Privilege Escalation Courses and Certifications

Hack In The Box Security Conference

Privilege Escalation Using DOP in MacOS

Explore privilege escalation in MacOS using Data-Oriented Programming (DOP), a powerful exploit technique that leverages heap buffer overflow vulnerabilities for persistent attacks resistant to kernel code changes.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Black Hat

Unix Domain Socket - A Hidden Door Leading to Privilege Escalation in the Android Ecosystem

Explore Unix domain socket vulnerabilities in Android, revealing potential privilege escalation risks and security implications for third-party applications and vendor implementations.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Black Hat

Crashing Your Way to Medium-IL - Exploiting the PDB Parser for Privilege Escalation

Discover vulnerabilities in Windows PDB parser, learn exploitation techniques for privilege escalation, and explore the intricacies of memory corruption in DbgHelp.dll.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Cooper

Credential Assessment - Mapping Privilege Escalation at Scale

Explore privilege escalation techniques in large-scale breaches and learn how to identify and combat credential exposure using a comprehensive framework for both offensive and defensive purposes.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

IEEE

Android Custom Permissions Demystified - From Privilege Escalation to Design Shortcomings

Explore Android custom permissions, uncovering potential security vulnerabilities and design flaws while learning best practices for secure app development.

• YouTube
• 15 minutes
• On-Demand
• Conference Talk

DefCamp

Well, That Escalated Quickly! A Penetration Tester’s Approach to Privilege Escalation - DefCamp - 2018

Explore penetration testing techniques for privilege escalation, covering Windows systems, services, and common vulnerabilities. Learn practical approaches to identify and exploit security weaknesses.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Outside the Box - Breakouts and Privilege Escalation in Container Environments

Explore real-world container escapes and privilege escalation techniques in popular solutions like Docker and Kubernetes. Learn methodologies for assessing containerized environments and implementing secure configurations.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

The Rise of Potatoes - Privilege Escalation in Windows Services

Exploring advanced privilege escalation techniques in Windows services, including a new 0day NTLM relay attack. Covers recent methods, Windows Service Hardening, and the RemotePotato0 attack vector.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Privilege Escalation In Da House

Explore advanced privilege escalation techniques for penetration testing and security assessments, focusing on real-world scenarios and practical applications.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

DevSecCon

AWS Privilege Escalation and Lateral Movements in Cloud Security

Elevate cloud security skills: exploit vulnerabilities, escalate privileges, and navigate AWS environments using "nuvola" for comprehensive threat detection and mitigation strategies.

• YouTube
• 1 hour 23 minutes
• On-Demand
• Free Video

Black Hat

CertifiedDCOM - The Privilege Escalation Journey to Domain Admin with DCOM

Uncover a critical DCOM vulnerability allowing remote privilege escalation to Domain Admin in Windows networks. Learn about DCOM internals and exploit techniques for Active Directory takeover.

• YouTube
• 27 minutes
• On-Demand
• Free Video

DefCamp

A Methodical Approach to Privilege Escalation in AWS

Explore methodical AWS privilege escalation techniques with Senior Penetration Tester Eduard Agavriloae. Learn advanced cybersecurity strategies for identifying and exploiting vulnerabilities in cloud environments.

• YouTube
• 54 minutes
• On-Demand
• Free Video

Ekoparty Security Conference

AMD Sinkclose: Universal Ring -2 Privilege Escalation

Delve into AMD processor vulnerabilities and SMM security mechanisms, exploring a critical CPU design flaw that enables universal ring -2 privilege escalation through detailed methodology and engineering.

• YouTube
• 49 minutes
• On-Demand
• Free Video

DEFCONConference

Bypassing Intent Destination Checks - LaunchAnyWhere Privilege Escalation

Discover how the LaunchAnywhere Android vulnerability persists despite patches, using BadResolve technique to bypass intent destination checks and achieve privilege escalation.

• YouTube
• 47 minutes
• On-Demand
• Free Video

DEFCONConference

Conjuring Hardware Failures for Cross-ring Privilege Escalation

Discover how to exploit synthesized hardware failures to achieve privilege escalation, bypassing traditional safeguards and revealing new attack vectors across system architectures.

• YouTube
• 45 minutes
• On-Demand
• Free Video