Penetration Testing

CyberSense 201 – Penetration testing

Every day we read about new vulnerabilities exploited by threat actors despite of multiple network security controls. Hackers continue to steal million of records every years at alarming frequency. There is a need to assess specific aspects of organization security program and the state of security of critical systems, networks and applications.

Penetrating testing is designed to assess security before an attacker an attacker does. Penetration testing is more than just assessing or uncovering the vulnerabilities and goes to next level in order to prove the attack vector and answer to real world effectiveness of existing security controls against skilled threat vectors. With increased in sophistication of attack vectors organization are looking for pen testers to identify higher-risk vulnerabilities that are difficult to track using automated tools and needless to say to meet the compliance requirements.

This course will help professionals to understand about web and buffer overflow attack vectors that can be exploited by attackers in order to gain the system access. This course will also teach you different post exploitation & privilege escalation techniques to maintain and elevate system access.

Course Objectives: After completion of this course candidate will have idea about understating of web applications architectures, common web based vulnerabilities including LFI, RFI, SQL injection, evasion techniques, system exploitation using Metasploit framework. This class will also cover local and remote privilege escalation, buffer overflow and password attacks

Prerequisites: CEH, Cybersense101 or equivalent certification is desired to attend this course.

Target Audience: Network security consultant, Security architects, security managers, systems engineers staff who are responsible for planning, Implementing and deploying security technologies which may require cybersecurity and penetration testing in future