Windows Red Team Lab

Windows Red Team Lab
English | Size: 844.5 MB
Category: HACKING | Linux | Security

Section Objective: You will need to abuse nested impersonations to escalate privileges on the application level. After executing code on the operating system, escalate privileges on the OS level and capture flags. Hunt for active directory write or modify permissions, abuse the permissions and extract password in clear text for a user.

Learning Elements:

Domain Enumeration
Single sign-on in Active Directory
Privilege escalation in enterprise applications
Abusing built-in functionality for code execution
Local privileges escalation on Windows
Credential Replay
Domain privileges abuse
Offline brute force attack against domain objects

Section 2:Gain Admin Privileges, Defeat Countermeasures and Restrictions, Hunt for Domain Privileges, Escalate

Difficulty Level: High

Estimated Completion Time: 24 hours

Number of challenges: 4

Section Objective: You will need to get local admin privileges on a server and then enumerate and defeat the aggressive countermeasures on that server. You may also like to find some flags in the process.

Learning Elements:

Domain Enumeration
Situation Awareness on foothold machine
Extracting credentials from Windows machine
Credential Replay
Domain privileges abuse

Section 3:Pivot through Machines, Defeat Countermeasures, Abuse Kerberos, Exfiltrate Juicy Data

Difficulty Level: High

Estimated Completion Time: 36 hours

Number of challenges: 5

Section Objective: You will need to get local admin privileges on a server and then hop subnets and machines to access other machines. Make extensive use of built-in tools and administration mechanisms to replay credentials and impersonate domain users. Abuse Kerberos functionality to land on firewalled machines to access interesting piece of information from databases. Capture flags in the process and credit card numbers from a database.

Learning Elements:

Using administration tools to compromise other machines
Pivot through machines
Kerberos functionality abuse
Using administration tools to access data from databases.
Search interesting data in databases

Section 4:Pivot through Machines and Forest Trusts, Low Privilege Exploitation of Forests, Capture Flags and Database

Difficulty Level: High

Estimated Completion Time: 12 hours

Number of challenges: 4

Section Objective: Understand the concept of database links. Use it to get access to a trusted forest and enumerate the domains there. Achieve code execution in the target forest, which is located in an isolated network segment. Extract interesting information from the databases there.

Learning Elements:

Trust abuse in databases
Pivot through forests
Built-in tools for command execution
Using administration tools to access data from databases.
Search interesting data in databases

Section 5:Enumerate Users and Emails, Create Emails, Custom Payloads, Exploit End-User Machines

Difficulty Level: High

Estimated Completion Time: 24 hours

Number of challenges: 5

Section Objective: Simulate a real phishing attack. Get a foothold in the target forest and enumerate the domains. Capture flags from multiple machines.

Learning Elements:

Create emails with weaponized attachments
Craft payloads which provide code execution
Utilize available information to chain attacks
Bypass countermeasures
Find privileges in domain

Section 6:Compromise Applications, Achieve Command Execution, Impersonate Users, Move Laterally, Escalte Privileges

Difficulty Level: High

Estimated Completion Time: 36 hours

Number of challenges: 7

Section Objective: You need to compromise an enterprise application and achieve command execution on the OS. Enumerate the privileges and permissions for the users and move laterally to find a configuration, which allows you to escalate privileges to domain administrator. Capture some interesting flags during the task.

Learning Elements:

Abusing functionality of enterprise applications
Using architecture specific payloads
User Impersonation
User hunting for high privileges
Dumping system secrets
Credential Replay
Lateral movement

Section 7:Obtain Domain Privileges, Compromise Forest

Difficulty Level: High

Estimated Completion Time: 8 hours

Number of challenges: 2

Section Objective: Get domain admin privileges on one of the domains and compromise the forest root by escalating privileges.

Learning Elements:

Abuse Kerberos functionality
Understand and abuse intra-forest trust
Understand and abuse various groups in root domain of forest

Section 8: Compromise a Forest from another Trusted Forest

Difficulty Level: High

Estimated Completion Time: 24 hours

Number of challenges: 5

Section Objective: Get enterprise admins privileges on a forest root and compromise a trusted forest. You have to enumerate both the forests, look for interesting ways to execute code and credential replay to solve this task.

Learning Elements:

Forest enumeration
Abuse Kerberos functionality
Understand and abuse inter-forest trust
Using administrator tools for command execution

Buy Long-term Premium Accounts To Support Me & Max Speed

DOWNLOAD:

If any links die or problem unrar, send request to http://goo.gl/aUHSZc