Udemy
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Kali Linux Post-Exploitation: Privilege Escalation & More
New

Kali Linux Post-Exploitation: Privilege Escalation & More

Learn Kali Linux post-exploitation: privilege escalation, persistence, credential theft & lateral movement hands-on.
Created byACHRAF ER-RAYA
Last updated 10/2026
English

What you'll learn

  • Perform structured host and system enumeration on compromised Linux and Windows environments using Kali Linux tools to uncover high-value targets.
  • Identify and exploit misconfigurations, insecure SUID binaries, and unquoted service paths to safely escalate system privileges to root access.
  • Extract cached credentials and session tokens, then configure SSH tunneling and SOCKS proxies to pivot across isolated internal subnets.
  • Evaluate persistence mechanisms, analyze system audit log footprints to assess detection visibility, and build complete security reports.

Course content

6 sections • 8 lectures • 1h 39m total length

  • Building Your Post-Exploitation Lab in Kali Linux12:08
  • Building Your Post-Exploitation Lab in Kali Linux (PART2)12:43

Requirements

  • Basic familiarity with the Linux command line (bash basics) and core networking concepts (IP addressing, ports, and subnets). Access to a computer (Windows, macOS, or Linux) capable of running VirtualBox or VMware with Kali Linux installed is required. No prior post-exploitation experience needed.

Description

This course contains the use of artificial intelligence.

Your shell is just the beginning — what you do after you get access is what separates script kiddies from professional penetration testers.

Who this course is for:

  • Aspiring penetration testers preparing for OSCP, CRTP, or PNPT certification

  • IT/security professionals who want to understand how attackers move after an initial breach

  • CTF players stuck after getting a foothold and needing a repeatable escalation methodology

  • SOC analysts/Blue Teamers who want to understand attacker behavior to build better detections

  • Ethical hackers who already know basic exploitation and want to go deeper into real-world post-compromise tradecraft

What you will learn:

  • Build a safe, isolated Kali Linux lab with Windows and Linux attack targets

  • Systematically enumerate compromised systems using LinPEAS and WinPEAS

  • Escalate privileges to root on Linux via SUID, sudo, and cron misconfigurations

  • Escalate privileges to SYSTEM on Windows via service, token, and registry abuse

  • Install and understand 8+ persistence mechanisms across Linux, Windows, and Active Directory

  • Apply practical AV/EDR evasion techniques including AMSI bypass and LOLBins

  • Extract and crack credentials using Mimikatz, Hashcat, and LaZagne

  • Move laterally across a network with Pass-the-Hash, Evil-WinRM, and SSH pivoting

  • Map an Active Directory environment with BloodHound to find the fastest path to Domain Admin

  • Translate technical findings into a professional, client-ready penetration test report

Requirements:

  • Basic Linux command-line familiarity

  • Basic networking knowledge (IP addresses, ports, subnets)

  • A computer with at least 16GB RAM capable of running VirtualBox or VMware

  • No prior Active Directory or Windows internals experience required

Final Project:
A full-chain capstone lab spanning 3 machines (Linux host, Windows workstation, Windows Domain Controller). Starting only from an initial low-privilege foothold, you will independently escalate privileges, establish persistence, harvest credentials, pivot laterally, and compromise the domain — then document the entire chain in a professional report using the included templates. A scoring rubric lets you self-assess stealth, speed, and documentation quality against real industry standards.


Who this course is for:

  • Aspiring ethical hackers, cybersecurity students, and penetration testers seeking practical, hands-on experience in post-exploitation methodologies. It is also ideal for system administrators, SOC analysts, and security professionals looking to understand post-compromise attack vectors to strengthen internal network defenses.

Report abuse