SEC560: Network Penetration Testing and Ethical Hacking
- Contents | Schedule | Additional Info
- Instructor: Adrien de Beaupre
This will help me determine how safe my work environment is. SEC560 is very fun, I do not feel burnt out at the end of the day.
David Neilson, Western Family FoodsSEC560 helped to take the stew of ideas and techniques in my head and organize them in a 'professionally' usable way.
Richard Tafoya, Redflex Traffic Systems
As a cyber security professional, you have a unique responsibility to find and understand your organization's vulnerabilities, and to work diligently to mitigate them before the bad guys pounce. Are you ready? SANS SEC560, our flagship course for penetration testing, fully arms you to address this duty head-on.
SEC560 is the must-have course for every well-rounded security professional.
This course starts with proper planning, scoping and recon, then dives deep into scanning, target exploitation, password attacks and wireless and web apps, with over 30 detailed hands-on labs throughout.
Learn the best ways to test your own systems before the bad guys attack.
Chock full of practical, real-world tips from some of the world's best penetration testers, SEC560 prepares you to perform detailed reconnaissance by examining a target's infrastructure and mining blogs, search engines, social networking sites and other Internet and intranet infrastructure. You will be equipped to scan target networks using best-of-breed tools. We will not just cover run-of-the-mill options and configurations, we will also go over the less-known but highly useful capabilities of the best pen test toolsets available today. After scanning, you will learn dozens of methods for exploiting target systems to gain access and measure real business risk, then examine post-exploitation, password attacks, wireless and web apps, pivoting through the target environment to model the attacks of real-world bad guys.
You will bring comprehensive penetration testing and ethical hacking know-how back to your organization.
After building your skills in challenging labs over five days, the course culminates with a full-day, real-world network penetration test scenario. You will conduct an end-to-end penetration test, applying the knowledge, tools and principles from throughout the course as you discover and exploit vulnerabilities in a realistic sample target organization.
You Will Learn:
- How to perform a detailed, end-to-end professional penetration test using the best methodologies in the industry
- Hands-on skills to use the most powerful ethical hacking tools, including Nmap, Nessus, Metasploit, John the Ripper, Rainbow Tables, web application attack tools and more
- How to utilize built-in operating system tools on Windows and Linux in a weaponized fashion so that you can pen test while living off the land, avoiding the risk of installing third-party tools
- How to provide true business value through in-depth technical excellence in network penetration testing and ethical hacking
- How to structure and conduct a network penetration testing project with maximum efficiency and appropriate safety
| Course Contents | Instructors | Schedule |
|---|---|---|
| SEC560.1: Comprehensive Pen Test Planning, Scoping and Recon | Adrien de Beaupre |
Mon Sep 15th, 2014 9:00 AM - 6:30 PM |
OverviewIn this section of the course, you will develop the skills needed to conduct a best-of-breed, high-value penetration test. We will go in-depth on how to build penetration testing infrastructure that includes all the hardware, software, network infrastructure and tools you will need to conduct great penetration tests, with specific low-cost recommendations for your arsenal. We will then cover formulating a pen test scope and rules of engagement that will set you up for success, including a role-play exercise. We also dig deep into the reconnaissance portion of a penetration test, covering the latest tools and techniques, including hands-on document metadata analysis to pull sensitive information about a target environment. CPE/CMU Credits: 7 Topics
|
||
| SEC560.2: In-Depth Scanning | Adrien de Beaupre |
Tue Sep 16th, 2014 9:00 AM - 5:00 PM |
OverviewWe next focus on the vital task of mapping the attack surface by creating a comprehensive inventory of machines, accounts and potential vulnerabilities. We will look at some of the most useful scanning tools freely available today and run them in numerous hands-on labs to help hammer home the most effective way to use each tool. We will also conduct a deep dive into some of the most useful tools available to pen testers today for formulating packets: Scapy and Netcat. We finish the day covering vital techniques for false-positive reduction so you can focus your findings on meaningful results and avoid the sting of a false positive. And we will examine the best ways to conduct your scans safely and efficiently. CPE/CMU Credits: 6 Topics
|
||
| SEC560.3: Exploitation and Post-Exploitation | Adrien de Beaupre |
