Leaving your network vulnerable to exploits can be catastrophic. Learning how hackers and malicious intruders analyze and target your assets can give you a serious advantage in today's high-tech world. This course will prepare you to attack and defend networks and applications with new modules, exploits, and hacker techniques. In the hands-on classroom environment, you will learn step-by-step procedures for executing attacks, conducting penetration tests, and blocking attacks on the Internet, intranet networks, and host-level systems. By learning how to leverage these security techniques and methodologies, you can actively defend your critical internal and external assets against malevolent threats.

What You'll Learn

• How hackers and malicious intruders analyze and develop target vectors aimed at your critical assets
• The strategy behind finding weaknesses before they become a security risk
• The proven McAfee Foundstone Penetration Testing Methodology
• Develop the mindset of a malicious attacker and identify the true risk to your organization
• Use the tools and methodologies hackers use efficiently, in a controlled and safe environment
• Develop your own security toolkit from tried and tested tools

Who Needs to Attend

System and network administrators, security personnel, auditors, and/or consultants concerned with network and system security should take this course.

Prerequisites

Basic UNIX and Windows competency and a basic understanding of security principles are recommended in order to achieve the greatest benefits from this course.

Follow-On Courses

• Foundstone Ultimate Hacking: Expert
• Foundstone Ultimate Hacking: Web
• Foundstone Ultimate Hacking: Wireless

Course Outline

1. Footprinting

• Determine the Scope
• Proper Authorization
• Publicly Available Information
• WHOIS and DNS Enumeration
• DNS Interrogation
• Network Reconnaissance

2. Scanning

• Host Discovery
• Service Discovery
• Operating System Detection

3. Enumeration

• Banner Grabbing
• Vulnerability Scanning
• Metasploit

4. System Hacking (Windows)

• Network Enumeration
• Host Enumeration
• Enumeration Countermeasures
• Penetration
• Penetration Countermeasures
• Privilege Escalation
• Privilege Escalation Countermeasures
• Pillaging
• Password cracking/recovery - John the Ripper, Cain & Abel, lcp, rainbow tables, etc.
• Pillaging Countermeasures
• Expanding
• Expanding Influence Countermeasures
• Cleanup (Covering Tracks)

5. System Hacking (Unix)

• Overview of UNIX/Linux
• Enumeration
• Enumeration Countermeasures
• Penetration Countermeasures
• Privilege Escalation Attacks
• Privilege Escalation Countermeasures
• Pillaging
• Pillaging Countermeasures
• Expanding Influence
• Expanding Influence Countermeasures
• Cleanup (Covering Tracks)

6. Web Hacking

• e-Commerce Architecture
• HTTP/HTTPS Primer
• Discovery
• Configuration Management
• Authentication
• Authorization
• Session Handling
• Data Validation
• OWASP Top 10

Labs

All topics are supported by hands-on exercises and labs specifically designed to increase knowledge retention. Classroom exercises provide the hands-on experience needed to secure an organization's Internet presence and internal network.