|
|
|
You Will Learn How To
- Deploy ethical hacking to expose weaknesses in your organisation and select countermeasures
- Gather intelligence by employing reconnaissance, published data and scanning tools
- Probe and compromise your network using hacking tools to test and improve your security
- Discover how malicious hackers exploit weaknesses to "own" the network
- Protect against privilege escalation to prevent intrusions
- Evade antivirus software, firewalls and IDS
Course Benefits As network breaches become increasingly sophisticated, proactive defences are essential to counter malicious attacks. In this course, you learn to discover weaknesses in your network using the same mind-set and methods as hackers. You acquire the knowledge to systematically test and exploit internal and external defences. You learn countermeasures and how to reduce risk to your enterprise.
Who Should Attend Security consultants, Information Assurance auditors, firewall/IDS personnel, programmers, PCI security testers and those involved in cybersecurity measures and implementation. Security knowledge at the level of Course 468, " System and Network Security Introduction", and strong TCP/IP experience is assumed.
Hands-On Training Hands-on exercises model hacking methods and countermeasures, including:
- Preparing the hacker toolkit
- Executing advanced port scanning
- Linking vulnerabilities and exploits
- Determining the vulnerabilities of a network
- Performing injection attacks
- Predicting and hijacking Web sessions
- Poisoning DNS to lure clients
- Configuring and using the Metasploit Framework
- Defeating stateless firewalls, IDS and antivirus software
- Cloning a Web site and stealing passwords
Course Content Introduction to Ethical Hacking
- Defining a penetration testing methodology
- Creating a security testing plan
- Adhering to PCI standards
- Assembling the hacking tools
Footprinting and Intelligence Gathering
Acquiring target information
- Locating useful and relevant information
- Scavenging published data
- Mining archive sites
Scanning and enumerating resources
- Identifying authentication methods
- Analysing firewalls
- Harvesting e-mail information
- Interrogating network services
- Scanning from the inside out with HTML
Identifying Vulnerabilities
Correlating weaknesses and exploits
- Researching databases
- Determining target configuration
- Evaluating Vulnerability Assessment tools
Leveraging opportunities for attack
- Discovering exploit resources
- Attacking with Metasploit
Attacking Servers and Devices to Build Better Defences
Bypassing router access control lists (ACLs)
- Discovering filtered ports
- Manipulating ports to gain access
- Connecting to blocked services
Compromising operating systems
- Examining Windows protection modes
- Analysing Linux/UNIX processes
Subverting Web applications
- Injecting SQL and HTML code
- Hijacking Web sessions by prediction and fixation
- Bypassing authentication mechanisms
Manipulating Clients to Uncover Internal Threats
Baiting and snaring inside users
- Poisoning DNS
- Executing Cross-site scripting (XSS)
- Gaining control of browsers
Creating custom malware
- Harvesting client information
- Enumerating internal data
Deploying the Social Engineering Toolkit
- Cloning a legitimate site
- Diverting clients by poisoning DNS
- Delivering customised payloads to users
Exploiting Targets to Increase Security
Initiating remote shells
- Selecting reverse or bind shells
- Leveraging the Metasploit Meterpreter
Pivoting and island-hopping
- Deploying portable media attacks
- Routing through compromised clients
- Forwarding and redirecting ports
Pilfering target information
- Stealing password hashes
- Extracting infrastructure routing, DNS and NetBIOS data
Uploading and executing payloads
- Controlling memory processes
- Utilising the remote file system
Testing Antivirus and IDS Security
Masquerading network traffic
- Obfuscating vectors and payloads
- Side-stepping perimeter defences
Evading antivirus systems
- Falsifying file headers to inject malware
- Discovering the gaps in antivirus protection
Mitigating Risk and Next Steps
- Reporting results and creating an action plan
- Managing patches and configuration
- Recommending cybersecurity countermeasures
- Staying current with tools, trends and technology
|
<< Back to Security
Related Courses
|
|
Course Dates
UK Dates | | 17-20 Apr | London enrol | | 14-17 Aug | Edinburgh enrol | | 14-17 Aug | London enrol | | 4-7 Dec | Edinburgh enrol | | 4-7 Dec | London enrol | US East Coast Dates | | 21-24 Feb | Washington, DC enrol* | | 2-5 Apr | New York enrol* | | 24-27 Apr | Washington, DC enrol* |
*New York and Washington DC Courses – Available online with a run time of 2pm to 9pm BST. For AnyWare enrolments, please register at least 10 days prior to the start of the course.
More Dates and Locations.
|
|
|
|
On-Site &
Custom Training
Bring this or any Learning Tree course to your location or have it customised for your organisation.
|
Course participants analysing browser security.
|
|
Average Attendee Evaluation
|
Evaluations in the last 12 months |
|
5 stars:
|
|
87% |
|
4 stars:
|
|
13% |
|
3 stars:
|
|
0% |
|
2 stars:
|
|
0% |
|
1 star:
|
|
0% |
|
"The Learning Tree instructor I had was willing to come in early to work with you if you had questions or didn't grasp the material. That's a real plus".
– K. Upperman
NJVC
|
|
 |
|
E-mail 
Print 
Q&A 
PDF 
Facebook 
Twitter
