|
מבוא – לינוקס, תקשורת ובדיקות חדירות
30 שעות לימוד פרונטאליות
|
|
Module
|
Hours
|
Topics
|
|
Linux
|
10
|
Introduction to Linux OS Environment
|
|
Installing and configuring Linux OS as a VM
|
|
System Folders and Permissions
|
|
Users Management and Ownership
|
|
Linux Services Management and Configuration
|
|
Bash Scripting
|
|
Linux Local System Exploit
|
|
Linux Process Manipulation and Control
|
|
Network Research & Penetration Testing
|
20
|
Build your Lab Environment
|
|
Reconnaissance
|
|
Vulnerability Analysis
|
|
The Metasploit Framework
|
|
Payloads and Shells
|
|
Exploitation
|
|
Bypass Techniques
|
|
Post Exploitation
|
|
Reporting and Communicating
|
|
Planning and Scoping
|
|
פריצה והגנה – חקירות, תכנות ו –WEB
130 שעות לימוד פרונטאליות + 35 שעות לימוד עצמי
|
|
WebApp Security
|
50
|
Introduction to WebApp Security
|
|
Burp Suite (Target, Proxy, Scanner, Intruder, Repeater, Decoder)
|
|
The HTML Protocol
|
|
HTML Injection
|
|
XSS
|
|
Web Reconnaissance
|
|
Session Hijacking + Ways of Protection
|
|
Cross Site Request Forgery (CSRF)
|
|
Server-Side Request Forgery (SSRF)
|
|
Local File Inclusion (LFI)
|
|
Directory Traversal
|
|
RCE - Remote Code Execution
|
|
Blind Command injection
|
|
SQL injection
|
|
File Upload
|
|
Automation Scanners
|
|
Authentication
|
|
Python Security
|
20
|
Programming Concepts and Python Basics
|
|
Identifying Services
|
|
Port Scanning and Banner Grabbing
|
|
Hacking Remote Services
|
|
Attacking Web Applications
|
|
Spiders and Web Crawlers
|
|
Automations and Mechanize
|
|
Networking with SCAPY
|
|
Offensive SCAPY
|
|
The Shodan API
|
|
Anti-Virus with Python
|
|
20
|
Self-paced learning
|
|
Digital Forensics
|
40
|
Digital Evidence Gathering
|
|
Computer Systems Infrastructures
|
|
Memory Storage and Management
|
|
File System Types and Common File Systems
|
|
Windows OS Forensics
|
|
Understanding NTFS and Storage Management
|
|
Steganography Techniques
|
|
Extracting Windows Registry and Query Manipulations
|
|
Windows Log System Explained
|
|
Working with RAW Image Format
|
|
Investigating and Recovering Deleted Information
|
|
How RAM Operates in Windows OS and Data extraction
|
|
Mastering Access-Data FTK imager
|
|
Memory Capture and Diagnostic Methodologies
|
|
File Forensics and Metadata Information
|
|
File Carving Techniques - Manual and Automatic Tools
|
|
PowerShell Security
|
20
|
PowerShell Fundamentals
|
|
PowerShell Operational Security
|
|
Configuration management
|
|
Delegation of Administration
|
|
PowerShell Auditing and Logging
|
|
PowerShell-based exploits
|
|
15
|
Self-paced learning
|
|
התמחות – Reverse Engineering and Exploitation
חקירת התנהגויות של נוזקות / Malware
140 שעות לימוד פרונטאליות + 20 שעות לימוד עצמי
|
|
Reverse Engineering and Exploitation
|
100
|
Malware Analysis Definitions and Terminology
|
|
Static Malware Analysis as First Step - Tools and Achievements
|
|
Dynamic Malware Analysis - Preparing Sandbox Lab
|
|
Process Manipulation and Analysis
|
|
Assembly Programing Basics - Intel 80x86 Architecture (NASM)
|
|
Understanding Number Bases
|
|
Register Types and How Memory Data is Organized
|
|
RAM Memory from the Machines Point of View
|
|
Memory Management Order Little-Endian vs Big-Endian
|
|
Assembly Functions
|
|
Understanding the Stack and Registers
|
|
Debugging PE Binaries using GDB
|
|
Working with Additional Debuggers - OllyDBG and Immunity Debugger
|
|
Working with Disassembler - IDA Pro
|
|
Python Implementation in Assembly
|
|
Anti-Debugging and Anti-Forensics Techniques
|
|
Packing and Unpacking Data in the Memory
|
|
How Packers work UPX and Advance Packing
|
|
Buffer Overflow - Programing Concept
|
|
Buffer Overflow in Network Services
|
|
Buffer Overflow Vulnerabilities in Linux and Windows
|
|
Format String Vulnerability Abuse
|
|
Understanding and Building Cracks
|
|
Reverse Engineering Practical Phase
|
|
IoT Exploitation
|
40
|
Introduction to IoT
|
|
IoT Attack Surface
|
|
Setting your own IoT Exploitation VM
|
|
Firmware Analysis
|
|
Emulating Firmware
|
|
Tempering IoT Firmware
|
|
WebApp Penetration for IoT Devices
|
|
Analyzing IoT Devices
|
|
Working with IoT Exploitation Devices
|
|
20
|
Self-paced learning
|
|
Total
|
355
|
|
להשארת פרטים
