8 Days Left to Save $400 for SANS Security West 2010 >> More Info

The most trusted source for computer security training, certification and research.



select a course
Global Information Assurance Certification

SANS is hands down the best bang for the buck available, no one else even comes close!
-Derek Masseth, University of Arizona

SECURITY 517

Cutting-Edge Hacking Techniques

6 CPE Credits

Computer attackers continue their relentless march in improving their tools and techniques. The simple scanning of yesteryear has given way to powerful suites of bundled, automated scanning and exploitation tools. Straightforward backdoors have evolved into powerful kernel-mode RootKits, manipulating the very hearts of our systems. Covert channels exfiltrate sensitive information and hash collision attacks are rapidly advancing, with your systems in the cross hairs. In all of these trends, thorough reconnaissance and deep subterfuge dominate the attackers' game.

If we don't keep up with their latest methods, our overall defenses and incident response practices will grow rusty. To help fight back, this action-packed one-day course describes these latest attack trends and what you can do to thwart the bad guys. In addition to detailed descriptions of how the attacks function, you'll get hands-on experience with the tools and their defenses.

This fast-paced, intermediate-to-advanced course is ideal for students who have taken a multi-day hacking course in the past (offered by other training organizations or SANS' own 504 or 560 courses) and are looking to update their understanding and skills. Also, if you are preparing for that final push on your GCIH certification, this session can help you brush up and refresh your knowledge of computer attacks before taking the exam.

  • Who Should Attend This Course
    • Managers and professionals who have taken a multi-day hacking course seeking to update their understanding and skills
    • Professionals preparing for the GCIH or GPEN certification
  • Sampling of Topics
    • Metasploit modules, including the Meterpreter and Priv – hands on
    • New Google search techniques for finding vulnerable systems
    • Cross-Site Scripting attacks to steal sensitive information – hands on
    • IPS Fingerprinting
    • Virtual Machine Detection, the possibility of VM Escape and what it means to you – hands on
    • Recent user-mode and kernel-mode RootKits for Windows and UNIX, including Hacker Defender and Nushu
    • Hash collisions and their implications with Stripwire and Confoo – hands on
    • Late-breaking Nmap features – hands on
    • Techniques attackers use to steal a million credit cards and how to stop them

I learned more here in six days than I could in a year in terms of breadth of knowledge.
-Stephen Yuhas, TESSCO Technologies

Training Events By Course

SECURITY 517 :: Cutting-Edge Hacking Techniques
SANSFIRE 2010 Baltimore, MD June 06, 2010 - June 14, 2010
SANS Boston 2010 Boston, MA August 02, 2010 - August 08, 2010
SANS OnDemand Online Training & Assessments Anytime