SECOF01 - Attack to better defend yourself

PROGRAM:

Day 1 - Introduction

• Introduction and reminders
• ISS issues
• Become aware...
  • Main threat models
  • Main categories of attack
  • Main types of vulnerabilities
• Offensive security audit approach (methodology and approach)
• CVSS qualification
• Network and application vulnerabilities (OWASP Top 10)
• Network scanning and enumeration
• Setting up the test environment

Day 2 - Network

• Network attacks (MAC attack, DHCP attack, ARP Poisoning, DoS, etc.)
• Practical work: putting it into practice

Day 3 - Web

• Web attacks (SQL injection, command injection, CSRF, etc.)
• Practical work: putting it into practice

Day 4 - Applications

• Application attacks (buffer overflow, registers, stack, etc.)
• Practical work: putting it into practice

Day 5 - Crypto

• Offensive approach to cryptography (symmetric, asymmetric and hashing)
• Final exam