***Ticket information: please note the course price includes VAT***

If you want to understand how criminals run hacking campaigns, and emulate them, this course is for you.

This is our introductory course for those starting the journey into penetration testing or those working in environments where understanding how hackers think and the tools, tactics and techniques they use. The course presents the background information, technical skills and basic concepts required to those desiring a foundation in the world of information security.

By the end of the course, you will have a good grasp of how vulnerabilities and exploits work, how attackers think about networks and systems and have compromised several of them from infrastructure to web applications to Wi-Fi.

No equipment other than a web browser is needed. We make use of a fully cloud-based and individual virtual training lab meaning no interference from other students, a robust and safe practise environment, and time to experiment throughout.

------------------------------------------------------------------------

Key Takeaways:

- How to think like a hacker
- The difference between finding known vulns and exploiting them, and finding unknown vulns and exploiting them.
- How vulnerabilities can exist at different layers of the tech stack.

------------------------------------------------------------------------

In this course we'll cover:

Understanding the hacking mindset - The different ways hackers think, and hacking makes you think

Much of hacking is looking at the world differently. By understanding the differences, both attacking and defending systems can be made easier.

Setting up your environment, from getting your Kali ready to getting comfortable on the command line.

Getting your own set up going can be a daunting first task. We'll help you with what you need, how to set it up, and how to use it.

Understanding vulnerabilities and exploits - how to find them and use them

Understanding the difference between these concepts will help you find vulnerabilities and exploit them.

We start with vulnerability scanners, and move to exploitation of known vulnerabilities.

This section is focused on internal networks and related infrastructure.

Finding and Hacking Infrastructure over the Internet

Hacking over the Internet requires a different approach to the internal network. We'll show you how to find a target organisation's infrastructure on the Internet (the more you find the higher your chances of success).

Technologies such as DNS and techniques such as OSINT are introduced.

Next we look at both the thinking and attacks required to penetrate the perimeter, including introductions to phishing, password spraying and network tunnelling.

Hacking Web Applications and other custom applications

Where prior content focused on finding and using known vulnerabilities, this section introduces bug hunting in custom applications, using web applications to teach the concept.

Attacks such as cross-site scripting and SQL injection are practised, as well as understanding the fundamentals of HTTP and intercepting proxies.

Hacking Wi-Fi and traffic interception/analysis

To complete our hacking overview, we move to attacking the network layer, with a focus on the physical layer in the form of Wi-Fi hacking as well as network traffic through person-in-the-middle (MitM) attacks and traffic manipulation.

Passive traffic interception, and active ARP spoofing attacks, as well as offensive traffic analysis in real applications will be discussed.

Please note, refreshments and lunch are included on both days.

------------------------------------------------------------------------