Ethical Hacking Course

The Certfied Ethical Hacker Program certifies individuals in the specific network security discipline of Ethical Hacking from a vendor-neutral perspective. A Certified Ethical Hacker is a skilled professional who understands and knows how to look for the weaknesses and vulnerabilities in target systems and uses the same knowledge and tools as a malicious hacker.

The Certified Ethical Hacker certification will fortify the application knowledge of security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure.

This class will immerse the student into an interactive environment where they will be shown how to scan, test, and secure their own systems. The lab-intensive environment gives each student in-depth knowledge and practical experience with the current essential security systems. Students will begin by understanding how perimeter defenses work and then be led into scanning and attacking their own networks. Students then learn how intruders escalate privileges and what steps can be taken to secure a system. Students will also learn about intrusion detection, policy creation, social engineering, open source intelligence, incident handling, and log interpretation.

Delegates should have at least two years of information technology security experience, a strong working knowledge of TCP/IP, and a basic familiarity with Linux.

Topics covered on the 5 day Ethical Hacking course

Introduction to Ethical Hacking

• Explaining the Certification
• Introducing Security
• Introducing Hacking
• Introduction to Ethical Hacking

Foot printing

• Defining Foot printing
• Information Gathering Methodology
• Locate the Network Range
• Hacking Tools

Scanning

• Definition of Scanning.
• Types of scanning
• Objectives of Scanning
• Scanning Methodology
• Classification of Scanning
• Hacking Tools
• Countermeasures

Enumeration

• What is Enumeration?
• NetBios Null Sessions
• Hacking Tools
• Enumerating User Accounts
• Active Directory Enumeration and Countermeasures

System Hacking

• Administrator Password Guessing
• Manual Password Cracking Algorithm
• Automated Password Cracking
• Password Types
• Types of Password Attacks
• Hacking Tools

Trojans and Backdoors

• Effect on Business
• What is a Trojan?
• Overt and Covert Channels
• Indications of a Trojan Attack
• Reverse Engineering Trojans
• Backdoor Countermeasures

Sniffers

• Definition of sniffing
• How a Sniffer works?
• Passive Sniffing
• Active Sniffing
• Hacking Tools
• Sniffing Countermeasures

Denial of Service

• What is Denial of Service?
• Goal of DoS(Denial of Service)
• Impact and Modes of Attack
• DoS Attack Classification
• Hacking Tools
• Countermeasures for Reflected DoS
• Tools for Detecting DDOS Attacks

Social Engineering

• What is Social Engineering?
• Art of Manipulation
• Human Weakness
• Common Types of Social Engineering
• Human Based Impersonation

Session Hijacking

• Understanding Session Hijacking
• Spoofing vs Hijacking
• Steps in Session Hijacking
• Types of Session Hijacking
• Hacking Tools
• Protection against Session Hijacking
• Countermeasures: IP Security

Hacking Web Servers

• Popular Web Servers and Common Security Threats
• Apache Vulnerability
• Attack against IIS Console
• Hacking Tools
• Countermeasures
• Increasing Web Server Security

Web Application Vulnerabilities

• Web Application Hacking
• Anatomy of an Attack
• Web Application Threats
• Carnivore
• Google Hacking
• Countermeasures

Web Based Password Cracking Techniques

• Authentication- Definition
• Authentication Mechanisms
• Password Guessing
• Query String
• Cookies
• Password Crackers Available
• Hacking Tools
• Countermeasures

SQL Injection

• Attacking SQL Servers
• SQL Server Resolution Service (SSRS)
• Osql-L Probing
• Port Scanning
• SQL Server Talks
• Preventive Measures

Hacking Wireless Networks

• Wireless Basics
• Components of Wireless Network
• Access Point Positioning
• Rogue Access Points
• Tools to Generate Rogue Access Points
• Scanning Tools
• Sniffing Tools
• Securing Wireless Networks

Worms and Viruses

• Virus Characteristics
• Symptoms of 'virus-like' attack
• Indications of a Virus Attack
• Virus / Worms found in the wild
• Virus writing tools
• Virus Checkers
• Virus Analyzers

Physical Security

• Understanding Physical Security
• Factors Affecting Physical Security
• Wiretapping
• Lock Picking Techniques
• Spying Technologies

Linux Hacking

• Linux Basics
• Linux Vulnerabilities
• Scanning Networks
• Scanning Tools
• Linux Security Tools
• Advanced Intrusion Detection System
• Linux Security Auditing Tool
• Linux Security Countermeasures

Evading Firewalls, IDS and Honeypots

• Intrusion Detection Systems
• Ways to Detect Intrusion
• Types of Intrusion Detection System
• Intrusion Detection Tools
• Honeypot Project
• Tools to Detect Honeypot

Buffer Overflows

• Buffer Overflows
• How a Buffer Overflow Occurs
• Shellcode
• NOPS
• Countermeasures

Cryptography

• Public-key Cryptography
• Working of Encryption
• Digital Signature
• Digital Certificate
• RSA (Rivest Shamir Adleman)
• RSA Attacks

Penetration Testing

• Penetration Test vs. Vulnerability Test
• Reliance on Checklists and Templates
• Phases of Penetration Testing
• Risk Analysis
• Types of Penetration Testing
• Types of Ethical Hacking
• SANS Institute Top 20 Security Vulnerabilities
• Penetration Testing Deliverable Templates
• Active Reconnaissance