Roadmap

Cyber Security Path

Explore the structured learning path, track by track.

Advanced Hacking

Start

1

Hacking Windows & Active Directory: Pass-the-Hash, Mimikatz, and Pivoting

6 chapitres · 14 leçons

01Understanding Active Directory3L

1Active Directory Structure — Domains, Forests, and ControllersFree 2AD Protocols: LDAP, Kerberos and SMB 3Setting Up the Windows Active Directory Lab

02Active Directory Enumeration2L

4Active Directory Enumeration: enum4linux, ldapdomaindump, and CrackMapExec 5BloodHound and SharpHound: Mapping Attack Paths

03Credential Attacks3L

6Pass-the-Hash: Reusing an NTLM Hash 7Kerberoasting: Attacking Service Accounts 8AS-REP Roasting: Attacking Accounts Without Pre-authentication

04Lateral Movement2L

9Lateral Movement: PSExec and SMB 10Lateral Movement: WMI and WinRM

05Windows Privilege Escalation2L

11Mimikatz: Extracting Credentials from LSASS 12Token Impersonation: Windows Privilege Escalation

06Active Directory Persistence2L

13Golden Ticket: Ultimate Kerberos Persistence 14DCSync: Dumping All Domain Hashes

2

C2 & Post-Exploitation

5 chapitres · 12 leçons

01Understanding C22L

1What is a C2?Free 2Listener / Agent / Teamserver Architecture

02Advanced Metasploit3L

3Advanced Meterpreter 4Metasploit Post-Exploitation Modules 5Pivoting with Metasploit

03Cobalt Strike concepts2L

6Beacon and Listeners — C2 Concepts 7Malleable C2 Profiles

04Persistence2L

8Windows Persistence 9Linux Persistence

05Pivoting & Tunneling3L

10SSH Port Forwarding 11Proxychains and SOCKS 12Chisel and ligolo-ng

3

Privilege Escalation Linux

5 chapitres · 10 leçons

01Fundamentals2L

1Linux Post-Exploitation EnumerationFree 2SUID & SGID

02Sudo Abuse2L

3Sudo Abuse 4Sudoers Misconfigurations

03Scheduled Tasks & Services2L

5Cron Jobs 6Vulnerable Services

04Advanced Techniques3L

7Linux Capabilities 6Path Hijacking 8Weak File Permissions

05Kernel & Wrap-up1L

9Kernel Exploits

4

Privilege Escalation Windows

5 chapitres · 10 leçons

01Fundamentals2L

1Windows Post-Exploitation EnumerationFree 2Unquoted Service Paths

02Registry & Installers2L

3AlwaysInstallElevated 4Registry Misconfigurations

03DLL & Services2L

5DLL Hijacking 6Weak Service Permissions

04Token Abuse2L

7SeImpersonatePrivilege 8Token Impersonation

05Advanced Techniques2L

9Autorun & Startup Abuse 10Credential Dumping Windows

Complete