01. ADVANCED WINDOWS ATTACKS:

This course will teach you attacks that hackers have kept secret and used for years! These attacks allow bypassing all Windows protections and getting SYSTEM privileges on fully patched systems like never before. You will get hands-on experience with advanced exploits such as Syswhisper2 and Ghostwriting! The course also includes advanced credential hijacking with WCE and Pass-the-Pass-the-hash, amongst others.

02. ATTACKING IOT SYSTEMS:

The course focuses on attacks against IoT devices, including the IOT programs that require you to learn how to bypass such devices. IoT is different from regular operating systems, and therefore traditional methods don’t work. We show how to gain root access to devices, dump firmware, patch firmware, and reverse engineer them.

03. WRITING EXPLOITS: ADVANCED BINARIES EXPLOITATION:

The IoT-focused hacking course won’t stop here! We go into more depth and show you how to find vulnerabilities in binaries and write your own exploits. You will learn how to deal with real-world obfuscated binaries and other techniques attackers use in the real world! The task is much detailed and needs your dedication from the beginning to the process. You need a lot of practice, experience, and dedication to make such attacks. The overall experience during this workshop will take you to the next level! For those of you who feel comfortable with basic scripting skills, we will be covering Python Scripting, enabling you to write your own fully exploit-proof shells to allow for faster execution. Furthermore, you need a good understanding of the x86 and x64 architectures! These are must-have skill sets. We will go through important debugging tricks and compile/code-steps in x86 and x64. This workshop provides the opportunity to massively up your skill level and break into binary exploitation. Upon completion, you will have the skills necessary to get started and build further upon more advanced systems attacks.

04. BYPASSING A FILTERED NETWORK:

The CPTED Certification offers the class, but provides some challenges to test your knowledge. The challenge is based on a real-world network and how to exploit weaknesses, find pivot points, and target vulnerable applications and weak points.

05. PENTESTING OPERATIONAL TECHNOLOGY (OT):

A section in Industrial Technology Certification, the CPTED contains a zone dedicated to pentesting OT systems. The OT part of the course is based on a real-world system that mirrors real attacks. The task includes capturing data from field devices, reverse engineering communication protocols, and finding vulnerabilities in their associated ICS devices, PLCs, and SCADA.

06. ACCESS HIDDEN NETWORKS WITH PIVOTING:

This task focuses on scenarios where the attack has to identify the hidden networks and systems. Hidden networks offer an additional level of security and are not normally visible. The CPTED course teaches you how to use pivoting techniques to access these hidden networks and attack them. The challenge includes using different pivoting techniques and finding weak access points and methods to compromise them.

07. DOUBLE PIVOTING:

Double pivoting has revolutionized the challenges of the task, the most challenging part of the CPTED training. This section focuses on setting up pivot routes in two systems and dealing with the challenges of defending these routes. The double pivoting requires advanced skills in system understanding.

08. PRIVILEGE ESCALATION:

There’s always that need of privilege escalation as covered earlier within the course material. Learn how to gain root access on a compromised system through kernel-level exploits and deal with systems where privilege escalation is required.

09. EVADING DEFENSE MECHANISMS:

This part of the course introduces a series of techniques that you can try to get your exploits past active defenses by weaponizing them.

10. ATTACK AUTOMATION WITH SCRIPTS:

Programs like Automated Pentesting techniques, including scripts that automate testing of networks, allow you to increase your attack efficiency. Python, Powershell, Perl, Bash, and Ruby all form part of the training.

11. BUILD YOUR ARMORY: WEAPONIZE YOUR EXPLOITS:

During this workshop, you will learn how to weaponize your code, create PoCs, and hack by exploiting vulnerabilities that you have identified during an exploit development session.

12. WRITE PROFESSIONAL REPORTS:

During this task, the focus is shifted towards delivering a professional and impactful utilization report. A structured report is essential when providing your pentest results to your client. During the training, you will learn how to write such reports in a way that is accepted by clients, C-levels, and anyone requiring a professional overview of the pentesting process.