CSTA Ethical Hacking: Hands-On

7Safe
Sawston, Cambridge, United Kingdom

Course Format: Classroom | E-learning | Virtual Class | Online | On-site | Blended | Self-paced

Course Description:

'' This ethical hacking training course is a 3 day hands-on journey into the hacking mindset, examining and practically applying the tools and techniques that hackers use. The course is ideal for network administrators, security officers & crime prevention / protection officers and is designed to educate for the purpose of properly defending systems from hacking attacks.
Benefits
Highlights of this practical ethical hacking training course:
Target enumeration
Network scanning techniques
Vulnerability scanning
Session hijacking
Network mapping
Common UNIX and Windows vulnerabilities
Limitations of firewalls
Intrusion Detection System (IDS) evasion
Penetration testing
Privilege escalation
Trojan horses
Back doors & root kits
Prerequisites
A basic understanding of TCP/IP and a background in Microsoft Windows and/or UNIX is desirable.
Course content includes:
Lab Installation & Configuration
Configuring the Attack Environments
Installing the Tools
Install VMware Player & Workstation
Configuring the Linux & Windows Victim Environment
Communication Protocols
TCP/IP Overview
Launching Ethereal
Creating Traffic
Analysing Packet Capture
Cain & Abel Password Sniffing and MITM
Using ARP Poison Routing (APR)
Information Discovery
Using Dig, Host & nslookup
Configuring Sam Spade
Executing Queries
Crawling a Website
Performing a Zone Transfer
Target Scanning
Port Scanning with Nmap
TCP Connect Scanning
TCP SYN Scanning
UDP Scanning
Operating System Detection
Outputting Results to File
Launching & Using Amap
FTP Banner Grabbing
Telnet Banner Grabbing
SMTP Banner Grabbing
Configuring & Using Netcat
Web Server Banner Grabbing
Removing Banners
Changing Default Windows Banners
Vulnerability Assessment
Nikto ¨C Web Application Scanning
Scanning an IIS Web Server (Windows)
Scanning an Apache Web Server (Linux)
Vulnerability Assessment with NeWT/Nessus3
Scanning a Windows Machine
Scanning a Linux Machine
Exploiting Windows
Creating a Null Session
Viewing Network Shares over a Null Session
Enumerating the Target using Dumpsec
Enumerating the Target using Enum
Closing the Null Session
Changing the Password Policy
Restricting Enumeration over TCP Port 139
Disabling File & Print Sharing (Very Restrictive)
Changing the RestrictAnonymous Value
Circumventing RestrictAnonymous
Using Userinfo
Renaming the Administrator & Guest Accounts
Finding the Administrator Account
Establishing Open Ports
Establishing the Remote Machine Name
Establishing a Remote User Account
Establishing a Remote User Account SID
Establishing the Administrator and Guest Account Name
Using the Retrieved Account Name with Userinfo
Using Cain & Abel to Enumerate Users
Exploiting the IIS ISAPI DLL Buffer Overflow
Preparing Netcat Listeners
Executing the Jill Exploit
Windows Plug-and-Play Service Remote Overflow Exploit
Web Server Directory Traversal
Exploiting Unicode on IIS
Executing the Unicodeloader.pl Exploit
Uploading Tools
Preparing & Executing Netcat Back Channels
Escalating Privileges using IISCrack
Creating a Netcat Back Channel with Greater Privileges
Password Extraction and Cracking
Running Pwdump2
Cracking Passwords with Cain & Abel
Remote Password Extraction
Running Pwdump4
Exploiting UNIX
OpenSSL Weakness & Exploit
Compiling Exploits
Testing For Vulnerability
Exploiting OpenSSL
Using Netcat to Upload Exploits
Compiling the Exploit
Transferring the Exploit using Netcat
Escalating Privileges
Grabbing the Password Files
Closing Down Sessions
Cracking UNIX Passwords
Using John the Ripper
Connection Laundering with Netcat
Configuring Netcat Relays
Trojans, Backdoors & Rootkits
Working with Trojans
Configuring the Client GUI
Deploying a Backdoor
Using the GUI
...''

Phone:+44 (0)870 600 1667

School Address:

Unit L, South Cambridge Business Park
Sawston, Cambridge CB22 3JH
United Kingdom


Jobs & Resumes: Sawston
Houses & Roommates: Sawston

CFIA Forensic Artefacts: Hands-On
CSTP Ethical Hacking: Hands-On 2
Hacking Insight for Managers
ISO 27001 Fundamentals
Implementing ISO 27001
ISO 27001 Lead Auditor
WiFi Security
PCI Fundamentals

Notice: The course description on this page was captured from the Internet as historical reference or submitted by visitors. It was archived statically and not updated from day to day.
 

Tips: Try the search form on top of each page to find the latest course information, using course topic and location as keywords. Keep the course topic keyword short to get more results.