WEBVTT

00:00:01.180 --> 00:00:01.900
[Autogenerated] Hi there,

00:00:02.070 --> 00:00:06.160
my name is Rachel and pele and today we're going to take a look at a

00:00:06.170 --> 00:00:09.960
really awesome tool in this red team tools course,

00:00:10.720 --> 00:00:14.090
the tool that we will focus on enables us to perform privilege

00:00:14.090 --> 00:00:17.970
escalation and the tool is called privilege escalation,

00:00:17.980 --> 00:00:22.930
awesome scripts Sweet or Peas, N G for short.

00:00:23.530 --> 00:00:27.990
Within this course we're going to focus on Lynn pease which relates to

00:00:27.990 --> 00:00:33.020
privilege escalation and windows and we will focus on wind peas which

00:00:33.020 --> 00:00:35.800
relates to Windows privilege escalation.

00:00:36.240 --> 00:00:38.280
I am super excited to get started.

00:00:38.380 --> 00:00:42.190
So let's dive in before we dive into the actual tools.

00:00:42.290 --> 00:00:44.300
I would like to spend a couple of minutes just

00:00:44.300 --> 00:00:48.570
talking about the privilege escalation, awesome script Sweet.

00:00:49.190 --> 00:00:52.990
This has been created by Carlos Palop so thanks a lot

00:00:53.000 --> 00:00:54.710
for creating this awesome tool.

00:00:55.180 --> 00:01:00.120
Essentially the PSN G suite consists of a number of different tools

00:01:00.130 --> 00:01:03.280
specifically focused for each operating system.

00:01:03.900 --> 00:01:08.550
These tools go ahead and search for possible privilege escalation

00:01:08.550 --> 00:01:11.140
parts and as you will see in the demonstration,

00:01:11.430 --> 00:01:14.640
it actually prints all of these checks to the console,

00:01:14.910 --> 00:01:19.600
allowing you to easily identify the various privileged escalation parts

00:01:19.640 --> 00:01:23.610
that exist and it prints it out in really awesome colors.

00:01:23.770 --> 00:01:25.760
So as we look at the suite itself,

00:01:26.270 --> 00:01:29.790
this can be downloaded from github and within the suite you

00:01:29.790 --> 00:01:33.950
can also go ahead and download a specific version either Lynn

00:01:33.950 --> 00:01:37.010
Pease WinPE or the one for Mac OS.

00:01:37.340 --> 00:01:41.680
So what makes this tool so special Well think about a Red team

00:01:41.680 --> 00:01:45.420
assessment during the assessment you would obviously need to

00:01:45.420 --> 00:01:48.360
escalate your privileges in order to do that.

00:01:48.420 --> 00:01:50.500
You may need to look at different things.

00:01:50.910 --> 00:01:53.980
Execute a bunch of different commands and so forth.

00:01:54.240 --> 00:01:55.490
By using the tool.

00:01:55.900 --> 00:01:59.650
You can easily identify all the different privilege escalation

00:01:59.650 --> 00:02:05.430
parts that exist allowing you to easily make use of them and save

00:02:05.430 --> 00:02:08.699
time now when it comes to the kill chain,

00:02:08.860 --> 00:02:12.680
this specific tool would fit in from the escalation phase

00:02:12.690 --> 00:02:17.350
onwards purely since it's focused on identifying various

00:02:17.360 --> 00:02:19.130
privilege escalation parts.

00:02:19.510 --> 00:02:22.910
So when we look at the miter attack metrics in this

00:02:22.910 --> 00:02:26.520
specific course we're going to focus on privilege

00:02:26.520 --> 00:02:29.980
escalation and specifically three tactics.

00:02:30.200 --> 00:02:33.850
And as we go through the demonstrations I will call out the various

00:02:33.850 --> 00:02:37.360
tactics that we will focus on during the demonstration.