1-800-THE-TREE (1-800-843-8733)
TRAINING YOU CAN TRUST
 
 

Ethical Hacking and Countermeasures: Hands-On

Preventing Network and System Breaches
 
Course: 537   Type: Hands-On Training   Duration: 4 Days
 
 

You Will Learn How To

  • Deploy ethical hacking to expose weaknesses in your organization and select countermeasures
  • Gather intelligence by employing reconnaissance, published data and scanning tools
  • Probe and compromise your network using hacking tools to test and improve your security
  • Discover how malicious hackers exploit weaknesses to "own" the network
  • Protect against privilege escalation to prevent intrusions
  • Evade antivirus software, firewalls and IDS

Course Benefits

As network breaches become increasingly sophisticated, proactive defenses are essential to counter malicious attacks. In this course, you learn to discover weaknesses in your network using the same mindset and methods as hackers. You acquire the knowledge to systematically test and exploit internal and external defenses. You learn countermeasures and how to reduce risk to your enterprise.

Who Should Attend

Security consultants, Information Assurance auditors, firewall/IDS personnel, programmers, PCI security testers and others responsible for securing enterprise systems. Security knowledge at the level of Course 468, "System and Network Security Introduction," and strong TCP/IP experience is assumed.

Hands-On Training

Hands-on exercises model hacking methods and include:
  • Preparing the hacker toolkit
  • Executing advanced port scanning
  • Linking vulnerabilities and exploits
  • Determining the vulnerabilities of a network
  • Performing injection attacks
  • Predicting and hijacking Web sessions
  • Luring clients to hostile servers
  • Configuring and using the Metasploit Framework
  • Defeating stateless firewalls, IDS and antivirus software
  • Deploying rootkits

Related Courses

 
(ISC)2 is a registered certification mark of (ISC)2, Inc.
 

Upcoming Dates

Dec 9 - 12, 2008
 Washington, DC (Rockville, MD)
Jan 27 - 30, 2009
 Washington, DC (Reston, VA)
Feb 10 - 13, 2009
 Los Angeles
Mar 17 - 20, 2009
 New York
Apr 7 - 10, 2009
 Washington, DC (Alexandria, VA)
Apr 28 - May 1, 2009
 Ottawa
May 19 - 22, 2009
 Toronto
May 19 - 22, 2009
 Washington, DC (Reston, VA)
Jun 2 - 5, 2009
 Washington, DC (Rockville, MD)
Jul 14 - 17, 2009
 New York
Aug 25 - 28, 2009
 Washington, DC (Reston, VA)

For complete schedule, please visit www.learningtree.com
 
http://www.learntree.com/courses/537pf.htm
 
 
1-800-THE-TREE (1-800-843-8733)
TRAINING YOU CAN TRUST
 
 

Ethical Hacking and Countermeasures: Hands-On

Preventing Network and System Breaches
 
Course: 537   Type: Hands-On Training   Duration: 4 Days
 
 
Course 537 Content
 

Introduction to Ethical Hacking

  • Defining a penetration testing methodology
  • Creating a security testing plan
  • Adhering to PCI standards
  • Assembling the hacking tools

Footprinting and Intelligence Gathering

Acquiring target information

  • Locating useful and relevant information
  • Scavenging published data
  • Mining archive sites

Scanning and enumerating resources

  • Identifying authentication methods
  • Analyzing firewalls
  • Harvesting e-mail information
  • Interrogating network services
  • Scanning from the inside out with HTML

Identifying Vulnerabilities

Correlating weaknesses and exploits

  • Researching databases
  • Determining target configuration
  • Evaluating Vulnerability Assessment tools

Leveraging opportunities for attack

  • Discovering exploit resources
  • Attacking with Metasploit

Attacking Servers and Devices to Build Better Defenses

Bypassing router access control lists (ACLs)

  • Discovering filtered ports
  • Manipulating ports to gain access
  • Connecting to blocked services

