Before we go,
I want to share with you a few more resources in case you
want to learn more about SharpUp and privilege escalation.
First, and most important, check out the official documentation from SharpUp.
In this course, we'll cover just two privilege escalation techniques, but the
reality is that SharpUp has several other modules like cached password
enumeration, path injection vulnerabilities, and much more.
Remember, this tool can test up to 13 different privilege
escalation techniques, so it might be a good idea checking
out the other modules of this tool.
Also, if you want to improve your privilege escalation skills,
I do recommend you two courses here at Pluralsight. First, Privilege
Escalation with Rebeus in which you'll learn how to perform a
Kerberoasting attack, which is one of the most effective ways of
getting admin accounts in a domain.
Also, I do recommend you checking out the course called Post Exploitation
with Meterpreter in which we'll cover how to escalate your privileges using
Metasploit and Meterpreter. Also, if you're wondering how you can protect
your company against those privilege escalation techniques that we discussed,
I have a few suggestions for you. First, adopt strong security practices in
your IT environment.
All the techniques that we're discussing here are only possible because
the administrator had done a bad job at hardening the systems. Having
high security standards will make your servers not vulnerable to the
techniques that we're discussing here.
Also, it is a good idea having a strong endpoint protection tool,
especially the ones that are able to detect malicious behavior instead of
malware signatures. In this way, you'll be able to detect most of the
privilege escalation techniques that we are discussing here.
So that's it.
That's the end of our SharpUp course. I hope you enjoyed
this course and that now you have one more privilege
escalation technique in your skillset.
So, thank you for watching, and I will see you in the next course.