WEBVTT

00:00:01.740 --> 00:00:02.580
Before we go,

00:00:02.580 --> 00:00:05.120
I want to share with you a few more resources in case you

00:00:05.120 --> 00:00:08.350
want to learn more about SharpUp and privilege escalation.

00:00:08.350 --> 00:00:12.660
First, and most important, check out the official documentation from SharpUp.

00:00:13.240 --> 00:00:16.980
In this course, we'll cover just two privilege escalation techniques, but the

00:00:16.980 --> 00:00:20.830
reality is that SharpUp has several other modules like cached password

00:00:20.830 --> 00:00:24.160
enumeration, path injection vulnerabilities, and much more.

00:00:25.340 --> 00:00:28.400
Remember, this tool can test up to 13 different privilege

00:00:28.400 --> 00:00:31.240
escalation techniques, so it might be a good idea checking

00:00:31.240 --> 00:00:32.759
out the other modules of this tool.

00:00:33.840 --> 00:00:36.630
Also, if you want to improve your privilege escalation skills,

00:00:36.640 --> 00:00:41.530
I do recommend you two courses here at Pluralsight. First, Privilege

00:00:41.530 --> 00:00:44.690
Escalation with Rebeus in which you'll learn how to perform a

00:00:44.690 --> 00:00:48.180
Kerberoasting attack, which is one of the most effective ways of

00:00:48.180 --> 00:00:50.060
getting admin accounts in a domain.

00:00:51.140 --> 00:00:55.020
Also, I do recommend you checking out the course called Post Exploitation

00:00:55.020 --> 00:00:59.020
with Meterpreter in which we'll cover how to escalate your privileges using

00:00:59.020 --> 00:01:03.380
Metasploit and Meterpreter. Also, if you're wondering how you can protect

00:01:03.380 --> 00:01:06.610
your company against those privilege escalation techniques that we discussed,

00:01:06.620 --> 00:01:11.060
I have a few suggestions for you. First, adopt strong security practices in

00:01:11.060 --> 00:01:12.050
your IT environment.

00:01:12.740 --> 00:01:15.900
All the techniques that we're discussing here are only possible because

00:01:15.900 --> 00:01:19.890
the administrator had done a bad job at hardening the systems. Having

00:01:19.890 --> 00:01:22.740
high security standards will make your servers not vulnerable to the

00:01:22.740 --> 00:01:24.060
techniques that we're discussing here.

00:01:25.040 --> 00:01:28.760
Also, it is a good idea having a strong endpoint protection tool,

00:01:29.140 --> 00:01:32.510
especially the ones that are able to detect malicious behavior instead of

00:01:32.510 --> 00:01:36.650
malware signatures. In this way, you'll be able to detect most of the

00:01:36.650 --> 00:01:38.750
privilege escalation techniques that we are discussing here.

00:01:40.640 --> 00:01:41.420
So that's it.

00:01:41.430 --> 00:01:44.190
That's the end of our SharpUp course. I hope you enjoyed

00:01:44.190 --> 00:01:46.560
this course and that now you have one more privilege

00:01:46.560 --> 00:01:48.460
escalation technique in your skillset.

00:01:49.040 --> 00:01:51.950
So, thank you for watching, and I will see you in the next course.