Ağ ve Siber Güvenlik Eğitimi

Ağ güvenliği, erişim kontrolü ve güvenli işletim konularında ihtiyaca göre yapılandırılmış eğitim başlıkları.

Güvenlik ilkeleri ve ağ segmentasyonu
Erişim kontrolü ve güvenlik cihazları
Yetkili laboratuvarda savunma ve analiz senaryoları

Ayrıntılı tarihsel program arşivi

Forefront TMG

Bu arşivlenmiş orijinal tarihsel bir müfredattır. Metinde yeniden üretilen tüm eski sınav/versiyon/partner/yetkilendirme/fiyatlandırma/zaman çizelgesi/teslimat iddiaları DOĞRULANMAMIŞ TARİHSEL iddialardır; güncel CLIGURU vaatleri veya güncel sertifika eşdeğerleri DEĞİLDİR.

Orijinal kaynaklar: https://cliguru.net/egitimler/forefront-tmg/ · https://www.cliguru.com/FOREFRONT

Microsoft Forefront Threat Management Gateway 2010 Eğitim İçeriği

Kurs Tanımı:

Microsoft Forefront Threat Management Gateway 2010 (TMG) kurulumu ve yönetimi hakkında bilgi sahibi yapmaya yönelik hazırlanan eğitim sonunda katılımcılar bu çözümü kurma, ayarlarını tamamlama ve kullanımı hakkındaki bilgi sahibi olurlar.

Öngereksinimler:

Microsoft Active Directory yapısına hakim olmak.

Implementing Forefront Threat Management Gateway 2010 (Course 50357B)

Kurs İçeriği:

Eğitim 1 – Forefront Threat Management Gateway (TMG) 2010 Overview
This module explains the new features introduced in Forefront TMG 2010, the different deployment scenarios for the product, and introduces the basic concepts used in its configuration.

Introduction to Forefront TMG
Installation and Initial Setup
Basic Configuration Concepts

Lab : Installing Forefront Threat Management Gateway 2010
Install Forefront TMG on a Windows Server 2008 R2 server
Perform an initial configuration of Forefront TMG using the Getting Started wizards

Eğitim 2 – Secure Web Gateway
This module explains the new features introduced in Forefront TMG 2010, and how they can be used to enable users to securely and safely browse the Web.

Secure Web Gateway Overview
HTTPS Inspection
URL Filtering
Malware Protection
Intrusion Prevention

Lab : Secure Web Gateway
Create web access policies for Contoso users, including inspection of HTTPS sessions
Modify web access policy to include protection from malware
Investigate the Network Inspection System (NIS)

Eğitim 3 – Remote Access Gateway
This module explains the new features introduced in Forefront TMG 2010 can be used to enable users to securely access corporate network resources from anywhere.

Remote Access Gateway Overview
Non-HTTP Server Publishing
Web Publishing
Virtual Private Networking (VPN) Connectivity

Lab : Remote Access Gateway
Use Web Publishing to publish Exchange Web Services

Eğitim 4 – Secure Mail Relay
This module explains how Forefront TMG 2010 and Forefront Protection 2010 for Exchange Server can work together with Microsoft Exchange Server to provide premium protection from spam and malware.

Secure Mail Relay Overview
Solution Components
Configuring SMTP Protection

Lab : Secure Mail Relay
Install Active Directory LDS and Exchange Edge Server
Install Forefront Protection 2010 for Exchange Server
Install Forefront Threat Management Gateway
Configure Exchange EdgeSync
Define an E-mail Policy

Eğitim 5 – Forefront TMG 2010 Design and Deployment Considerations
This module explains the common deployment scenarios for Forefront TMG 2010, and what to consider when designing Forefront TMG 2010 solutions.

Logical Design Considerations
Scalability and Availability
Client Configuration
Migration Options

Lab : Managing Message Transport
Configuring Internet Message Transport
Troubleshooting Message Transport
Troubleshooting Internet Message Delivery

Modülleri, hedefleri ve ön koşulları karşılaştırarak okuyabilirsiniz; güncel kapsam için mevcut iletişim kanalları üzerinden iletişime geçiniz.

EC-Council

Orijinal kaynaklar: https://cliguru.net/egitimler/ec-council/ · https://www.cliguru.com/BeyazSapkaliHacker

CEH Eğitimi İçeriği

Öngereksinimler:

Microsoft ve Linux Sistemleri hakkında bilgi, giriş seviye network bilgisi.

Kurs Tanımı:

CEH katılımcıları deneyimli güvenlik uzmanlarının seviyesine yükseltmek için detaylı bir Ethical Hacking ve network güvenliği eğitimi programıdır.

