CSTP Ethical Hacking: Hands-On 2

7Safe
Sawston, Cambridge, United Kingdom

Course Format: Classroom | E-learning | Virtual Class | Online | On-site | Blended | Self-paced

Course Description:

'' In this 2-day ethical hacking training course, you will build on the knowledge gained in CSTA Ethical Hacking: Hands-On, using the frameworks & tools used by professional penetration testers to: audit & compromise system security, assess weaknesses in web applications, hijack sessions to steal users¡¯ online identities and more.
Benefits
Highlights of this practical ethical hacking training course:
Live penetration testing following course case scenarios
Hands-on use of frameworks & tools such as Metasploit, Core Impact, BackTrack & Acunetix WVS
Remote registry hacking & silent RAT installation
XSS severity & attacks
Browser & e-mail client hacking techniques
Dynamic payload generation
Covers Windows & Linux operating systems
Prerequisites
Experience with Microsoft Windows & Linux/UNIX operating systems is desirable. Prior attendance of the CSTA Ethical Hacking: Hands-On training course is strongly recommended.
Course content includes:
Lab Installation & Course Scenario
Configuring BackTrack & XP Attack Environments
Configure Linux, Windows 2003 Server & XP Victim Environments
Hacking the Core Infrastructure
Nikto & Nessus 3 auditing revision
Understanding the Metasploit Framework
Modular payloads
Stealthy VNC installation
VNC local setup
Re-establishing command line access
Uploading UltraVNC files & embedding the password
Connecting to VNC server
Launching Metasploit¡¯s Meterpreter
Using the Process Extension
Using the Sys Extension
Using Core Impact
Setting up Core¡¯s Workspace
Information Gathering with Core
Attack and Penetration with Core
Local Information Gathering
Privilege Escalation & Clean Up
Report Generation
Hacking Web Applications
Vulnerability Assessment using Acunetix WVS
Security Audit Reports
HTTP Request & Response Modification
Information gathering
Setting up Paros proxy
Modifying form data
The Structured Query Language (SQL)
Getting started
Using the SELECT statement
Using the WHERE clause
Using the UNION SELECT statement
SQL injection with UNION SELECT
Using Paros to reveal the address bar
Investigating the Web Application
Bypassing Authentication using SQL injection
SQL injection & Stored Procedures
Adding an MS SQL user account
Testing the MS SQL user account
Digging deeper with extended stored procedures
Rooting the box
Client-side Attacks
Dictionary Attack using Acunetix WVS
Setting up Acunetix
Executing dictionary attacks
E-mail Spoofing
Finding a Cross-Site Scripting (XSS) vulnerability
Testing for an XSS vulnerability
Stealing Login Credentials using XSS
Exercise 4-05: Session Hijacking and Cookie Theft
Building attack strings
Phishing for session cookies
HTTP Hijacking
Recovering POST Data & ASP.NET Trace
Session Hijacking
...''

Phone:+44 (0)870 600 1667

School Address:

Unit L, South Cambridge Business Park
Sawston, Cambridge CB22 3JH
United Kingdom


Jobs & Resumes: Sawston
Houses & Roommates: Sawston

CSTA Ethical Hacking: Hands-On
CFIA Forensic Artefacts: Hands-On
Hacking Insight for Managers
ISO 27001 Fundamentals
Implementing ISO 27001
ISO 27001 Lead Auditor
WiFi Security
PCI Fundamentals

Notice: The course description on this page was captured from the Internet as historical reference or submitted by visitors. It was archived statically and not updated from day to day.
 

Tips: Try the search form on top of each page to find the latest course information, using course topic and location as keywords. Keep the course topic keyword short to get more results.