[THEME MUSIC]
Hello, everyone.
Welcome to the system/host based attacks course.
I'm your instructor Alexis Ahmed.
Before we get started with the course,
let's get an idea of what we'll be covering
as well as some of the prerequisites
that are actually needed before you get started
with the course, and we'll also get an idea of what
the course objectives are.
First and foremost, who am I?
My name is Alexis Ahmed.
I'm a senior penetration tester at HackerSploit.
I am also an offensive security instructor at INE.
If you want to reach out to me, you
can do so via my email, which is aahmed@ine.com
or through my Twitter or LinkedIn handles, which
are listed right over here.
So now that we have all of the formalities out of the way,
let's get an understanding of what we'll be covering.
So first and foremost, what is or what our system or host
based attacks?
System or host based attacks essentially revolve
around exploiting vulnerabilities
within specific systems or hosts.
And in this case, we are going to be focusing on both Windows
and Linux as the two primary operating system.
So where really does this differ in terms
of traditional exploitation?
Well, whenever you're talking about traditional exploitation
or network-based exploitation, that really is vague in regards
to the types of services you will be exploiting
and you may run across or you will run across third party
applications running on either Windows or Linux hosts
and you can then exploit them in order to gain access
to a target system.
In the case of system or host-based attacks,
we are primarily interested in exploiting
the inherent vulnerabilities within Windows and Linux
operating systems.
So we'll start off by getting an idea
of what system or host-based attacks are
and what they essentially entail.
And then we'll move over to the first operating
system, which is Windows.
So we'll get an overview of the Windows vulnerabilities.
So we'll be talking about the various protocols
that can be found running on a Windows system as well
as the native services like IIS, SMB, and RDP,
and how they can be exploited.
So we'll primarily be focused on the Windows operating
system and Windows vulnerabilities
and how they can be exploited.
So that will also tie-in to the exploitation section.
Once we've gained access to a Windows system,
we'll then move on to Windows privilege escalation, which
will cover the various privilege escalation
techniques pertinent to the Windows operating system.
So we'll talk about kernel exploits,
we'll talk about access token impersonation, et cetera,
et cetera really just focusing on
the techniques that are pertinent to Windows.
Once we've taken a look at a Windows privilege escalation,
we'll then move on to Windows file system vulnerabilities
where we'll take a look at things or techniques
or features like the alternate data streams and why they use,
how they can be exploited, so on and so forth.
Once we've gained knowledge regarding the various fault
system vulnerabilities that affect Windows,
we'll then move on to Windows credential dumping.
We will take a look at how to dump clear text
passwords from memory as well as NTLM hashes for the purpose
of password cracking.
And we will be exploring password cracking
in a different course, but for now we're
just learning how to dump all of these hashes.
And we'll then explore how the Windows hashes that we've
dumped can be used for lateral movement
through the use of tools like PsExec or SmbExec.
Once we've explored the Windows vulnerabilities
and how they can be exploited, we'll then move on to Linux.
So we'll get an overview of Linux vulnerabilities
and we'll take a look at how they can be exploited.
So we'll take a look at services like SSH, FTP, SAMBA, et
cetera, et cetera.
And then, of course, we'll move on to privilege escalation
on Linux.
We will be exploring techniques like SUID binaries, Cronjobs,
so on and so forth.
Once we've got a handle on Linux privilege escalation
techniques, we'll move on to Linux file system
vulnerabilities.
We'll learn more about them and how they can be exploited,
any workarounds, so on and so forth.
And once that is done, we'll then
move on to Linux credential dumping which
will, of course, entail the process of dumping Linux
password hashes for the purpose of password cracking, which
as I said, we will be covering in another course.
So as you can see, this is quite comprehensive.
We're going to be diving deep into Windows and Linux
vulnerabilities, more specifically
the inherent vulnerabilities, and we'll
get an idea of how they can be exploited and learn
how to perform privilege escalation
as well as password dumping or credential dumping
for that matter.
right
So that is what we're going to be covering in this course.
As for the prerequisites, you need
to have a basic familiarity with TCP and UDP,
primarily because we'll be interacting
with various protocols that either run on the TCP stack
or on a TCP port or on a UDP port.
So having a understanding of how these protocols
work and the handshakes involved is a very good help.
You also need to have a basic familiarity
with Linux and Windows, primarily because we will
be exploiting these systems.
So having an understanding of how
to utilize the actual operating system, how
to utilize the terminal or command prompt
is always helpful.
And, of course, you do not need to have any prior experience
as a penetration test in order to start this course.
We're going to be covering all the fundamentals and really
everything you need to do to exploit Windows and Linux
operating systems.
As for the learning objectives, these
will tie-in to what we'll be covering so students will get
an understanding of the various vulnerabilities affecting
both Windows and Linux, and you'll also
be able to identify and exploit vulnerabilities in both Windows
and Linux systems.
You'll also get an understanding of how
to perform privilege escalation on both Windows and Linux
systems and how to identify and exploit
file system vulnerabilities on both Windows and Linux.
And finally, you will get an understanding
of how credentials are stored on both Windows and Linux
and how password hashes can be dumped
for the purpose of password cracking.
So now that we have that out of the way,
we can get started with the course.
I'm really excited, and I'll be seeing you
in the first section.