Kurs İçeriği:

Eğitim 1 – Introduction to Ethical Hacking
Eğitim 2 – Footprinting and Reconnaissance
Eğitim 3 – Scanning Networks
Eğitim 4 – Enumeration
Eğitim 5 – Vulnerability Analysis
Eğitim 6 – System Hacking
Eğitim 7 – Malware Threats
Eğitim 8 – Sniffing
Eğitim 9 – Social Engineering
Eğitim 10 – Denial of Service
Eğitim 11 – Session Hijacking
Eğitim 12 – Evading IDS, Firewalls and Honeypots
Eğitim 13 – Hacking Webservers
Eğitim 14 – Hacking Web Applications
Eğitim 15 – SQL Injection
Eğitim 16 – Hacking Wireless Networks
Eğitim 17 – Hacking Mobile Platforms
Eğitim 18 – IoT Hacking and OT Hacking
Eğitim 19 – Cloud Computing
Eğitim 20 – Cryptography

Ayrıntılı İçerik:

Eğitim 1 – Introduction to Ethical Hacking

Internet Crime Current Report: IC3
Data Breach Investigations Report
Types of Data Stolen From the Organizations
Essential Terminologies
Elements of Information Security
Authenticity and Non-Repudiation
The Security, Functionality, and Usability Triangle
Security Challenges
Effects of Hacking

Effects of Hacking on Business

Who is a Hacker?
Hacker Classes
Hacktivism
What Does a Hacker Do?
Phase 1 – Reconnaissance

Reconnaissance Types

Phase 2 – Scanning
Phase 3 – Gaining Access
Phase 4 – Maintaining Access
Phase 5 – Covering Tracks
Types of Attacks on a System

Operating System Attacks
Application-Level Attacks
Shrink Wrap Code Attacks
Misconfiguration Attacks

Why Ethical Hacking is Necessary?
Defense in Depth
Scope and Limitations of Ethical Hacking
What Do Ethical Hackers Do?
Skills of an Ethical Hacker
Vulnerability Research
Vulnerability Research Websites
What is Penetration Testing?
Why Penetration Testing?
Penetration Testing Methodology

Eğitim 2 – Footprinting and Reconnaissance

Footprinting Terminologies
What is Footprinting?
Objectives of Footprinting
Footprinting Threats
Finding a Company’s URL
Locate Internal URLs
Public and Restricted Websites
Search for Company’s Information

Tools to Extract Company’s Data

Footprinting Through Search Engines
Collect Location Information

Satellite Picture of a Residence

People Search

People Search Using http://pipl.com
People Search Online Services
People Search on Social Networking Services

Gather Information from Financial Services
Footprinting Through Job Sites
Monitoring Target Using Alerts
Competitive Intelligence Gathering

Competitive Intelligence-When Did this Company Begin? How Did it Develop?
Competitive Intelligence-What are the Company’s Plans?
Competitive Intelligence-What Expert Opinion Say About the Company?
Competitive Intelligence Tools
Competitive Intelligence Consulting Companies

WHOIS Lookup

WHOIS Lookup
WHOIS Lookup Tools: SmartWhois
WHOIS Lookup Tools
WHOIS Lookup Online Tools

Extracting DNS Information

DNS Interrogation Tools
DNS Interrogation Online Tools

Locate the Network Range

Traceroute

Traceroute Analysis
Traceroute Tool: 3D Traceroute
Traceroute Tool: LoriotPro
Traceroute Tool: Path Analyzer Pro
Traceroute Tools

Mirroring Entire Website

Website Mirroring Tools
Mirroring Entire Website Tools

Extract Website Information from http://www.archive.org

Monitoring Web Updates Using Website Watcher

Tracking Email Communications

Email Tracking Tools

Footprint Using Google Hacking Techniques

What a Hacker Can Do With Google Hacking?

Google Advance Search Operators

Finding Resources using Google Advance Operator

Google Hacking Tool: Google Hacking Database (GHDB)

Google Hacking Tools

Additional Footprinting Tools

Footprinting Pen Testing

Eğitim 3 – Scanning Networks

Network Scanning
Types of Scanning
Checking for Live Systems – ICMP Scanning
Ping Sweep

Ping Sweep Tools

Three-Way Handshake
TCP Communication Flags

Create Custom Packet using TCP Flags

Create Custom Packet using TCP Flags
Hping Commands
Scanning Techniques

TCP Connect / Full Open Scan
Stealth Scan (Half-open Scan)
Xmas Scan
FIN Scan
NULL Scan
IDLE Scan

IDLE Scan: Step 1
IDLE Scan: Step 2.1 (Open Port)
IDLE Scan: Step 2.1 (Open Port)
IDLE Scan: Step 3

