PEN-300: Evasion Techniques and Breaching Defenses (OSEP)

Study memory management, process scheduling, file systems, and other essential OS components, gaining a solid foundation for understanding and exploiting vulnerabilities

Focus on leveraging known vulnerabilities in Microsoft Office applications to craft malicious documents that trigger code execution on a victim’s machine, gaining unauthorized access and control

Master the art of stealth and persistence by injecting malicious code into legitimate running processes, migrating between processes to evade detection and maintain control when processes are terminated

Create malware that goes undetected with basic techniques like obfuscation and packing to bypass and evade antivirus software

Use advanced methods like signature-based and heuristic-based evasion to create malware that goes undetected by complex antivirus solutions

Bypass security measures intended to restrict the execution of unauthorized software

Gain access to restricted resources and networks with different techniques for bypassing network filters and firewalls

Navigate file systems, manipulate user accounts, extract sensitive information, and establish persistent backdoors on compromised Linux systems

Navigate file systems, manipulate user accounts, extract sensitive information, and establish persistent backdoors on compromised Windows systems

Break out of restricted kiosk environments like ATMs or point-of-sale terminals to gain control of their operating systems

Use different methods and techniques to extract valuable credentials like passwords and hashes from Windows systems

Exploit trust relationships, leverage vulnerabilities in services and protocols to gain access to systems throughout a compromised Linux network

Attack vulnerabilities in Microsoft SQL Server databases to extract sensitive data, escalate privileges, and gain control over entire systems

Exploit vulnerabilities in Active Directory to compromise domains in Windows networks

Combine multiple exploits, techniques, and tools to create complex, multi-stage attacks to bypass multiple layers of security

Apply your knowledge and skills in challenging, real-world scenarios with complex network environments, hardened security measures, and realistic attack scenarios