Windows Privilege Escalation Penetration Testing - Part I

Explore how to enumerate a Windows system after gaining a shell, extracting host name, architecture, patching status, and drive information using systeminfo, hostname, and wmi queries.

Enumerate users and groups after gaining a shell by running commands like whoami, net user, and net localgroup to identify administrators, guests, and permissions, and check password status and expiry.

Enumerate networks after gaining a shell by using ipconfig, arp -a, route print, and netstat -ano to identify gateways, DNS servers, interfaces, and active connections.

Discover password hunting on a victim machine by locating passwords or credentials in files, revealing clear text or hashes, and cracking weak passwords for access.

Explore automated tools for Windows privilege escalation testing and AV detection, including PowerShell scripts and Metasploit, to identify ports, credentials, and missing patches.

Gain a foothold by performing nmap scans, testing anonymous login on ftp, exploring http services, and using metasploit to craft payloads, gain a shell, and begin Windows privilege escalation enumeration.

Explore automated tools and the suggester for metasploit libraries to gather system information, identify vulnerabilities, and update metasploit for reliable privilege escalation testing.

Explore what the kernel is, how it manages hardware and software through drivers, and why kernel exploits enable privilege escalation, with examples like Windows kernel exploits and Metasploit payloads.

Explains a Windows kernel privilege escalation using Metasploit, covering exploitation steps, session setup, and manual techniques to test vulnerable systems.

Learn to establish a foothold by configuring your local ip and mac address for testing. Practice manual kernel exploitation techniques and manual ip configuration, including gateway and netmask.

Explore conducting an nmap scan to identify open ports, locate a buffer overflow exploit, craft a payload, gain a Windows shell, and prepare for admin privilege escalation.

Demonstrates identifying Windows vulnerabilities, deploying a payload via netcat and MSF, bypassing antivirus, and gaining system-level access on the victim machine.

Check the Facebook page before enrolling to find discounted course coupons, and follow the academy’s rules to obtain free coupons; the bonus lecture covers getting our tools.