Windows Privilege Escalation for OSCP & Beyond! (Udemy.com)

Finding and exploiting Windows vulnerabilities and misconfigurations to gain an administrator shell.

Created by: Tib3rius

Produced in 2021

icon
What you will learn

  • Multiple methods for escalating privileges on a Windows system.
  • In depth explanations of why and how these methods work.
  • Tools which can help identify potential privilege escalation vulnerabilities on a Windows system.
  • A setup script you can run on a (free) trial version of Windows 10, creating an intentionally vulnerable VM to practice privilege escalation on.

icon
Quality Score

Content Quality
/
Video Quality
/
Qualified Instructor
/
Course Pace
/
Course Depth & Coverage
/

Overall Score : 96 / 100

icon
Course Description

This course teaches privilege escalation in Windows, from basics such as how permissions work, to in-depth coverage and demonstrations of actual privilege escalation techniques. The course comes with a full set of slides (150+), and a script which can be used by students to create an intentionally vulnerable Windows 10 configuration to practice their own privilege escalation skills on. This is a 100%privilege escalation course, with absolutely no filler!
Please note that this course is aimed at students currently taking, or planning to take the OSCP, and thus covers more common forms of privilege escalation. Some extra methods are included, and more methods may be added in the future, however this course was not designed to cover every possible (or obscure) method.
Who this course is for:
Beginner and intermediate ethical hackers.
Students currently taking or planning to take the PWK/OSCP course.

icon
Instructor Details

Tib3rius

Tib3rius is a professional penetration tester who specializes in web application hacking, though his background also includes network penetration testing. He is OSCP certified, and likes developing new tools for penetration testing, mostly in Python. He helps run an OSCP prep discord server, and enjoys passing on his knowledge to students who have a passion for information security.

icon
More courses by Tib3rius

Linux Privilege Escalation for OSCP & Beyond!

$11.99

icon
More other courses

Aprende matemticas desde cero - Aritmtica

$11.99

Unofficial Udemy Student Guide: Courses Free or Dirt Cheap

$11.99

Poi Dancing: The Beginner Series

$11.99

Professional Advanced Angelic Healing Practitioner Course

$11.99

Professional Accredited Earth Angel Course

$11.99

Cours signe bb tout le vocabulaire autour du bb

$11.99

icon
Reviews

4.8

187 total reviews

5 star 4 star 3 star 2 star 1 star
% Complete
% Complete
% Complete
% Complete
% Complete

By Brian Coates on 11/15/2020

To those wanting to learn Windows Priv Esc:
The good: I strongly suggest this course, it covers the basics of Windows privilege escalation neatly, concisely and in an easily understood way. The price is more than reasonable for the content and the author is friendly and seems to respond to concerns from students. The solid and clear structure of the course makes it so easy to learn you'll be escalating your privileges before you know what's happening.
The 'bad': Because this course focusses on the meat of the privilege escalation if you are at the stage of being a very early beginner (unfamiliar with things like networking, common tools, not entirely comfortable with the command line, etc) then this course can still work for you, but you would likely need to pause and take the time to learn these things as and when required.
To the course author:
You explain things very clearly and well despite (or perhaps because) of the brevity. Indeed I've hesitated to buy courses due to a short amount of video content before and only really opted for yours because of being familiar with you from Twitter; however you've definitely changed my mind on length of content being an important factor. This isn't my first priv esc course and the first half of the course was fairly well known to me, but the things I hadn't quite understood the last time I tried to learn this (Potato attacks and Port forwarding) were suddenly very easy to understand, and in such a short time frame as well.
I liked that the preamble and extra details were kept short and neat (set up, general concepts, spawning shells, tools).
Thanks to the logical structure of the course the delineation of the subject matter was readily apparent and this aided in my understanding of the topic.
The choice of set up script was good, and it ran without any serious issues. That said, as mentioned in another review, it did take some effort to get Kali to cooperate as the SMBserver. As I recall I ended up needing to specify Python version.
You should be very proud of your work here and thank you for making it such good value for money.

By Thor Kristiansen on 11/15/2020

All is good. Almost! The cli video shots need 1080 and some more light.

By Ciaran McGlynn on 11/15/2020

Instructor was really clear and knowledgeable - the course set out clearly what would be covered and then covered those topics really well - I highly recommend the course for those looking for additional OSCP pric esc preparation.

By pai red on 11/8/2020

I expected more from the course mainly due to the positive reviews . As mentioned in the course description i expect the course to be detailed but its not .Most of the information is already present in the internet for free . May be its a course for absolute beginner .And compared to other courses in Udemy the price is high for a 1.5 hour class . There are free websites providing better info on privesc than this course .
And moreover there is more to privesc than things covers in the course .
How to transfer the files ?
Architecture ?
What id there is AV ?
Powershell restrictions ?
Nothing is covered on a course focued on privesc .
There is no proper methodology explained for a privesc . The author could have showed privilege escalation process for atleast one box .The course only shows separate explanation of each technique .Not showing the approach as a whole !.
For an absolute beginner the course is good ! But if you have a slight idea about windows privesc , have gone through awesome guides already available for free this course wont add much value .
thanks

By Daniel Hargis on 10/24/2020

Pretty good course, the lab setup/use was very straight forward and functional

By Denis Kapshukov on 10/23/2020

Brilliant!

By Jeremy Fisher on 10/22/2020

Not going to lie, Tib3rius very likely knows what he is talking about. However I have tried to reach out to him directly via discord. The first rule in the discord group is don't DM people, but I feel he would not take kindly to someone spouting personal details in a room full of people. So I DM him. First issue was solved by reinstalling a fresh distro of Kali linux on a 700KB connection. Afternoon was shot. I get into the system and a new and exciting problem shows up. Likely there is a python dependency that I am not aware of. Doing a nano of the py file, I see that it is calling on a impacket.example logger. Issue is that there is no such thing, in both my old distro and new one. I Apt-get'd the updates, upgrades and such. No dice. I will bump the rating up 1. if I can ever get in contact with the guy across the pond and 2. if I can bust through this issue myself. Going to try and upgrade both python and python3. It's possible that (being that he is using python and not python3) I need to update 2.* as well.
UPDATE: Instructor has made adjustments to the coursework. I look forward to the material after my bootcamp. :)

By Jonathan VINCENT on 10/22/2020

Really great course and instructor!
Hope for new course release from him.

By Cheese on 10/20/2020

This course helped me to make my toes smell less. Before this course, my toes were absolutely RANK. Now they're someone less smelly. Thank you Tib3rius!

By Tanner Marengo on 10/20/2020

Overall I would recommend this course. Compared with Tib3rius's Linux coarse, this felt more theoretical, but nonetheless useful for understanding Windows exploits.

By Sait Nuri on 10/17/2020

Increadibly useful course! Thanks!

By Thomas Williams on 10/15/2020

An excellent course by tib3rius. The course is clear, concise, and straight to the point. I am primarily a Linux user and very comfortable with Linux PrivEsc, but really lacked even the basics with Windows PrivEsc and this helped plug the gap. Thank you.