Web 2.0: Business Opportunity or Security Threat?
August 13th, 2008
11:00am PT/2:00 pm ET
MEMBER LOGIN: PASSWORD:
Log-in Questions? Forgot/Change Password
 
 
 
 

Advanced Hands-on Hacking

Speaker: Justin Peltier
Chief Techonology Officer
Peltier and Associates

Presentation Overview:

This two-day, hands-on course is designed to take you to the next level in penetration testing skills. The class builds on the concepts of traditional network vulnerability assessment, teaching the methodology and tools used by network attackers to gain access to systems. Designed to arm security administrators with proactive security skills, this course is a show-and-tell about the holes in network and security systems. You’ll receive hands-on practice in thinking and acting like a system attacker, in order to better secure your systems.

Time-Based Objectives:

Day One

    Key Objectives:

  • Compromise a Windows system
  • Compromise a Linux system
  • Create a backdoor
  • Evaluate source code
  • Create an exploit

    Key Take-Aways:

  • The ability to perform ethical hacking beyond the basics

Basic compromises — We will begin this day with a few basic compromises of systems. We will perform a compromise of a Windows system, followed by a compromise of a Linux system. Avoid detection — We will then move focus to the world of avoiding detection by IDP and IPS systems. Create backdoors — We will finish the day with a discussion on creating backdoors into the compromised system. We will evaluate rootkits and Trojan horse programs.

Day Two

Developing exploits — This day will focus on going beyond exploiting systems and getting to the true root of the vulnerability problem. This session will focus on application source code, finding the exposure and creating your own exploit. Please note that the course will be constantly updated to reflect the current security environment. The course content will change from class to class.

Prerequisites:

Students in this class should possess Cisco Certified Network Associate (CCNA) certification or the following equivalent knowledge:

• Working knowledge of basic network security plus a solid grasp of TCP/IP and fundamental networking concepts
• Familiarity with Unix, Linux and Windows operating systems
• Basic knowledge of networking devices
• An understanding of network vulnerability assessment is a plus.