null Bangalore Humla 31 October 2015 Exploiting Windows Environments Register

Null offensive hacking hands-on training.

Proposed sessions for this event:

• Exploiting Windows Environments by Riyaz Walikar

Exploiting a web vulnerability to get a limited user shell
- web app vulnerability to shell
- shell to msf reverse meterpreter

MSF post exploitation techniques
- getsystem()
- post/windows/gather/*

Local privilege escalation techniques with access
- DLL preloading
- Abusing Windows services
- Procdump and mimikatz in minidump context mode

Local Admin to Domain Admin
- hash passing/spraying
- Impacket tools (wmiexec, secretsdump.py)
- obtaining hashes from ntds.dit
- Shell as Domain admin