Penetration Testing Linux - Exploit

 

Cybersecurity Demo

Penetration Testing Linux - Exploit

In this online, instructor led training course students will get a hands-on feel for penetration testing. The instructor goes through many of the tools available through demonstrations allowing you to better understand how exploits work and what exploits you and others can utilize. This course will be useful for any students who are wanting to do penetration testing in the real world.

Instructor:

Alex Achs

Course Information

Skills Learned

  • Introduction to MITRE
  • Watering hole attacks
  • SSL Strip
  • Buffer overflows
  • Web exploits
  • SQL injection
  • MiTM
  • Spearphishing

Who Should Attend This Course

Network Admins, Security team members, risk managers, and IT directors

Prerequisites

None, but we recommend that students have a working knowledge of logical and physical network architectures, networking components, and TCP/IP.

Course Outline

What is MITRE
Drive-by compromise

  • What is it?
  • Watering hole attacks
    • SETookit – Clone websites
  • Malicious advertisements
  • SSLStrip

Exploit public-facing application

  • Use of software, data, or commands to take advantages of weaknesses
  • Buffer overflows
    • FuzzDB
  • Web exploits
    • Enumeration – Nikto
    • Enumeration – OWASP ZAP
    • Enumeration – Burp
    • WPSploit
    • FIMap
    • Kadabra
    • Liffy
  • SQL injection
    • SQLmap
    • SQLninja

Hardware additions

  • Computer accessories, computers, or networking hardware may be introduced into a system as a vector to gain exexution
  • Wifi Pineapple
  • MiTM
    • Responder
    • DNSChef
    • MiTMProxy
    • Morpheus
    • SSH MiTM
    • Ettercap
    • Bettercap
  • MiTM wireless
    • Aircrack-ng
    • Wifiti
    • MANA Toolkit

Replication through removable media

  • Rubber ducky

Spearfishing attachment

  • Unicorn

Spearfishing Link

  • GoPhish, Phishing Frenzy, SET
  • Domain monitoring

CLASS START DATES



Are you a student and need support?

Don’t see the class you’re looking for?

Get a demo or pricing!

Call (800) 850-9932 or submit this form to get pricing for you or your team.

We absolutely love being able to tailor the StormWind training experience to you and your goals. Simply provide us with a little bit of upfront info and we’ll get to work on customizing learning packages for you—at a price you just can’t resist.