Here are a couple of essential tips for the course!

## Clipboard

When you want to copy something to or from your Kali Linux workstation, you can find an arrow on the left side of the workstation that opens the NoVNC menu. You can use the clipboard from there.

![](sanity:image-67d5c884072a4d3ffdb1253547d270cbd1ec9186-1278x710-png)

---

## Wireshark

If you want to analyze network traffic sent by a tool, for example, with Wireshark, you can find it in the menu.

![](sanity:image-2049b86e929febbfb2e56fc2b506dbd63356bf2a-794x324-png)

Before starting the capture, set a capture filter that bypasses traffic to port 54204. This port is used for remote access to the workstation via VNC, so there is a lot of traffic. All other interesting traffic would drown in this VNC traffic.

![](sanity:image-92eab74604387d33ec3a16ed092cd5e7f4b055b3-1224x370-png)


Important tips for the course

Windows and Active Directory attacks and defense

Windows is widely used in the IT environments of numerous companies and educational institutions, and Windows networks are typically managed through an Active Directory domain.

In this course, we will explore the security of the Windows operating system and Active Directory from the perspectives of both attackers and defenders. Some of the tasks involve attacks, while others are hardening tasks.

The scope of the course (Windows, attack and defense) is quite broad. If one were to study it purely in theory, the course would be dull. On the other hand, without any theory, there would be no hacking because both attack and defense rely on understanding what is happening.

We chose, for these reasons, to implement the course using a scenario-based approach, where each section of the course deals with one "scenario" that may include a few attacks, a few tools, and a few hardenings to protect against the attacks.

The theory is covered in small pieces in practical context, always when necessary. Things are tried to be understood at the bit level in order to avoid the unfortunate phenomenon typical of such courses where the student knows how to try the psexec attack after obtaining the NTLM hash, but does not understand at all what the attack does and how it works (spoiler: psexec is based on the Service Control Manager RPC interface, which launches the desired command as a Windows service on the target server). Let's peek under the hood with Wireshark and dig into the source code of modules, for example, Metasploit.

This way, a comprehensive and theoretical topic will hopefully become fun and easily approachable step by step.

Are you ready to break into EvilCorp's corporate network?

The course does not require knowledge of Windows environments, but otherwise basic things like Linux, computer networks, nmap, etc. would be good to have. Welcome to the course!

This course is still under construction, more scenarios will be added.

This course is in BETA mode, please let us know if you come across any misaligned bits.

Fundamentals

Computer Networks

Important tips for the course

Learn to hack — start here