OS Exploits E-Learning Training

Leer kwetsbaarheden herkennen en verhelpen in Windows- en Linux-systemen.

Demo OS Exploits Training

Een stevige beveiligingsstrategie begint bij het begrijpen van hoe besturingssystemen kunnen worden misbruikt. In deze training duik je diep in de wereld van OS-exploits, waarbij je leert hoe aanvallers bekende kwetsbaarheden in Windows en Linux uitbuiten — en hoe jij ze kunt detecteren, analyseren én mitigeren. Wat je leert: <ul> <li data-start="770" data-end="826">Verzamelen van inlichtingen over kwetsbaarheden</li> <li data-start="829" data-end="890">Analyse van veelvoorkomende exploits in Windows-diensten</li> <li data-start="893" data-end="941">Oplossen van problemen met legacy software</li> <li data-start="944" data-end="993">Technieken voor post-exploitatie en detectie</li> <li data-start="996" data-end="1047">Exploit staging en analyse voor Linux-systemen</li> <li data-start="1050" data-end="1123">Werken met Linux-native penetration tools en beveiligingsarchitecturen</li> </ul> Deze training maakt deel uit van een Agile Learning Kit met e-learning, labs, assessments, mentorhulp en 365 dagen toegang. <h3 class="" data-start="1259" data-end="1299">Waarom kiezen voor deze opleiding?</h3> <ul> <li data-start="1303" data-end="1367">Ontwikkel diepgaand inzicht in besturingssysteembeveiliging</li> <li data-start="1370" data-end="1434">Leer zowel preventieve als reactieve exploitstrategieën</li> <li data-start="1437" data-end="1493">Combineer theorie met praktijk in realistische labs</li> <li data-start="1496" data-end="1548">Behandel zowel Windows als Linux omgevingen</li> <li data-start="1551" data-end="1613">Inclusief examens, mentorondersteuning en 365 dagen toegang</li> </ul> <h3 class="" data-start="1620" data-end="1652">Wie zou moeten deelnemen?</h3> Deze training is perfect voor: <ul> <li data-start="1688" data-end="1737">Securityprofessionals en ethical hackers</li> <li data-start="1740" data-end="1788">Systeembeheerders en OS-specialisten</li> <li data-start="1791" data-end="1840">SOC-analisten en incident responders</li> <li data-start="1843" data-end="1904">IT’ers die hun OS-beveiligingskennis willen versterken</li> </ul> <h4>Deze Learning Kit met meer dan 14 leeruren is verdeeld in drie sporen:</h4> <h3>Cursusinhoud</h3> <h4>E-learning courses (14 hours +)</h4> Windows Exploits and Forensics: Intelligence Gathering Course: 1 Hour, 28 Minutes <ul> <li>Course Overview</li> <li>The Open-source Intelligence (OSINT) Methodology</li> <li>Conducting an OSINT Investigation</li> <li>Social Engineering Target Identification</li> <li>Network Scanning for Open Ports</li> <li>Conducting an Nmap Scan</li> <li>Common Windows Services and Their Ports</li> <li>System Scanning and Enumeration Tools</li> <li>Conducting a Windows System Scan</li> <li>Standard Kali Tools</li> <li>Using Metasploitable: Common Commands and Issues</li> <li>Windows Exploit Discovery</li> <li>Course Summary</li> </ul> Windows Exploits and Forensics : Windows Environments Course: 1 Hour, 32 Minutes <ul> <li>Course Overview</li> <li>The Security Features and Controls on Windows Hosts</li> <li>Windows Server Operating System Types</li> <li>Intrusion Detection and Prevention in Windows</li> <li>The MITRE ATT&CK Framework and Windows Intrusions</li> <li>The Logging Features in Windows</li> <li>Viewing Event