Home/Attacking systems/Module 06
OverviewStart here2 min

System Hacking

Passwords, privilege escalation and covering tracks.

10 units~84 minIntermediate levelDomain 3 of exam

About this module

This is where an attacker tries to get in and take over: cracking passwords, stealing or passing Windows hashes, and escalating from a normal user to full admin. It is the largest module. Everything here is taught defense-first — you learn what each attack is called (for the exam) and, just as importantly, how defenders detect and stop it.

What you will learn

  • Password cracking methods and attack types
  • NTLM, the SAM and where hashes live
  • Kerberos, and why salting matters
  • Vertical vs horizontal privilege escalation
  • Active Directory attacks (BloodHound, DCSync)
  • RCE, keyloggers, covering tracks and defenses

Module roadmap

01Password Cracking BasicsLesson 1 · ~5 min
02Windows Authentication & HashesLesson 2 · ~5 min
03Kerberos & SaltingLesson 3 · ~5 min
04Privilege EscalationLesson 4 · ~5 min
05Active Directory AttacksLesson 5 · ~5 min
06Executing Applications: RCE & KeyloggersLesson 6 · ~4 min
07Covering Tracks & How Defenders Catch ItLesson 7 · ~4 min
08System Hacking CountermeasuresLesson 8 · ~4 min
09Lab: Crack a Weak HashLab · ~40 min
10AssessmentAssessment · ~5 min

How to study: read a lesson → answer its 2 "Check yourself" questions → do the lab → pass the assessment with 80%+. Lessons 1, 2, 3 and 4 are the most tested. Practice only on your own lab VM.