Path 16: Advanced Cyber Topics — KashSec Academy

Linux/Windows privesc, Active Directory, cloud, containers, malware, DFIR. 26 free lessons, advanced level, starting with "Linux privilege escalation"

Level: Advanced · 26 lessons · Free, no account needed.

Lessons in this path

  1. Linux privilege escalation — GTFOBins, SUID, capabilities, LinPEAS.
  2. Linux privesc tools, deep dive — Reading LinPEAS output and using GTFOBins correctly.
  3. Windows privilege escalation — Services, tokens, Potato family.
  4. Windows privesc tools, deep dive — WinPEAS, access tokens, and how Potato exploits work.
  5. Active Directory attacks — BloodHound, Kerberoast, Golden Ticket.
  6. Kerberos attacks, deep dive — The protocol mechanics behind Kerberoasting and AS-REP Roasting.
  7. AD persistence & detection — DCSync, Skeleton Key, and how defenders actually catch it.
  8. Cloud security — AWS/Azure/GCP, IAM, IMDS, flAWS lab.
  9. IAM, deep dive — Policy anatomy, privilege escalation, and iam:PassRole.
  10. Containers & Kubernetes — Docker sockets, RBAC, service tokens.
  11. Kubernetes attack paths — Chaining one pod compromise into full cluster control.
  12. Malware analysis basics — Static & dynamic in a safe VM.
  13. Malware persistence mechanisms — Run keys, scheduled tasks, and DLL hijacking.
  14. Digital forensics & IR — NIST 800-61, Sysmon, Volatility.
  15. Threat hunting fundamentals — Hypothesis-driven hunting with MITRE ATT&CK.
  16. Advanced career paths — Where to specialise, and why.
  17. Cloud Security Lab — Get hands-on with common cloud misconfigurations.
  18. Containers & Kubernetes Lab — Practice container security basics.
  19. DevSecOps Lab — Integrate security into the development lifecycle.
  20. Digital Forensics & IR Lab — Practice basic incident response and forensics.
  21. Malware Analysis Lab — Get started with basic malware analysis in a safe environment.
  22. Practical Linux Privilege Escalation Lab — Get hands-on with real privesc techniques in a safe environment.
  23. Purple Teaming Lab — Learn to combine red and blue team perspectives.
  24. Threat Hunting Lab — Learn proactive detection instead of just reacting.
  25. Threat Modeling Lab — Learn to systematically find risks before attackers do.
  26. Windows Privilege Escalation Lab — Practice common Windows privesc techniques.