Understand Windows Exploitation and Post-Exploitation Techniques
About This Course
In this module, participants will delve into the intricacies of Windows security, focusing on user enumeration, password policies, vulnerabilities, and patch management strategies. Through hands-on exercises, learners will explore techniques for identifying user accounts, analyzing Windows passwords, and exploiting both remote and local vulnerabilities. By the end of this module, participants will be equipped with the skills to assess and enhance the security of Windows environments.
What You'll Learn
LO2: Understand and evaluate password policies, including complexity and lockout policies.
LO3: Perform account brute-forcing and analyze hash storage methods (LANMAN, NTLMv1/v2).
LO4: Conduct offline password analysis using rainbow tables and hash brute-forcing techniques.
LO5: Recognize remote and local Windows vulnerabilities
LO6: Perform post-exploitation activities such as obtaining password hashes, cracking hashes, checking patch levels, and deriving lists of missing security patches.
LO7: Identify significant vulnerabilities in common Windows applications.
LO8: Recognize common web servers (e.g., IIS) and their associated vulnerabilities.
Entry Requirements
Language: Obtained at least Grade C6 in GCE 'O' Level English Language, or
Be able to listen, speak, read and write English at a proficiency level equivalent to WSQ Workplace Literacy (WPLN) Level 5. Academic: Obtained at least Grade C6 in 3 GCE ‘O’ Level Subject, or Higher NITEC or equivalent.