Training Plan

• Day 1
  • Setting up OS Hardening with custom scripts, which would demonstrate what changes are made so that participants can visualize their scope.
  • Learning core concepts like Reg/filesystem permissions, user roles & privileges, process inheritance, cross ownership, etc.& getting familiar with commands which would be used during the entire session.
  • Win11 KIOSK Bypass techniques to access restricted windows components like creds. manager, certificate store, registry, filesystem, etc.
  • Group policies and Registry restriction bypass
  • Various techniques to access command prompt / powershell when blocked via sys. Admin in Win11
  • Win11 UWF (unified write filter) bypass techniques
  • Accessing restricted Control Panel components in Win11
  • Working with deploying multiple 3rd party KIOSK/Hardening endpoint protection apps. And exploiting multiple vulnerabilities which undergone CVD.
  • Creating Shell Explorer by self and designing KIOSK to understand the nature of Winlogon while hardening.
  • bcdedit, insecure boot to evade DLP/EP software/KIOSK
  • Few techniques via which DLP can be bypassed being non-admin standard user or admin user, leaving no traces.
  • Gaining Command execution via compiling binaries, using other platform binaries, extension precedence rule, shortcuts, task scheduler, ActiveXObject, etc..
  • Creating reverse shell executables and managing remote connections for persistence.
• Day 2
  • Multiple Applocker restriction rules and various bypass techniques
  • Understanding design restrictions for Administrator vs System, followed by leveraging multiple techniques to gain system privilege and get execution of restricted components.
  • Writing rules to Allow list of apps via directory – path – signature. And bypassing all those 3 techniques.
  • Using ReactOS to evade signature based app restriction
  • Understanding UAC & identifying various bypass techniques
  • Understanding Windows controlled folder access and it’s misconfigurations
  • Various techniques to uninstall security providing EPM application (e.g. antivirus, DLP, remote administration, etc.) in restricted environment
  • Gaining access to admin via exploiting various EPM apps
• Day 3
  • Introduction to Smart AI Kiosks and usage scenarios
  • Architecture of Smart AI Kiosk & comparison with Vanilla Kiosk architecture
  • Identifying attack surfaces and fingerprinting
  • Frameworks for Navigating Security Challenges in AI systems
  • Tactics and Techniques in Adversarial Prompting
  • With various examples Squeezing out valuable information from the target
  • Controlled Intelligence: Guardrails in Action
  • Overview of Intelligent agents in Smart AI Kiosk and leveraging that for evasion
  • Post bypassing OS Hardening various techniques of Privilege escalation like extension precedence, misconfigured service parameters, token priv., dll preloading, unquoted service path, cmdkey, tasks, Reg hive dump, always elevated, startup, etc.
  • Practice & summarize all items learnt