Week 6

💻Lab Exercise💻

Post-Exploitation and Local Privilege Escalation Operations

⭐Objective⭐

• Students will simulate a Red Team operation involving initial access, reconnaissance, data exfiltration, and local privilege escalation. The exercise requires students to document their methodology in a formal penetration testing report and articulate the technical weaknesses exploited during eaach phase.

• For screenshots, do not piece together long output. Generally, showing the command and the first few lines of output is sufficient.

🌲Phase 0🌲

⭐Objective⭐

• Create and explain the options used to create a RAT and set up a listener.

Phase 0

🌲Phase 1🌲

⭐Objective⭐

• Establish a foothold on the Windows 10 target as the user champuser. Students must choose one of two distinct access vectors to deploy a Remote Access Trojan (RAT).

Phase 1

🌲Phase 2🌲

⭐Objective⭐

• Perform comprehensive reconnaissance on the Windows 10 host using a mix of Meterpreter modules and custom scripting.

Phase 2

🌲Phase 3🌲

⭐Objective⭐

• Exfil the consolidated log file using a protocol other than HTTP/HTTPS to evade standard network monitoring. Note, other than HTTPS doesn’t mean you can’t use OpenSSL/TLS.

Phase 3

🌲Phase 4🌲

⭐Objective⭐

• Identify a local vulnerability, exploit it to gain SYSTEM privileges, and verify access from the attacker's machine.

Phase 4

🌲Phase 5🌲

⭐Objective⭐

• Analyze Windows Sysmon logs to identify all executions related to this exercise and assess detection coverage.

Phase 5