Understand the techniques behind host-based security and bypass the most common security products in Windows operating systems.

This module provides the essential knowledge and fundamental techniques to bypass various host-based security solutions, including AV products, UAC and AppLocker, Logging, Runtime Detection, and AMSI. You will also learn the Living-Off-the-Land technique and how to leverage the Windows Sysinternals tool to perform various Red Team purposes.

Windows Internals

Learn and understand the fundamentals of how Windows operates at its core.

Introduction to Windows API

Learn how to interact with the win32 API and understand its wide range of use cases

Abusing Windows Internals

Leverage windows internals components to evade common detection solutions, using modern tool-agnostic approaches.

Introduction to Antivirus

Understand how antivirus software works and what detection techniques are used to bypass malicious file checks.

AV Evasion: Shellcode

Learn shellcode encoding, packing, binders, and crypters.

Obfuscation Principles

Leverage tool-agnostic software obfuscation practices to hide malicious functions and create unique code.

Signature Evasion

Learn how to break signatures and evade common AV, using modern tool-agnostic approaches.

Bypassing UAC

Learn common ways to bypass User Account Control (UAC) in Windows hosts.

Runtime Detection Evasion

Learn how to bypass common runtime detection measures, such as AMSI, using modern tool-agnostic approaches.

Evading Logging and Monitoring

Learn how to bypass common logging and system monitoring, such as ETW, using modern tool-agnostic approaches.

Living Off the Land

Learn the essential concept of "Living Off the Land" in Red Team engagements.

Topic Rewind Recap

Lock in what you learned with a recap. Earn points and keep your streak.

Need to know

Post Compromise

Learn about the steps taken by an attacker right after gaining an initial foothold on a network.

Next steps

Network Security Evasion

Learn how to bypass and evade different security solutions used in the industry, such as firewalls and IDS/IPS.

What are modules?

A learning pathway is made up of modules, and a module is made of bite-sized rooms (think of a room like a mini security lab).

Hierarchical diagram showing how learning pathways contain modules, which contain individual rooms.

Host Evasions