Privilege Escalation Part I Module

Description

This module covers the complete privilege escalation chain on Windows, from a standard user session to NT AUTHORITY\SYSTEM. You will learn two UAC bypass techniques targeting the auto-elevation mechanism, token impersonation to reach SYSTEM from an administrator context, kernel-level token theft using a BYOVD read/write primitive, and handle elevation abuse via a Microsoft-signed driver. Each technique is broken down from theory to working C++ implementation, with detection analysis included for every method. By the end of this module you will understand not just how each attack works, but why Windows is structured in a way that makes them possible