Compromising operating systems

  • Examining Windows protection modes
  • Analyzing Linux/UNIX processes

Subverting Web applications

  • Injecting SQL and HTML code
  • Hijacking Web sessions by prediction and fixation
  • Bypassing authentication mechanisms

Manipulating Clients to Uncover Internal Threats

Baiting and snaring inside users

  • Poisoning DNS
  • Executing Cross Site Scripting (XSS)
  • Gaining control of browsers

Creating custom malware

  • Harvesting client information
  • Enumerating internal data

Exploiting Targets to Increase Security

Initiating remote shells

  • Selecting reverse or bind shells
  • Leveraging the Metasploit Meterpreter

Pivoting and island-hopping

  • Attacking new victims
  • Routing through compromised clients
  • Forwarding and redirecting ports

Pilfering target information

  • Stealing password hashes
  • Extracting infrastructure routing, DNS and NetBIOS data

Uploading and executing payloads

  • Controlling memory processes
  • Utilizing the remote file system

Testing Antivirus and IDS Security

Masquerading network traffic

  • Obfuscating vectors and payloads
  • Side-stepping perimeter defenses

Evading antivirus systems

  • Falsifying file headers to inject malware
  • Discovering the gaps in antivirus protection

Installing rootkits to hide activity

  • Hooking API and system calls
  • Controlling memory and execution with Direct Kernel Object Manipulation (DKOM)

Mitigating Risk and Next Steps

  • Reporting results and creating an action plan
  • Managing patches and configuration
  • Recommending defensive countermeasures
  • Staying current with tools, trends and technology
 
http://www.learntree.com/courses/537pf.htm
 
 
1-800-THE-TREE (1-800-843-8733)
TRAINING YOU CAN TRUST
 
 

Ethical Hacking and Countermeasures: Hands-On Tuition

Preventing Network and System Breaches
 
Course: 537   Type: Hands-On Training   Duration: 4 Days
 
 

Course Tuition
$ 2,790 Standard Tuition
Tuition with a Savings Plan
$ 1,800 10-Day Pass
$ 1,670 Training Passport
$ 1,700 Premium-Pass
$ 2,200 Voucher 10-Pack
$ 2,515 Alumni Gold Discount
$ 2,484 Government Discount
 

 

Your Course Tuition Entitles You To...

  • Class participation
  • Team workshops
  • Use of in-class hands-on equipment
  • Comprehensive course materials
  • Morning and afternoon refreshments
  • Course Completion Certificate awarding Continuing Education Units
  • FREE participation in Professional Certification
  • FREE participation in College Credit programs (including related exams)
 
 

Tuition Savings Plans

Training Passport
  • 3 courses in 12 months
  • As little as $1,670 per course
  • Savings as much as 40%
  • Only $5,000
Premium Pass
  • 4 courses in 24 months
  • As little as $1,700 per course
  • Save as much as 45%
10-Day Pass
  • A NEW way to save on training
  • 10 days of training for one person
  • Save as much as $990 per course
  • Only $4,500
Training Vouchers
  • Save as much as $990 per course
  • Fully transferable
  • As low as $2,200 per course
Alumni Gold Discount Attend your first course and you'll receive a personalized Alumni Gold Discount card, entitling you to save as much as $305 on each course you take within the following 12 months. Take just one course each year and you'll be entitled to ongoing discounts...year after year!

Your Guarantee of Satisfaction

Unless you feel 100% satisfied that Learning Tree delivered even more than you expected, there is no fee for your course attendance. Our Guarantee of Quality lets you experience the value of the course--and then pay only if you feel the course was well worth the tuition.

Enrolling is Easy and Flexible!

Enroll by phone or online. If your plans change, just let us know and, without a fee, you can transfer to another course or cancel your enrollment. Pay after you've taken the course, and then only if you are 100% satisfied.

 
http://www.learntree.com/courses/537pf.htm