We provide virtual course about PSH: PowerShell Hacker in english. The Certified Powershell Hacker, C)PSH, course is an intense few days covering the keys to being a Powershell hacker.
Course description:
Most companies have an Active Directory infrastructure that manages authentication and authorization to most devices and objects within the organization. Many use PowerShell to speed up and simplify management. A Powershell Hacker can be a security risk, or an asset to prevent breaches. Which is why we spend 4 days learning how to hack like the pros using nothing but what is already available to us in Windows or now in open source code on Mac and Linux!
The course is based on real world implementations of a windows infrastructure along with real world penetration testing techniques. You will leave with a real strong skill set to help test your windows environment like never before. An attendee will also walk away with a strong skill set on how to help prevent these attacks from happening in the first place!
Course content:
Module 1 - Introduction to PowerShell:
• Different Tool Options
• Installing everything needed
• Language Basics
• Using the Windows API and WMI
• Interacting with the Registry
• Managing Objects and COM Objects
Module 2 - Introduction to Active Directory and Kerberos:
• Overview of Kerberos
• The three-headed monster
• Key Distribution Center
• Kerberos in Detail
• Why we care about Kerberos as a Hacker
• Overview of Active Directory
• Understanding AD concepts
• AD Objects and Attributes
Module 3 - Pen Testing Methodology Revisited:
• Introduction to the methodology
• The Plan!!
• Vulnerability Identification
• Client-side attacks with and without PowerShell
Module 4 - Information Gathering and Enumeration:
• What can a domain user see
• Domain Enumeration
• Trust and Privileges Mapping
• After the client exploit
Module 5 - Privilege Escalation:
• Local Privilege Escalation
• Credential Replay Attacks
• Domain Privilege Escalation
• Dumping System and Domain Secrets
• PowerShell with Human Interface Devices
Module 6 - Lateral Movements and Abusing Trust:
• Kerberos attacks (Golden, Silver Tickets and more)
• Delegation Issues
• Attacks across Domain Trusts
• Abusing Forest Trusts
• Abusing SQL Server Trusts
• Pivoting to other machines
Module 7 - Persistence and Bypassing Defenses:
• Abusing Active Directory ACLs
• Maintaining Persistence
• Bypassing Defenses
• Attacking Azure Active Directory
Module 8 - Defending Against PowerShell Attacks:
• Defending an Active Directory Infrastructure
• Detecting Attacks
• Logging
• Transcripts
• Using Certificates
• Using Bastion Hosts
• Using AppLocker
Target audience:
• Microsoft Administrators
• Cybersecurity Managers/Administrators
• Penetration Testers
• Active Directory Administrators
Prerequisites:
• Mile2 C)PEH and C)PTE or equivalent knowledge
• Understanding of pen testing
• General Understanding of active directory
• General understanding of scripting and programing
Language:
• English course material and english speaking instructor
Certification:
Upon completion:
Upon completion, the Certified PowerShell Hacker, C)PSH candidate will be able to competently take the C)PSH exam and protect a powershell system from attack.
Exam information:
The Certified Powershell Hacker exam is taken online through Mile2’s Learning Management System and is accessible on you Mile2.com account. The exam will take approximately 2 hours and consist of 100 multiple choice questions. A minimum grade of 70% is required for certification.