Penetration Testing for IT Pros: One Day Class

Please join us for our virtual Penetration Testing for IT Pros class on Thursday, October 5th, 2023!

Find your weaknesses before the hackers do! In order to effectively defend your IT infrastructure, you need to explore your network in the same way as hackers. This practical, hands-on class will teach you to do just that: pentest your own network. Along the way, we’ll cover detailed remediation tips and test out various techniques for stopping attackers and ensuring that your changes work.

We’ll start by hacking from the outside. Learn how attackers gain an initial foothold in your environment. We’ll practice identifying the attack surface, conducting Open Source Intelligence Gathering (OSINT), scanning for vulnerabilities, and using passive reconnaissance tools. Next, we’ll dive into actual exploitation and persistence, including a live demo of VPN hacking, in which we brute-force an IKE shared secret and obtain credentials by performing an SMB egress attack.

In the next phase, students will learn to conduct internal penetration tests. Once a hacker has a foothold in your environment, they will work to move laterally and expand access. Practice hacking your own environment, starting with unprivileged access to a simple workstation. We’ll show you how hackers target active directory, poison traffic, redirect user traffic against key services such as LDAP, gain access to sensitive file shares, and more. Students will poison traffic and capture NTLMv2 hashes to crack offline. We will use Responder in conjunction with NTLMRelayX to relay authentication to actual servers and gain access to other services.

Ultimately, students will execute a full network takeover, escalating privileges from no user access to full domain admin. We will practice techniques for privilege escalation, pass-the-hash attacks, and more.

Once you’ve hacked yourself, it’s time to fix the problems! Throughout class, we’ll discuss various corrective actions that can be used to harden your environment.

The most effective IT defenders have offensive experience. Learn to hack your own network—and fix the issues—in this practical penetration testing class for IT professionals.

Time:  

8AM – 5PM MT on Thursday, October 5th, 2023, with 2 days worth of labs post-class

Location:  

Missoula, MT

Pricing: 

$850 Early Bird Registration ends September 1st, 2023 

$950 Regular Registration ends September 22nd, 2023

Speakers