OTechs Hacking and Penetration Testing Course

1. OTechs
for Hi-Techs
*‫المحدودة‬ ‫المتطورة‬ ‫للتقنيات‬ ‫أوتيكس‬ ‫شركة‬*
OTechs for Developed Technologies Co. ltd
Hacking and Penetration Testing
Training Course
WEB: www.otechs.org
EMAIL: info@otechs.org
PHONE: +249 - 183 403 559
WHATSAPP: +249 - 183 403 559
FACEBOOK: www.facebook.com/otechs.org

2. Course Duration: 5 Days ( 40 Hours )
Audience: System Administrators, Security Professionals, IT Professionals
Course Deliverability: On-site (world widely) , Online
Fees / trainee: EUR 1500
1. Introduction to Kali and Pen Testing
1. History of Kali
2. Kali Linux Installation
3. Basic Commands
4. Linux/Unix Architecture
2. Setup The LAB
1. Introduction to Virtualization
2. VirtualBox
3. VMWare
4. Dynamips
5. GNS3
6. Set up your own LAB
7. Access OTechs LAB

3. 3. Penetration Testing Methodologies
1. Open Source Security Methodology Manual
2. Penetration Testing Execution Standard
3. Open Source WEB Application Security Project
4. Information Systems Security Assessment Framework
5. WEB Application Security Consortium Threat Classification
4. Pen Test Scope
1. Client Requirements
2. Pen Testing Plan
5. Reconnaissance
1. Passive Reconnaissance
2. DNS Information Gathering
3. Subdomains
4. whois
5. Gather Contact Information
6. Google Reconnaissance
7. Google Hacking Database
8. Network Enumeration
9. Dmitry
10. Goofile
11. Maltego
12. Discover Scripts
13. WEB Based Tools

4. 6. Target Discovery
1. Layer 2 Discovery
2. Layer 3 Discovery
3. Network Discovery
4. Host Discovery
5. Scapy
7. Enumeration
1. OS Enumeration
2. Service Enumeration
3. NMAP Scanning
4. ZenMap Scanning
5. Zombie Scanning
6. WireShark
7. SMB Enumeration
8. SNMP Enumeration
9. VPN Enumeration
8. Vulnerability Scanning
1. Network Vulnerability Scanners
2. MetaSploit Auxiliary Scan
3. Nessus Scanning
4. OpenVAS Scanning
5. WEB Vulnerability Scanners
6. Cisco Vulnerability Scanners
7. Fuzzy Analysis

5. 9. Exploitation
1. Introduction to Metasloit
2. Exploit Repositories
3. Meterpreter Basics
4. Meterpreter Advanced Exploitation
5. MSFConsole and MSFCLI
6. Armitage
7. Write You Exploitation
10.Maintaining Access
1. Post Exploitation
2. Persistence
11. Brute Forcing
1. Custom Password Lists
2. Hash Identifier
3. Rainbow Tables and opcrack
4. Hydra
5. John The Ripper
6. Xhydra and Johnny
7. SSH Bruttte Forcing
8. RDP Brute Forcing
9. WEB Forms Authentication Brute Forcing

6. 12.Man in The Middle Attack
1. ARP Spoofing
2. Ettercap
3. DNS Spoofing
4. Xplico
5. Wireshark
13.WEB Application Penetration Testing
1. WAF Scan
2. Load Balancer Scan
3. WEB Site Scrawling
4. Burp Suite
5. Copy WEB Site
6. SSL Scanning
7. WordPress Scanning
8. Joomla Scanning
9. Session Tokens
10. SQL Injection
11. Denial of Service

7. 14.Social Engineering
1. Social Engineering Toolkit
2. Spear Fishing Attack
3. Powershell Attack
4. Credential Harvester
15.Wireless Peneteration Testing
1. Wireless Reconnaissance
2. Bypassing Hidden ESSIDs
3. ByPassing MAC Filtering
4. WEP Attack
5. WPA/WPA2 Attack
6. Wireless Miss-Association Attack
7. Wireless MITM Attack
16.Cisco Penetration Testing
1. Cisco Exploit Scanner
2. VLAN Hopping Attack
3. CDP Flooding Attack
4. STP Attack
5. HSRP Attack
6. DTP Attack
7. 802.1q Attack
8. SSL VPN Exploit

8. 17.Advanced Miscellaneous Attacks
1. Finding Exploits
2. AV Bypassing
3. Firewall Bypassing
4. IDS ByPassing
5. DHCP Starvation
6. Metasploit RC Scripts
7. Pivot Point Attack
8. DOS/DDOS Attack
9. Attacking the Domain Controller
18.IPv6 Penetration Testing
1. IPv6 Host Discovery
2. NDP DAD Attack
3. NDP RA Flooding
4. NDP NA Flooding
5. Rogue IPv6 RA
6. IPv6 Smurf
7. IPv6 MITM Attack