Privilege Escalation Courses and Certifications

Black Hat

Tackling Privilege Escalation with Offense and Defense

Explore privilege escalation in JavaScript engines, focusing on offensive techniques and defensive strategies. Learn about vulnerabilities, attack surfaces, and security model improvements.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Black Hat

GPU Security Exposed

Explore GPU security vulnerabilities, including shared memory risks and privilege escalation issues, with insights on protecting popular devices from potential exploits.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

nullcon

7 Sins of ATM Protection Against Logical Attacks

Comprehensive exploration of ATM security vulnerabilities, covering kiosk mode bypass, privilege escalation, software flaws, network security, and device management. Insights for enhancing ATM protection.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Windows Operating System Archaeology - Casey Smith and Matt Nelson

Explore Windows OS archaeology, focusing on Component Object Model, persistence techniques, and evasion methods for enhanced system understanding and security awareness.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

New Shiny in Metasploit Framework

Explore Metasploit Framework updates: new commands, modules, and features for various platforms. Learn about privilege escalation, persistence, and reverse operations.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

SQL Server Hacking on Scale Using PowerShell

Explore SQL Server hacking techniques using PowerShell, covering server discovery, login access testing, privilege escalation, and post-exploitation strategies for enhanced security awareness.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

So You Think You Can Secure Your Cloud - Red Team Engagements in GCP

Comprehensive guide to adversary simulations in GCP, covering initial access, persistence, privilege escalation, C2 using Google products, and data exfiltration techniques.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Threat Hunting - Using MITRE ATT&CK Against Carbanak Malware

Explore threat hunting using MITRE ATT&CK framework against Carbanak malware, covering tactics, techniques, and procedures for effective cybersecurity defense and mitigation strategies.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Advanced Attack Vectors in Azure Environments

Explore privilege escalation techniques in Azure's integrated ecosystem. Learn core concepts and advanced attack vectors for enhanced cloud security awareness.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Privilege Escalation Using DOP in MacOS

Explore privilege escalation in MacOS using Data-Oriented Programming (DOP), a powerful exploit technique that leverages heap buffer overflow vulnerabilities for persistent attacks resistant to kernel code changes.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Black Hat

Exploring a New Class of Kernel Exploit Primitive

Uncover innovative kernel exploit techniques using limited primitives, focusing on turning seemingly benign bugs into powerful attack vectors for code execution and privilege escalation.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Black Hat

Kubernetes Privilege Escalation - Container Escape Equals Cluster Admin

Explore Kubernetes security vulnerabilities, privilege escalation techniques, and container escape risks. Learn to identify powerful system pods and implement mitigations to protect your cluster from potential attacks.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Black Hat

Cautious - A New Exploitation Method! No Pipe but as Nasty as Dirty Pipe

Unveils a novel exploitation technique surpassing Dirty Pipe, enabling arbitrary file overwriting and privilege escalation through double-free vulnerabilities, applicable across affected kernel versions.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Black Hat

Controlling the Source - Abusing Source Code Management Systems

Explore vulnerabilities in Source Code Management systems, including reconnaissance, user role manipulation, and repository takeover. Learn attack scenarios and defensive strategies for GitHub, GitLab, and Bitbucket.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Black Hat

Explosion - The Hidden Mines in the Android ION Driver

Uncover vulnerabilities in Android's ION driver, explore root causes, and learn how to achieve privilege escalation. Gain insights into preventing similar security issues in the Android ecosystem.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk