Training Objectives

Security systems are evolving and becoming more complex, and so are the hacking techniques. Every successful compromise of the network infrastructure has to evade multiple layers of security in a perfect sequence. Imagine yourself in an environment with diverse operating systems, servers, and applications with a legacy as well as in-house developed products and security solutions such as firewall, AV, etc. How do you plan to go ahead and pwn them all?

Learn to exploit and compromise targets where Metasploit will not work by default. Look inside exploit code, and tweak them to make it work against your targets. Perform a wide array of tricks to discover, enumerate and pwn services, systems, and domain controllers. Move around in an enterprise network with Active Directory. Analyze and exploit enterprise software components.

NOTE: This is an advanced training program. The participants are expected to be familiar with network services vulnerability assessment and penetration testing, including basic ideas about vulnerabilities and their exploitation techniques.

Training level: Advanced

Training outline:

Day-1

• Exploiting network services to gain a foothold
• Discover network services
• Try exploitation with public tools
• Customize public exploit to gain access
• Pivoting Lab
• Pivoting using Meterpreter and SOCKS Tunnel
• Proxy Chains, Sliver, Chisel
• Discovering and exploiting internal network
• Hacking the Evil Corp
• Discover apps and services
• Exploit configuration weaknesses for information gathering AV Evasion

Day-2

• Windows Domain Exploitation
• Network discovery and gaining entry to the domain
• Credential extraction from memory
• Active Directory enumeration
• Kerberos attacks
• Pass the Ticket
• Kerberoasting
• Domain privilege escalation
• Lateral Movement
• PsExec / PSSession with Hash / Ticket (PtH / PtT)
• Golden Tickets
• DCSync

Day-3

• More Lateral Movement
• ACL Abuse
• Delegation
• Unconstrained
• Constrained
• Resource-Based Constrained Delegation
• Enterprise services exploitation
• Symantec BackupExec
• Symantec Messaging
• Gateway Microsoft Exchange