Ethical Hacking Course- Functional Cybersecurity

• To learn the different techniques and intrusion tools used by cybercriminals to penetrate a computer system.
• You will gain the necessary knowledge of the standard methodology for conducting professional ethical hacking audits with their corresponding executive and technical reports.
• This course has a mainly practical approach, making it easy for the student to learn usable knowledge.
• The course includes internationally recognized steps, standards and best practices to comply with while conducting system penetration audits.

1. General Concepts of Cybersecurity – Ethical Hacking

• Introduction to Cybersecurity – Ethical Hacking.
• The need for Cybersecurity in today’s world.
• Hacker terminology.
• Ethical hacking vs. vulnerability assessment.

2. Ethical Hacking – Phases and types of attacks.

• Ethical Hacking Cycle.
• Examples of Ethical Hacking methodology – Penetration test.
• Most common and effective types of attacks.

3. Ethical Hacking – Tools and Distributions

• Distributions to develop tasks in Cybersecurity.
• Kali Linux: features and tools.
• Setting up testing labs with virtual machines.

4. Practical Ethical Hacking Task – System Intrusion and information exfiltration.

• Definition of the scope and objectives of the system to be audited.
• Reconnaissance analysis of ports and services.
• Analysis of vulnerabilities.
• Exploitation: penetrating the target machine.
• Post-exploitation: maintaining access.
• Erasure of traces: elimination of system “logs”

5. Practical Ethical Hacking Task – Smartphone intrusion and information exfiltration.

• Definition of the scope and objectives of the system to be audited.
• Reconnaissance, analysis of ports and services.
• Creation of malware to take control of Smartphones with Android OS.
• Exploitation: launching attacks and penetrating the target machine.
• Post-exploitation: maintaining access.
• Erasing traces: deleting “logs” from the system.
• Conclusions and recommendations.

6. Netcat and Crypcat – The Swiss Army Knives of hacking

• Introduction and disclaimer.
• Performing Bind Shell on LAN.
• Performing Reverse Shell on LAN.
• Performing Reverse Shell on external networks.
• Evading the Firewall of the Windows machine.
• Installing “netcat” as a backdoor on a Windows OS.
• Analyzing incoming and outgoing connections with Wireshark.
• Conclusions and recommendations: “ncat”.

7. Reports for a real audit

• Types of reports and authorizations.
• Agreement and confidentiality model for cybersecurity audits.
• Technical report model.
• Executive report model.

8. Final exam and case study – JMSec Certificate of Completion

• Final theoretical exam.
• Ethical hacking case study.

9. Additional Resources

• Notes for Red Team Operations.
• Other resources of interest.

• The course is carried out using the following elements:
  • For each lesson the student will be provided with videos and documents in PDF format.
  • The student will perform practical exercises using virtual machines properly configured and prepared for the course.
  • The student will take a final test, as well as a practical test, in order to demonstrate the knowledge acquired throughout the course.

   

  This course is also designed to be able to be taken offline using the different downloadable resources provided.