SECURITY 553

Metasploit for Penetration Testers

Testing your network for new vulnerabilities before the bad guys do should be a top priority for any organization. Unfortunately, developing tools and code to test for vulnerabilities in existing commercial and in-house software can be a tiring process. The Metasploit Project™ was designed to help fulfill this need. Using various components of The Metasploit Project™, you can rapidly develop tools to not only test for, but verify software vulnerabilities that may lurk on your network.

Attendees will become familiar with the various components of the Metasploit Project™, how to use those components to test and verify their networks, methods for detecting Metasploit, and how to develop custom exploit modules. The course concludes with a hands-on section, where the knowledge learned can be tested against virtual machines.

This course is well suited for penetration testers and ethical hackers. In addition, systems administrators, incident responders, and systems auditors can benefit from this course by learning how to quickly and efficiently develop tools to test and verify software vulnerabilities.

Attendees are expected to have a basic understanding of software exploits and hacker techniques.

It is imperative that you get written permission from the proper authority in your organization before using these tools and techniques on your company's system as well as advise your network and computer operations teams of your testing.

Who Should Attend:

• Network administrators
• Systems administrators
• Penetration testers
• Auditors
• Incident responders

Author Statement

The Metasploit Project™ goes beyond the traditional method of vulnerability scanning, and allows you to verify a vulnerability by actually exploiting it. The Metasploit Project™ has a set of resources that allows penetration testers and hackers alike, to rapidly develop, research, and test exploit code. This class is really exciting because it puts you in the driver's seat; you get to build custom attacks, with the simplicity of a point-and-click interface. For many people, exploiting a vulnerability is only something they've read about, or seen someone else do. This course will turn them into "that someone".
-Michael Murr