|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/advanced-windows-priviledge-escalation-for-oscp-beyond/
课程评论：没有评论
课程名称：高级Windows权限提升技术（OSCP及更高级别） 课程概述：本课程为经验丰富的渗透测试者、红队成员及安全专业人士设计，旨在掌握Windows环境中的权限提升艺术。随着攻击者越来越多地瞄准Windows系统，理解允许权限提升的复杂机制对于攻防安全操作至关重要。 在课程中，参与者将深入探讨复杂的利用技术，学习如何通过多种攻击向量在现代Windows系统中提升权限。您将获得实践经验，运用先进工具和方法，包括利用配置错误、绕过用户帐户控制（UAC）、利用不安全的服务权限、利用DLL劫持，以及将多个漏洞链式利用以实现最大影响。课程还将涵盖规避杀毒软件、Windows Defender及其它端点保护机制的技术，以保持持续性和隐蔽性。 除了这些战术，课程还强调理解Windows内部结构、Windows操作系统的安全模型以及Active Directory在权限提升中的作用。掌握这些概念后，您将能够识别并利用这些弱点，将权限从标准用户提升到管理员或SYSTEM访问。 通过现实世界的实践练习和实验室，学生将能够执行高级权限提升攻击，同时开发对策和防御策略，以防止这些复杂技术的应用。课程最后将进行一个综合项目，参与者可以应用所学知识，模拟一次高级权限提升攻击场景。
This advanced course is designed for experienced penetration testers, red teamers, and security professionals seeking to master the art of privilege escalation within Windows environments. As attackers increasingly target Windows systems, understanding the intricate mechanisms that enable privilege escalation is essential for both offensive and defensive security operations.Throughout this course, participants will dive deep into complex exploitation techniques, exploring how to elevate privileges using a variety of attack vectors across modern Windows systems. You will gain hands-on experience with advanced tools and methods, including exploiting misconfigurations, bypassing User Account Control (UAC), leveraging insecure service permissions, exploiting DLL hijacking, and chaining multiple vulnerabilities for maximum impact. The course also covers techniques for evading antivirus software, Windows Defender, and other endpoint protection mechanisms to maintain persistence and stealth.In addition to these tactics, the course will emphasize the understanding of Windows internals, the security models of Windows OS, and the role of Active Directory in privilege escalation. By mastering these concepts, you will be equipped to identify and exploit weaknesses that can be used to escalate privileges from standard user to administrator or SYSTEM access.Real-world, practical exercises and labs will empower students to perform advanced privilege escalation attacks, while developing countermeasures and defensive strategies to prevent these sophisticated techniques. The course concludes with a capstone project, where participants can apply their knowledge to simulate an advanced privilege escalation attack scenario.