Wed Sep 17th, 2014 9:00 AM - 5:00 PM |
OverviewThis section looks at the many kinds of exploits that penetration testers use to compromise target machines, including client-side exploits, service-side exploits and local privilege escalation. We will see how these exploits are packaged in frameworks like Metasploit and its mighty Meterpreter. You will learn in-depth how to leverage Metasploit and the Meterpreter to compromise target environments, search them for information to advance the penetration test and pivot to other systems, all with a focus on determining the true business risk of the target organization. We will also look at post-exploitation analysis of machines and pivoting to find new targets, finishing the section with a lively discussion of how to leverage the Windows shell to dominate target environments. CPE/CMU Credits: 6 Topics
|
||
| SEC560.4: Password Attacks and Merciless Pivoting | Adrien de Beaupre |
Thu Sep 18th, 2014 9:00 AM - 5:00 PM |
OverviewThis component of the course turns our attention to password attacks, analyzing password guessing, password cracking, and pass-the-hash techniques in depth. We will go over numerous tips based on real-world experience to help penetration testers and ethical hackers maximize the effectiveness of their password attacks. You will patch and custom-compile John the Ripper to optimize its performance in cracking passwords. You will look at the amazingly full-featured Cain tool, running it to crack sniffed Windows authentication messages. You will also perform multiple types of pivots to move laterally through our target lab environment, and pluck hashes and cleartext passwords from memory using the Mimikatz tool. We will see how Rainbow Tables really work to make password cracking much more efficient, all hands-on. And we will finish the day with an exciting discussion of powerful pass-the-hash attacks, leveraging Metasploit, the Meterpreter, and SAMBA client software. CPE/CMU Credits: 6 Topics
|
||
| SEC560.5: Wireless and Web Apps Penetration Testing | Adrien de Beaupre |
Fri Sep 19th, 2014 9:00 AM - 5:00 PM |
OverviewThis in-depth section of the course focuses on helping you become a well-rounded penetration tester. Augmenting your network penetration testing abilities, we turn our attention to methods for finding and exploiting wireless weaknesses, including identifying misconfigured access points, cracking weak wireless protocols and exploiting wireless clients. We then turn our attention to web application pen testing, with detailed hands-on exercises that involve finding and exploiting cross-site scripting (XSS), cross-site request forgery (XSRF), command injection and SQL injection flaws in applications such as online banking, blog sites and more. CPE/CMU Credits: 6 Topics
|
||
| SEC560.6: Penetration Testing Workshop and Capture the Flag Event | Adrien de Beaupre |
Sat Sep 20th, 2014 9:00 AM - 5:00 PM |
OverviewThis lively session represents the culmination of the network penetration testing and ethical hacking course, where you will apply all of the skills mastered in the course in a full-day, hands-on workshop. You will conduct an actual penetration test of a sample target environment. We will provide the scope and rules of engagement, and you will work with a team to achieve your goal of finding out whether the target organization's Personally Identifiable Information is at risk. As a final step to prepare you for conducting penetration tests, you will make recommendations about remediating the risks you identify. CPE/CMU Credits: 6 Topics
|
||
| Additional Information | ||
| Laptop Required | ||
|
IMPORTANT - BRING YOUR OWN LAPTOP WITH WINDOWS To get the most value out of this course, students are required to bring their own laptop so that they can connect directly to the workshop network we will create. It is the students' responsibility to make sure the system is properly configured with all drivers necessary to connect to an Ethernet network. Some of the course exercises are based on Windows, while others focus on Linux. VMware Player or VMware Workstation is required for the class. If you plan to use a Macintosh, please make sure you bring VMware Fusion, along with a Windows guest virtual machine. Windows You are required to bring Windows 10, 8 or 8.1 (Professional, Enterprise, or Ultimate), Windows 7 (Professional, Enterprise, or Ultimate), Windows Vista (Business, Enterprise, or Ultimate) or Windows 2008/2012 Server, either a real system or a virtual machine. The course includes a VMware image file of a guest Linux system that is larger than 3 GB. Therefore, you need a file system with the ability to read and write files that are larger than 2 GB, such as NTFS on a Windows machine. IMPORTANT NOTE: You will also be required to disable your anti-virus tools temporarily for some exercises, so make sure you have the anti-virus administrator permissions to do so. DO NOT plan on just killing your anti-virus service or processes, because most anti-virus tools still function, even when their