Windows Privilege Escalation

Credential harvesting

Chapter 8 of 10 · Windows Privilege Escalation 80%

🔓 Mimikatz in the 2017 NotPetya attack caused $10B+ in damage - could you dump LSASS without triggering Defender?

LSASS holds plaintext passwords, NTLM hashes, and Kerberos tickets in memory. sekurlsa::logonpasswords is just the start. SAM dumps, comsvcs.dll, and pass-the-hash complete your credential toolkit. 🗝️

Premium Chapter

Create a free account to access this chapter and start learning with hands-on labs.

Create Free Account

Join 7,000+ cybersecurity learners

Ready to track your progress?

Create a free account to save your progress, earn XP, and access 170+ hands-on cybersecurity labs.

Start Learning Free

Course Progress

Track your learning journey

0 /10
0 % Complete
10 Remaining
Course Chapters

No chapters found for this filter

13,000+ Hackers 100+ Labs & Courses Free
Start Hacking Free