Your course

IT infrastructure is more complex and dynamic than it’s ever been, demanding comprehensive, modern, and well-rehearsed security skills to match. Join this hands-on, 3-day course to develop a strong baseline in infrastructure hacking and widen your career prospects. Get your hands dirty with our popular virtual labs and learn from experienced, practicing penetration testers with a legacy of training at Black Hat.

Who it’s for

Students and graduates: improve your employability and enhance your CV
Infrastructure penetration testers (1-2 years’ experience): build up your ability with the guidance of experienced pentesters and researchers
Penetration testers in other fields (e.g., web, mobile): develop your infrastructure hacking skills and knowledge
Network admins: understand how your environment could be attacked
SOC analysts and engineers: develop your awareness of potential indicators of compromise (IoCs) and more complex malicious behaviors
Security/IT managers and team leads: update your knowledge of the threat landscape

This course is designed to help individuals bring their proficiency in infrastructure hacking and defense up to the industry baseline. It’s a foundation course that can lead on to our Advanced courses after a year or more spent using your new skills out in the wild.

Delegates must have the following to make the most of the course:

Basic knowledge of infrastructure application security (at least 1 year experience)

Basic familiarity with common command line syntax

Top 3 takeaways

The ability to find and exploit vulnerabilities and other weaknesses in different infrastructure environments
Knowledge of how to apply the leading industry infrastructure security standards and approaches
Time spent with experienced, practicing penetration testers who can answer your questions

What you’ll learn

This course uses a Defense by Offense methodology based on real world offensive research (not theory). That means everything we teach has been tried and tested on live environments and in our labs and can be applied once the course is over. By the end, you’ll know:

Everything you need to about the risks associated with various infrastructure-based vulnerabilities
How to think and behave like a real threat actor
How to exploit vulnerabilities seen recently in the wild, as well as older but still prevalent vulnerabilities
The fundamental principles of infrastructure hacking
How to identify a list of IPs in your network all the way up to getting system level access on the domain controller.

What you’ll be doing

You’ll be learning hands on:

Spending most of the session (~80%) on lab-based exercises
Using lab-based flows to explore and hack lifelike infrastructure environments
Trying out different hacking techniques to exploit common infrastructure misconfiguration
Discussing the real-world impact of the hacks covered with the course trainer

Why it’s relevant

Infrastructure security must move at the incredible speed of software development, cloud innovation, and workplace evolution to remain relevant and useful. What’s needed is a thorough, contextual understanding of how and why your architecture and systems get targeted by threat actors, which are at risk, and what happens when those attacks succeed. Our Basic Infrastructure Hacking course provides delegates with this knowledge and more, by providing them with an up-to-date arsenal of basic offensive testing and remediation skills.

Infrastructure Hacking - Live Online Training