logging</li> <li>The Different Windows Account Types</li> <li>Using Windows Commands</li> <li>How Windows Permissions Work</li> <li>NT (New Technology) LAN Manager (NTLM) in Windows</li> <li>Cracking an NTLM Hash</li> <li>Using the Windows Registry</li> <li>Artifacts Found in Windows OS</li> <li>How Active Directory and Kerberos Work</li> <li>Course Summary</li> </ul> Windows Exploits and Forensics: SMB & PsExec Course: 1 Hour, 6 Minutes <ul> <li>Course Overview</li> <li>SMB Permissions and Defaults</li> <li>SMB Enumeration</li> <li>Enumerating SMB Shares</li> <li>Identifying Vulnerabilities in SMB</li> <li>SMB Attack Methods</li> <li>Conducting an SMB Brute Force Attack</li> <li>Conducting an SMB Denial of Service</li> <li>Exploiting a System Using SMB Reverse Shell</li> <li>How the PsExec Utility Works</li> <li>Executing Remote Commands with PsTools</li> <li>Executing a Pass the Hash Attack with Mimikatz</li> <li>A Background to the EternalBlue Exploit</li> <li>Using the EternalBlue Vulnerability to Attack</li> <li>Course Summary</li> </ul> Windows Exploits and Forensics: FTP, RDP, & Other Services Course: 1 Hour, 13 Minutes <ul> <li>Course Overview</li> <li>Windows Service Exploitation</li> <li>Enumerating Data from FTP</li> <li>FTP Attack Methods</li> <li>Conducting a Brute Force Attack on an FTP Server</li> <li>IIS with Windows and FTP Clients</li> <li>FTP/IIS Reverse Shell</li> <li>RDP in a Windows Environment</li> <li>RDP Attack Methods</li> <li>Enumerating Using RDP</li> <li>Exploiting an RDP system Using BlueKeep</li> <li>Working with WMI</li> <li>Exploiting WMI on a Windows-based System</li> <li>Course Summary</li> </ul> Windows Exploits and Forensics: Legacy Systems & Third Party Applications Course: 58 Minutes <ul> <li>Course Overview</li> <li>Common Attacks on Windows Hosts</li> <li>Common Attacks on Windows Servers</li> <li>Scanning for Potential Vulnerabilities</li> <li>Enumerating Data from Services</li> <li>Running an Exploit to Gain Credentials</li> <li>Running an Exploit to Gain a Reverse Shell</li> <li>Common Third-party Applications in Windows</li> <li>Finding Vulnerabilities for Third-party Applications</li> <li>Exploiting Third-party Applications in Windows</li> <li>Avoiding Honeypots</li> <li>Course Summary</li> </ul> Windows Exploits and Forensics: Post Exploitation Course: 1 Hour, 24 Minutes <ul> <li>Course Overview</li> <li>Privilege Escalation Methods</li> <li>Conducting a Basic Privilege Escalation</li> <li>Using the DLL Injection</li> <li>Pivot between Hosts</li> <li>Stealing User Credentials</li> <li>Using PowerView to Enumerate Information</li> <li>Using BloodHound to Gain Admin Privileges</li> <li>Cleanup Methods to Hide Your Tracks</li> <li>Cleaning up Post Attack</li> <li>APT and Configuration Methods</li> <li>Configuring APT after Exploitation</li> <li>Using the Nuclear Option to Clean up Post Attack</li> <li>Course Summary</li> </ul> Linux Exploits & Mitigation: Staging for Exploit Analysis Course: 1 Hour, 5 Minutes <ul> <li>Course Overview</li> <li>Leveraging Virtual Environments</li> <li>Setting up QEMU</li> <li>Launching Linux in QEMU</li> <li>Mounting Filesystems</li> <li>Compiling Linux Kernels</li> <li>Networking under QEMU</li> <li>Architectural Considerations</li> <li>Emulating Architectures in QEMU</li> <li>Saving Machine States</li> <li>Monitoring System