Archive '08
Archive '07
Archive '06
Archive '05
Archive '04

 

EXPLOITING AND DEFENDING NETWORKS – ADVANCE LINUX EDITION

Trainer: Nish Bhalla – Security Compass
Duration: 2-days
Date: 18th July – 19th July, 2006
Time: 0900 hours – 1700 hours
Style: Classroom, hands-on
Cost: S$3,000 per student
   
Description: The purpose of this course is to provide advanced tech leads, testers, administrators, network administrators and all other participants detailed security techniques and knowledge as applied to Network security and Host Security. It is focused towards helping users understand how to find and write basic stack based exploits. Participants will also learn how to take advantages of vulnerabilities that might exists in an environment and use backchannels to connect back into a network. Hands-on lab exercises reinforce the course material in a real world environment.
   
Pre-requisite: Basic knowledge of programming on Windows or Linux is a pre-requisite. Having knowledge of using an editor like vi or Emacs and having the knowledge of compiled using Gcc / Visual Studio is a pre-requisite.

All students will be required to bring their own laptop; and must have administrative access on their laptops to install software. VM-Player (http://www.vmware.com/products/player/) will be installed. Windows/Linux images will be provided for use during the class. It is recommended that the laptops have 512 MB of RAM.

   
Class Outline: Part I - Introduction to Buffer Overflows Buffer Overflows (Linux)
 
  • Basics of Stack
  • Assembly basics
  • Understand stack overflows
  • Exploiting local stack overflows
  • Writing a local stack overflow
     
  Part II – Wireless Basics of Wireless Hacking
 
  • How to Find Wireless Networks.
  • Breaking WEP/WPA/LEAP
  • Setting up a Fake AP (Either on Linux / Linksys WRT54GL)
     
  Part III– Network Scanning and Back Channels Network Scanning & Hacking
 
  • Advanced Port / Network Scanning techniques
  • MITM Attacks
  • SSL MITM Attacks
  • SSH MITM Attacks
  • DNS Spoofing Attacks
  • Ettercap to the Rescue
  • TCP Hijacking
Back Channels [Methods of hiding and bypassing firewalls]
 
  • Bash Shell Based Back Channels
  • XML Based Back channels
  • HTTP Based Back channels
  • MSN Based Back Channels

>>Next Page

 


 





Powered by SyScan © 2009 SyScan'09