefully explain WHY each method works and detail how common misconfigurations happen in enterprise environments.Where Metasploit is used, everything is carefully explained and deconstructed so you can understand why and how it works. Exploits start easy and escalate in difficulty as you progress through the course.The TechniquesYou will quickly learn and execute the following escalation of privilege techniques across 5 vulnerable machines Windows Kernel ExploitsWeak Registry Permissions Token ManipulationCVE Exploits DPAPI Abuse AS-REP Roasting (Four New Lectures Just Added November 2021!)The ToolsYou will use msfvenom, BC Security PowerShell Empire, CrackMapExec, PSExec, WMIExec, Bloodhound, netcat, smbserver, ldapsearch, smbclient, rpcclient, hashcat, GetNPUsers, evil-winrm, wfuzz, gobuster, dirsearch, sqlmap, Mimikatz, DeepBlueCLI, Burp Suite (advanced features), Python 3, Powershell 7 on Linux and more.   You will learn IIS 10 Server Administration, how to threat hunt for SQLi attacks in web logs and much muc