associated services and processes have been terminated. For many enterprise-managed clients, disabling your anti-virus tool may require a different password than the Administrator account password. Please bring that administrator password for your anti-virus tool. Enterprise VPN clients may interfere with the network configuration required to participate in the class. If your system has an enterprise VPN client installed, you may need to uninstall it for the exercises in class. VMware You will use VMware to run Windows and Linux operating systems simultaneously when performing exercises in class. You must have either the free VMware Player 6 or later or the commercial VMware Workstation 10 or later installed on your system prior to coming to class. You can download VMware Player for free here. Alternatively, if you want a more flexible and configurable tool, you can download a free 30-day trial copy of VMware Workstation here. VMware will send you a time-limited license number for VMware Workstation if you register for the trial on their website. No license number is required for VMware Player. We will give you a USB full of attack tools to experiment with during the class and to take home for later analysis. We will also provide a Linux image with all of our tools pre-installed that runs within VMware Player or VMware Workstation. Linux You do not need to bring a Linux system if you plan to use our Linux image in VMware. However, you are required to bring VMware Workstation,VMware Player or VMware Fusion. The class does not support Virtual Box, VirtualPC, or other non-VMware virtualization products. Mandatory Laptop Hardware Requirements
During the workshop, you will be connecting to one of the most hostile networks on Earth! Your laptop might be attacked. Do not have any sensitive data stored on the system. SANS is not responsible for your system if someone in the class attacks it in the workshop. By bringing the right equipment and preparing in advance, you can maximize what you will see and learn, as well as have a lot of fun. If you have additional questions about the laptop specifications, please contact laptop_prep@sans.org. |
||
| Who Should Attend | ||
|
||
| Prerequisites | ||
SANS Security 560 attendees are expected to have a working knowledge of TCP/IP, cryptographic concepts (including one-way hashing, symmetric key cryptography and public key cryptography), and the Windows and Linux command lines before they step into class. Although SANS Security 504: Hacker Tools, Techniques, Exploits, and Incident Handling is not a prerequisite for SEC560, that course covers the groundwork that all SEC560 attendees are expected to know. While SEC560 is technically in-depth, it is important to note that programming knowledge is NOT required for the course. For more information on the differences between SEC560 and SEC504, see the SEC560 and SEC504 FAQS. |
||
| Why Take This Course? | ||
Why Choose Our Course?This SANS course differs from other penetration testing and ethical hacking courses in several important ways:
|
||
| Other Courses People Have Taken | ||
Other Courses People Have TakenCourses that lead in to SEC560: Courses that are good follow-ups to SEC560: |
||
| What You Will Receive | ||
|
||
| You Will Be Able To | ||
|
||
| Hands-on Training | ||
|
||
| Press & Reviews | ||
"SANS is really the only information security training available and is therefore valuable on its own. The wide subject areas, relating to penetration testing, are what makes SEC560 particularly valuable." - Nicholas Capalbo, Federal Reserve of New York "I think if you genuinely want to learn how exploitation techniques work and how to properly think like a hacker, it would be silly not to attend." - Mark Hamilton, McAfee "SEC560 is getting better and better. You understand more as the day goes on. Most of these tools I will able to use in my organization." - Rayen Rai, Godo "SEC560 helped to take the stew of ideas and techniques in my head and organize them in a 'professionally' usable way." - Richard Tafoya, Redflex Traffic Systems "I had a great time. SEC560 has tons of useful material and techniques. As with all SANS training, I leave knowing that I can apply this as soon as I am back at work." - Benjamin Bagby, XE.Com "This type of training is fantastic, all new penetration testers and personnel who interact with testers or set up assessments should take SEC560." - Christopher Duffy, Knowledge Consulting Group "This will help me determine how safe my work environment is. SEC560 is very fun, I do not feel burnt out at the end of the day." - David Neilson, Western Family Foods "This is one of the most complete technical courses I have ever taken. The Capture The Flag event really helped pull it all together." - Thomas Hart, Hart Consulting "This training will have a direct impact on my current and future duties. Also having this resource as an outlet to understand new concepts/tools and better understand tools/concepts I was familiar with." - Marcus Knox, DST |
||
