Professional Hacker Training
Learn how to attack and exploit real-world systems, using advanced hacking techniques employed by professional penetration test engineers world-wide. Designed for both novice and expert alike, Heorot.net provides online and on-site instruction covering the most advanced hacking techniques, used in both government and commercial sectors, to evaluate and exploit information systems.
THE SOURCE for Penetration Testing Training
Training courses from Heorot.net have become the de facto method for learning Professional Penetration Testing, and are the topic of numerous publications, including “Professional Penetration Testing: Creating and Operating a Formal Hacking Lab,” published through Syngress.
Online Courses
For those just starting out in the field of professional penetration testing, the Shodan Certified Penetration Tester course will provide a thorough understanding of how a professional penetration test is conducted and the methodologies behind performing an attack. It is suggested you already have a familiarity with basic Linux commands and file structure. The course covers the following topics:
- Penetration Test Methodology
- Use and Selection of Hacker Tools
- System Exploitation Fundamentals
- Password Attacks (Remote and Local)
- Legal Issues
- Enumerating Users
- Network Sweeping and Tracing
- OS and Version Detection
- Port Scanning Fundamentals
- Reporting the Results
- Project Management Requirements
- Documention Requirements
- Hands-On Experience Conducting Your Own Penetration Test
For those individuals familiar with hacker tools who have some penetration testing experience, the Nidan Certified Penetration Tester course will provide a comprehensive understanding of how to run a penetration test in a real-world environment. Students should have a solid understanding of Linux and the ability to effectively use commercial and Open Source hacker tools. The course covers the following topics:
- Application of the OSSTMM within a penetration test
- Risk Analysis and Security Metrics
- Network Packet Crafting
- Exploiting File System Security
- Web Application Testing
- Reviewing Code for Potential Exploits
- Password Encryption and Cracking Methodologies
- Advanced Techniques of Tools and Hacking Methods
- Hands-On experience conducting your own penetration test
- Project Management Processes and Techniques
- Documenting Your Results
Advanced training in Professional Penetration Testing is available for those interested in becoming experts in their field. The Sandan Certified Penetration Tester course focuses on web-based attacks targeting both applications and databases. Students must have successfully completed the Nidan Certified Penetration Tester course before they can attend the 3DCPT course. The course covers the following topics:
- Introduction to Databases
- Database Architectures
- Understanding SQL
- Common Attacks
- SQL Injections
- Remote Port Attacks
- Host Attacks
- Web Server Attacks
- Application Attacks
- SQL Injections
- Authorization Bypass
- Application Flaws
- Cross Site Scripting
- Web 2.0
- Application Fuzzing
The ability to attack network protocols and devices can improve the chances of success during a professional penetration test. The Yondan Certified Penetration Tester course focuses on network attacks and how to evade network appliances, such as firewalls and intrusion detection systems. Students must have successfully completed the Sandan Certified Penetration Tester course before they can attend the 4DCPT course. The course covers the following topics:
- Networking Protocols
- Wireless Encryption Attacks
- Shells / Reverse Shells
- Protocol Tunneling
- Protocol Hacking
- Pivot Attacks
- Evasion and Enumeration
- Firewalls and Firewall Rules
- Attacking Rulesets
- Attacking Firewall OSes
- Intrusion Detection Systems
- Alert Signatures
- IDS Avoidance Techniques
- Attacking IDS Application
The Godan Certified Penetration Tester course represents the pinnacle of professional penetration testing, and concentrates on dissecting and creating application exploits. Students must have successfully completed the Yondan Certified Penetration Tester course before they can attend the 5DCPT course. The course covers the following topics:
- Malware Analysis Lab Configuration
- Windows x86 Assembly Code Concepts
- Reverse-Engineering Malware
- Identify and Exploit Buffer Overflows
- Circumvention of Access Restrictions