Info</li> <li>Staging Vulnerabilities</li> <li>Protecting Staging Environments</li> <li>Course Summary</li> </ul> Linux Exploits & Mitigation: Program Essentials Course: 1 Hour, 21 Minutes <ul> <li>Course Overview</li> <li>Programming in Memory</li> <li>Running GDB</li> <li>Disassembling a Program</li> <li>Dumping Objects</li> <li>Protection Rings</li> <li>Kernel and Userland Separation</li> <li>The GNU C Library</li> <li>Using Syscalls with C</li> <li>Using Syscalls with Assembly</li> <li>Linux System Call Table</li> <li>Querying Implemented System Calls</li> <li>Executing Programs</li> <li>Segmenting Programs</li> <li>Course Summary</li> </ul> Linux Exploits & Mitigation: String Vulnerability Analysis Course: 1 Hour, 10 Minutes <ul> <li>Course Overview</li> <li>Exploiting Strings</li> <li>Formatting String Weaknesses</li> <li>Overflowing the String Buffer</li> <li>Compiling String Weaknesses</li> <li>Copying String Weaknesses</li> <li>Catching Input Vulnerabilities</li> <li>Generating String Weaknesses</li> <li>Checking Strings Safely</li> <li>Looping Over Strings Safely</li> <li>Executing Unsafe Strings</li> <li>Injecting Code in Strings</li> <li>Returning Strings Safely</li> <li>Course Summary</li> </ul> Linux Exploits & Mitigation: Memory and Pointer Vulnerabilities Course: 1 Hour, 11 Minutes <ul> <li>Course Overview</li> <li>Allocating Memory</li> <li>Overflowing the Heap</li> <li>Dangling Pointers</li> <li>Dereferencing NULL</li> <li>Exploiting the Heap</li> <li>Using After-free</li> <li>Overflowing the Stack</li> <li>Accessing Out-of-bounds</li> <li>Looping Off-by-one</li> <li>Corrupting Memory</li> <li>Executing Arbitrary Code</li> <li>Exploiting Out-of-bounds</li> <li>Course Summary</li> </ul> Linux Exploits & Mitigation: Penetration Tools Course: 1 Hour <ul> <li>Course Overview</li> <li>Exploring Metasploit Commands</li> <li>Running a Vulnerable Environment</li> <li>Exploiting a Vulnerable Web Service</li> <li>Scanning SMTP</li> <li>Exploiting Vulnerable File Sharing</li> <li>Uploading Injections</li> <li>Searching for Exploits</li> <li>Detecting Exploits</li> <li>Scanning with RouterSploit</li> <li>Inspecting Opcodes</li> <li>Converting Shellcode</li> <li>SQL Injection</li> <li>Course Summary</li> </ul> Linux Exploits & Mitigation: Linux Exploit Architecture Course: 57 Minutes <ul> <li>Course Overview</li> <li>Avoiding Kernel Race Conditions</li> <li>Executing Shellcode</li> <li>Out-of-order Execution</li> <li>Integer Vulnerabilities and Prevention</li> <li>Compiler Warnings for Security and Stability</li> <li>Stack Smashing Mitigations</li> <li>Use-after-free Consequences</li> <li>Spectre and Meltdown Vulnerabilities and Mitigation</li> <li>Write XOR Execute (W^X)</li> <li>Considerations and Mitigations to Vulnerabilities and Exploits</li> <li>Privilege Escalation Targets</li> <li>Processes and Tasks Exploits</li> <li>Course Summary</li> </ul> <h3>Assessment: OS Exploits</h3> Will test your knowledge and application of the topics presented throughout the OS Exploits courses. <h3>Practice Lab: OS Exploits (estimated duration: 7 hours)</h3> Perform OS exploits such as system event auditing, testing for RDP vulnerabilities, constructing a MSFvenom injection payload, and running a virtual environment. Then, debug and disassemble a program, catch common vulnerabilities, and recognize the dangers with pointers.