Ethical Hacking Course- Professional Cybersecurity

• To learn the different techniques and intrusion tools used by cybercriminals to penetrate a computer system.
• You will gain the necessary knowledge of the standard methodology for conducting professional ethical hacking audits with their corresponding executive and technical reports.
• This course has a mainly practical approach, making it easy for the student to learn usable knowledge.
• The course includes internationally recognized steps, standards and best practices to comply with while conducting system penetration audits.

1. General Concepts of Cybersecurity – Ethical Hacking

• Introduction to Cybersecurity – Ethical Hacking.
• The need for Cybersecurity in today’s world.
• Hacker terminology.
• Ethical hacking vs. vulnerability assessment.

2. Ethical Hacking – Phases and types of attacks.

• Ethical Hacking Cycle.
• Examples of Ethical Hacking methodology – Penetration test.
• Most common and effective types of attacks.

3. Ethical Hacking – Tools and Distributions

• Distributions to develop tasks in Cybersecurity.
• Kali Linux: features and tools.
• Setting up testing labs with virtual machines.

4. Linux basics.

• Creating groups and users.
• Changing user credentials.
• Creating files and assigning permissions.
• Basic configuration of a proxy server for network traffic control.
• Use of IPTABLES.

5. Real practice of Ethical Hacking with Metasploit – Intrusion in systems.

• Intrusion test on a Linux system.
• Intrusion test on a MAC system.

6. Development and basic analysis of scripts

• Development and analysis of Python scripts.
• Ruby script development and analysis.
• Development and analysis of Batch scripts.

7. Web Hacking

• Script creation for SQL injections.
• Exploitation of SQLi in vulnerable environments.
• Creation and assembly of Web phishing.

8. Hacking in Windows

• Intrusion to a Windows 10.
• Privilege Escalation in Windows.
• Post exploitation on Windows with Nishang.

9. Creation and basic analysis of malware in Windows

• Creation and analysis of a Trojan: client and server.
• Creation and analysis of a reverse shell.
• Creation and analysis of a Keylogger.

10. Reports for a real audit

• Types of reports and authorizations.
• Agreement and confidentiality model for cybersecurity audits.
• Technical report model.
• Executive report model.

11. Final exam and case study – JMSec Certificate of Completion

• Final theoretical exam.
• Ethical hacking case study.

X. Additional Resources

• Notes for Red Team Operations.
• Other resources of interest.

• The course is carried out using the following elements:
  • For each lesson the student will be provided documents in PDF format.
  • The student will perform practical exercises using virtual machines properly configured and prepared for the course.
  • The student will take a final test, as well as a practical test, in order to demonstrate the knowledge acquired throughout the course.

   

  This course is also designed to be able to be taken offline using the different downloadable resources provided.