Windows privilege escalation: AlwaysInstallElevated, UAC bypass, token impersonation, Mimikatz and WinPEAS.
Why this matters right now
Windows PrivEsc -- the reality of corporate pentesting
After the course you will be able to
Not abstract knowledge -- concrete skills you can demonstrate in an interview
Real attacks in the course
Every lesson is built on real incidents -- not made-up examples
PrintNightmare (CVE-2021-1675)
A critical Windows Print Spooler vulnerability allowed any domain user to gain SYSTEM privileges on the domain controller. Affected all Windows versions.
EternalBlue + MS17-010
An NSA exploit for SMBv1 allowed remote code execution with SYSTEM privileges. Became the basis for WannaCry and NotPetya, causing $10B in damages.
Potato Attacks: SYSTEM via SeImpersonatePrivilege
Classic technique: service account with SeImpersonatePrivilege -> JuicyPotato -> SYSTEM. Works on most corporate Windows installations.
Course Program
3 topics · 12 lessons · from WinPEAS to Mimikatz and Pass-the-Hash
Where this course leads
MC-04 -- a key skill for three career paths in cybersecurity
Windows Pentester
Specialize in testing Windows infrastructure, finding PrivEsc vectors in corporate networks.
Red Teamer
Simulate real APT attacks in Windows environments, using advanced techniques to bypass defenses.
Incident Responder
Investigate PrivEsc incidents in Windows, identify attack traces and restore systems.
Who this course is for
Pentesters
Want to close the gap in Windows PrivEsc and confidently gain SYSTEM in corporate engagements
Red Teamers
Learning advanced post-exploitation techniques in Windows for APT attack simulation
Incident Responders
Want to understand how PrivEsc attacks work to better investigate incidents
Master Windows PrivEsc
and gain SYSTEM
today
12 lessons, WinPEAS, Mimikatz and practice on real Windows lab environments.
Windows Privilege Escalation
Level: intermediate