Duration
4 days
Module 1: Network Security – Overview
- Information Security Overview
- Case Study
- Latest Network Breaches
- Market strategy for Network security professionals
- Identify Information Security Attack Vectors
- Vulnerability Assessment Vs Penetration Testing
- Trends in Networking
- Cyber Law in the Country
- Penetration Testing Process
- Security Wheel
Module 2: Network Basics & Protocols Analysis
- Network Models
- Network Devices
- Switch, Router, Cables
- Networking Protocols
- Transmission Control Protocol (TCP)
- TCP header
- TCP Communication Flags
- Internet Control Message Protocol (ICMP)
- Internet Group Management Protocol (IGMP)
- Dynamic Host Configuration Protocol (DHCP)
- User Datagram Protocol (UDP)
- Domain Name Service (DNS)
- Miscellaneous
- LDAP, Telnet, FTP, TFTP, SMTP, POP, IMAP, SNMP, VoIP, SIP, HTTP, HTTPS
Module 3: Information Gathering & Network Scanning
- Passive Information Gathering
- Open Web Information Gathering
- Google Hacking Database (GHDB)
- Information Gathering Using Google Advanced Search
- Shodan Search Live Machines
- Email Harvesting
- Netcraft
- Whois Enumeration
- Recon-ng
- Nslookup, Host
- Active Information Gathering
- Scanning Techniques
- TCP Connect / Full Open Scan
- Stealth Scan (Half-open Scan)
- Inverse TCP Flag Scanning
- Xmas Scan
- ACK Flag Probe Scanning
- IDLE/IPID Header Scan
- IDLE Scan: Step 1
- IDLE Scan: Step 2 and 3
- UDP Scanning
- ICMP Echo Scanning/List Scan
- OS Scan
- Version Scan
- Banner Grabbing
- Network Enumeration
- DNS Enumeration
- NetBIOS Enumeration
- Enumerating User Accounts
- Enumerating Shared Resources Using Net View
- SMB Null Session
- SNMP Enumeration
- Daytime Enumeration
- Telnet/FTP/SSH/RDP Enumeration
- Web Directory Enumeration
- NTP Enumeration
- SMTP Enumeration
- Modbus Enumeration
- NFS Enumeration
Module 4: Network Security Threats & Exploitation
- Operating System Vulnerabilities
- Windows OS Vulnerabilities
- Linux OS Vulnerabilities
- Live Demo
- Third-party service or Software vulnerability
- 0Day Attacks
- Attacking Vulnerable Application
- Live Demo
- Configuration Flaws
- Device Misconfiguration
- Web Application Misconfiguration
- Server Misconfiguration
- Live Demo
- Social Engineering
- Creating and Crafting a malware
- Social Engineering Tool Kit (SET)
- Bypassing Windows Firewall
- Live Demo
- Transport Layer Vulnerabilities
- SSL penesting
- Man In the Middle Attack (MiTM)
- Shellshock
- Heartbleed
- Sweet32 Attack
- Weak Cipher Vulnerabilities
- Live Demo
- Other Internet & network threats
- DOS Attack and Analysis
- ARP Poising and Analysis
- Email Spoofing
- DNS Poisoning
- MAC Spoofing
Module 5: Post Exploitation
- SNMP post exploitation with Nmap NSE, onesixtyone, Snmpwalk
- Https tunneling
- Windows Pivoting
- Privilege Escalation
- Windows and Linux
- Covering Tracks
- Metasploit Psexec and Hash Dumping
- Metasploit Pivoting and Mimikatz Kiwi for Credential Harvesting
- PowerShell to Increase Capabilities
Module 6: Application Security
- Web Application Architecture
- Cookies
- HTTP Proxies
- State and Sessions
- SQL Injection
- Login Bypass
- Error Based
- Union Based
- Blind Sql Injection
- Boolean Based Sql Injection
- Time Based Sql Injection
- Cross Site Scripting
- Cross Site Request Forgery (CSRF)
- HTTP Parameter Pollution Attack
- Command Injection
- File Upload Attack
Module 7: E-Mail Security
- Email Message Format
- Email Header Analysis
- SMTP Relay Testing
- E-mail security program
- Policies & standards
- Secure Email Server Architecture
Module 8: Infrastructure Security
- Intrusion Detection System (IDS) and Intrusion Prevention System (IPS)
- Configuring Snort IDS/IPS
- Network Intrusion Detection System (NIDS)
- Wireless Detection System
- Various Detection Techniques
- Firewalls
- Packet-Filtering Firewalls
- Circuit-Level Firewalls
- Application-Level Firewalls
- Setting up pfSense to configure as router and firewall
- Honey Pot
- Demo with HoneyBot
- Hardening Operating Systems & Patch Management
- Hardening Physical Security
- Virtual Private Network
- VPN Security Testing
Introduction
- Bands, Channels and Sniffing
- Pwning Beacon Frames
- Dissecting Ap-Client Connection
- Dissecting Wlan Header
- Laughing Off Mac Filter
- Hotspot Attack
- Man-in-the-middle attacks
- WEP Cracking
- ARP poisoning
- Wired Equivalent Privacy (WEP)
- WPA-PSK and WPA-Enterprise
- WPA 2
- WEP vs WPA vs WPA2
Module 10: Incident Response
- Incident response process
- Handling an Incident
- Case Scenario
- Incident Analysis
- Log Analysis
a. Server, FTP, Event Logs, Router Logs
Module 11: Cryptography
- Objectives of Cryptography
- Types of Cryptography
- Government Access to Keys (GAK)
- Encryption Algorithms
- Advanced Encryption Standard (AES)
- Data Encryption Standard (DES)
- RC5, RC6
- Message Digest Function: MD5
- Secure Hashing Algorithm (SHA)
- Secure Shell (SSH)
- Public Key Infrastructure (PKI
- Digital Signature
- Cryptography Attacks
Programme scope, delivery arrangements and suitability are confirmed during enquiry.