brimstone / pen-300

Tracking my PEN-300 progress

Offensive Security PEN-300

Evasion Techniques and Breaching Defenses

Collection of resources used in prep for OSEP, including course material progress.

Extracurricular Prep and Resources

• Learning C#
  • https://github.com/mvelazc0/defcon27_csharp_workshop
  • https://cryptopals.com/
• Powershell
  • Accessing the Windows API in PowerShell via internal .NET methods and reflection
• AMSI
  • https://amsi.fail/
• Process Injection
  • BH 2019 Process Injection
• Talks, etc.
  • Move Aside, Script Kiddies by Joff Thyer
    • Great info on bypassing some defenses. I thought some of his AMSI info was good.

Course Progress

• Videos
• Read course content
• Complete all exercises
• Complete extra miles
• Complete labs

Syllabus

• 01 Evasion Techniques and Breaching Defenses: General Course Information
• 02 Operating System and Programming Theory
• 03 Client Side Execution With Office
• 04 Client Side Code Execution With Windows Script Host
• 05 Process Injection and Migration
• 06 Introduction to Antivirus Evasion
• 07 Advanced Antivirus Evasion
• 08 Application Whitelisting
• 09 Bypassing Network Filters
• 10 Linux Post-Exploitation
• 11 Kiosk Breakouts
• 12 Windows Credentials
• 13 Windows Lateral Movement
• 14 Linux Lateral Movement
• 15 Microsoft SQL Attacks
• 16 Active Directory Exploitation
• 17 Combining the Pieces
• 18 Trying Harder: The Labs