Mon to Sat morning
7:30am to 5:00pm
Call Us
070 30 40 92 / 085 682 471
Penetration course provides offensive approach to perform security test on target boundary. The course will not instruct students on how to configure firewall and to proactive from security attack but to give students ability to attack the system infrastructures by acquiring hand-on skill on real-world cyber-security
- Write automated scripts and tools to help in penetration tasks
- Perform information gathering on various systems
- Service enumeration on system servers and web application
- Get familiar with various security tools
- Carry out client-side attack
- Identify vulnerability in web applications such as LFI, RFI, and SQLi
- Escalate user privilege level on systems using Kernel Exploits and Misconfigurations
- Use tunnel technique to bypass firewalls and restrictions
1.Introduction
1.1. Penetration Testing Overview
1.2. Course Objective
1.3. Building LAB Environment
2.Survival Skills
2.1. Linux Fundamental
2.2. Python Language Fundamental
2.3. Cryptography Fundamental
2.4. Penetration Testing Methodologies
3.Information Gathering
3.1. Passive Information Gathering
3.2. Active Information Gathering
3.3. Vulnerabilities Scanning
4.Exploitation
4.1. Finding Public Exploit
4.2. Exploiting the Target
4.3. Exploit File Transferring
4.4. Privilege Escalation
5.Metasploit Framework
5.1. Metasploit Basic
5.2. Information Gathering
5.3. Exploitation
6.Password Attacks
6.1. Password Dictionary
6.2. Online Password Attack
6.3. Hash Cracking
6. 7. Pivoting
7.1. Overview
7.2 Performing Pivoting
7.3 Port Forwarding with MSF
7.4 SSH Port Forwarding
7. 8. Web Application Security
8.1. Overview
8.2. Burp Suite
8.3. File Inclusion
8.4. Cross-site Scripting
8.8. SQL Injection
Knowledge of TCP/IP network and basic Linux skill are needed. Students are also recommended to be familiar with programming language.