Heorot.net

Advanced training in Professional Penetration Testing is available for those interested in becoming experts in their field. The Sandan Certified Penetration Tester course focuses on web-based attacks targeting both applications and databases. Students must have successfully completed the Nidan Certified Penetration Tester course before they can attend the 3DCPT course. The course covers the following topics:

• Introduction to Databases
• Database Architectures
• Understanding SQL
• Common Attacks
• SQL Injections
• Remote Port Attacks
• Host Attacks
• Web Server Attacks
• Application Attacks
• SQL Injections
• Authorization Bypass
• Application Flaws
• Cross Site Scripting
• Web 2.0
• Application Fuzzing

By the end of the course, the student will be able to conduct and document a penetration test against web-based attacks targeting both applications and databases. Successful completion of the course includes the student providing a finished document to the instructor of their independent penetration testing project as detailed by the OSSTMM standards. The penetration test required for course completion will be against one of the course-provided LiveCDs. This LiveCD has not been released to the general public, and will only be available through the course offering.

This course is available only through online access, and requires the student to have a fast Internet connection to view the videos. In addition, the course will provide two LiveCD images that the student will download and create using CD-creating software. The student should also have a reasonable familiarity with the Linux operating system and common commands to complete this course.

Cost for this course is $1495, and includes a copy of the Professional Penetration Testing book, published by Syngress, as well as additional manuals that can provide detailed information about web and database hacking. Instruction is provided through video format which can be viewed during your schedule. Each student will have access to the videos for 180 days from the date of enrollment. Submission of the student’s independent penetration test documentation must occur within 120 days from the date of enrollment, in order to obtain a Certificate of Completion. This document will be evaluated for completeness and adherence to the OSSTMM methodology, and successful exploitation of the LiveCD target server before any certificate of completion is to be awarded. To register, please click on the button below: