0%

Explore Courses Defend What Matters

English 日本語
$ USD ¥ JPY
Contact Us
0
Sign In Create Account
Start Learning

Your Bag

Advanced Exploitation & Privilege Escalation

04 Penetration Testing

Advanced Exploitation & Privilege Escalation

Go from a low-privilege foothold to full control on Windows and Linux, and understand the memory corruption behind real exploits.

Levels
04
Skill Range
Beginner → Expert
Track
Penetration Testing
Lifetime Access
Enroll Now Explore Courses
Advanced Exploitation & Privilege Escalation
From 240CREDS

A foothold is not a compromise. This course is about the distance between them. You will work Linux escalation through SUID binaries, sudo misconfiguration, capabilities, cron abuse, and kernel exploits, then do the same on Windows via token impersonation, unquoted service paths, DLL hijacking, and abusive ACLs. Beyond configuration, you will learn how memory corruption actually works: stack overflows, shellcode, and the modern mitigations of ASLR, DEP, and stack canaries, plus return-oriented programming as the answer to them. Antivirus and EDR evasion is covered at a conceptual level with an emphasis on why detection engineering works. Everything is practised in an isolated lab against systems you are authorised to attack.

Curriculum

Learning Path

Each level is enrolled separately. Work through them in order, or start at the level that matches your experience.

  1. Level 01

    Beginner

    240 CREDS

    Purpose

    Escalate on Linux, turning a low-privilege foothold into real control.

    Outcome

    You can escalate to root on a misconfigured Linux host.

    What You'll Learn
    • Enumerate a host for SUID binaries, sudo misconfiguration, and capabilities.
    • Exploit a cron job or writable path to gain privilege.
    • Confirm root and understand exactly why the path worked.
  2. Level 02

    Intermediate

    483 CREDS

    Purpose

    Escalate on Windows, where the paths differ but the principle is the same.

    Outcome

    You can escalate privileges on a Windows host methodically.

    What You'll Learn
    • Abuse token impersonation and unquoted service paths for elevation.
    • Exploit DLL hijacking and weak ACLs on services.
    • Enumerate a Windows host systematically rather than guessing.
  3. Level 03

    Advanced

    696 CREDS

    Purpose

    Understand the memory corruption behind real exploits, not just the tools that fire them.

    Outcome

    You can explain and demonstrate a memory corruption exploit.

    What You'll Learn
    • Build and analyse a stack buffer overflow in a controlled target.
    • Work with shellcode and see how the classic exploit is laid out.
    • Explain how ASLR, DEP, and stack canaries change the attack.
  4. Level 04

    Expert

    1,069 CREDS

    Purpose

    Reason about modern mitigations and why detection engineering, not evasion, is the durable skill.

    Outcome

    You can discuss exploitation and mitigation as a defender would.

    What You'll Learn
    • Show how return-oriented programming answers non-executable memory.
    • Discuss antivirus and EDR evasion at a conceptual level and its limits.
    • Argue why detectable, documented testing serves a client better than stealth.