PHAdventures With Applocker, Clm, Uac
Published 6/2026
Created by Naga Sai Nikhil
MP4 | Video: h264, 1920x1080 | Audio: AAC, 44.1 KHz, 2 Ch
Level: Beginner | Genre: eLearning | Language: English | Duration: 14 Lectures ( 1h 30m ) | Size: 1.1 GB
Learn Red Teaming Techniques
What you'll learn
Learn how to setup applocker Learn how to bypass applocker policies Learn how to bypass Constrained Language Mode Learn how to bypass LAPSRequirements
Basics of cybersecurity are requiredDescription
This course is a practical deep dive into Windows application control bypasses, privilege escalation techniques, and defensive security evasion methods commonly encountered during red team operations, penetration testing, and adversary simulation engagements. Students will learn how Windows security mechanisms such as AppLocker, Constrained Language Mode, User Account Control (UAC), AMSI, and LAPS work internally, and how attackers attempt to bypass them in real-world environments
The course begins with setting up and understanding AppLocker policies, followed by techniques for enumerating existing AppLocker rules and identifying weak or misconfigured policies. Students will then explore multiple bypass strategies including abusing default rules, leveraging VSTO files, bypassing file hash conditions, and executing payloads through trusted LOLBins such as InstallUtil and MSBuild.
The training also covers bypassing PowerShell Constrained Language Mode using downgrade attacks and spawning unrestricted PowerShell processes. In the UAC bypass section, students will analyze auto-elevated binaries, abuse the well-known fodhelper technique, and learn how attackers modify public exploits to evade Microsoft Defender detections. Additional topics include AMSI bypasses through patching AmsiScanBuffer, understanding Local Administrator Password Solution (LAPS), and even backdooring AdmPwd.PS.dll for persistence and credential access demonstrations.
Every topic is demonstrated with hands-on videos, code examples, and practical attack scenarios designed to help students understand both offensive tradecraft and defensive implications. This course is intended for ethical häçkers, red teamers, malware analysts, Windows security researchers, and cybersecurity students who want a deeper understanding of Windows security internals and enterprise bypass techniques
Who this course is for
Penetration Testers Red TeamersHomepage