ICMP Echo Scanning/List Scan
SYN/FIN Scanning Using IP Fragments
UDP Scanning
Inverse TCP Flag Scanning
ACK Flag Scanning

Scanning: IDS Evasion Techniques
IP Fragmentation Tools
Scanning Tool: Nmap
Scanning Tool: NetScan Tools Pro
Scanning Tools
Do Not Scan These IP Addresses (Unless you want to get into trouble)
Scanning Countermeasures
War Dialing
Why War Dialing?
War Dialing Tools
War Dialing Countermeasures

War Dialing Countermeasures: SandTrap Tool

OS Fingerprinting

Active Banner Grabbing Using Telnet

Banner Grabbing Tool: ID Serve
GET REQUESTS
Banner Grabbing Tool: Netcraft
Banner Grabbing Tools
Banner Grabbing Countermeasures: Disabling or Changing Banner
Hiding File Extensions
Hiding File Extensions from Webpages
Vulnerability Scanning

Vulnerability Scanning Tool: Nessus
Vulnerability Scanning Tool: SAINT
Active Banner Grabbing Using Telnet

Network Vulnerability Scanners
LANsurveyor
Network Mappers
Proxy Servers
Why Attackers Use Proxy Servers?
Use of Proxies for Attack
How Does MultiProxy Work?
Free Proxy Servers
Proxy Workbench
Proxifier Tool: Create Chain of Proxy Servers
SocksChain
TOR (The Onion Routing)
TOR Proxy Chaining Software
HTTP Tunneling Techniques
Why do I Need HTTP Tunneling?
Super Network Tunnel Tool
Httptunnel for Windows
Additional HTTP Tunneling Tools
SSH Tunneling
SSL Proxy Tool
How to Run SSL Proxy?
Proxy Tools
Anonymizers
Types of Anonymizers
Case: Bloggers Write Text Backwards to Bypass Web Filters in China
Text Conversion to Avoid Filters
Censorship Circumvention Tool: Psiphon
How Psiphon Works?
How to Check if Your Website is Blocked in China or Not?
How to Check if Your Website is Blocked in China or Not?
Anonymizer Tools
Spoofing IP Address
IP Spoofing Detection Techniques: Direct TTL Probes
IP Spoofing Detection Techniques: IP Identification Number
IP Spoofing Detection Techniques: TCP Flow Control Method
IP Spoofing Countermeasures
Scanning Pen Testing

Eğitim 4 – Enumeration

What is Enumeration?
Techniques for Enumeration
Netbios Enumeration

NetBIOS Enumeration Tool: SuperScan
NetBIOS Enumeration Tool: NetBIOS Enumerator

Enumerating User Accounts
Enumerate Systems Using Default Passwords
SNMP (Simple Network Management Protocol) Enumeration

Management Information Base (MIB)
SNMP Enumeration Tool: OpUtils Network Monitoring Toolset
SNMP Enumeration Tool: SolarWinds
SNMP Enumeration Tools

UNIX/Linux Enumeration

Linux Enumeration Tool: Enum4linux

LDAP Enumeration

LDAP Enumeration Tool: JXplorer
LDAP Enumeration Tool

NTP Enumeration

NTP Server Discovery Tool: NTP Server Scanner
NTP Server: PresenTense Time Server
NTP Enumeration Tools

SMTP Enumeration

SMTP Enumeration Tool: NetScanTools Pro

DNS Zone Transfer Enumeration Using nslookup

DNS Analyzing and Enumeration Tool: The Men & Mice Suite

Enumeration Countermeasures

SMB Enumeration Countermeasures

Enumeration Pen Testing

Eğitim 5 – System Hacking

Information at Hand Before System Hacking Stage
System Hacking: Goals
CEH Hacking Methodology (CHM)
Password Cracking

Password Complexity
Password Cracking Techniques
Types of Password Attacks

Passive Online Attacks: Wire Sniffing
Password Sniffing
Passive Online Attack: Man-in-the-Middle and Replay Attack
Active Online Attack: Password Guessing

Active Online Attack: Trojan/Spyware/Keylogger
Active Online Attack: Hash Injection Attack

Rainbow Attacks: Pre-Computed Hash
Distributed Network Attack

Elcomsoft Distributed Password Recovery

Non-Electronic Attacks

Default Passwords

Manual Password Cracking (Guessing)
Automatic Password Cracking Algorithm
Stealing Passwords Using USB Drive

Microsoft Authentication
How Hash Passwords are Stored in Windows SAM?
What is LAN Manager Hash?

LM “Hash” Generation
LM, NTLMv1, and NTLMv2
NTLM Authentication Process

Kerberos Authentication
Salting
PWdump7 and Fgdump
L0phtCrack
Ophcrack
Cain & Abel
RainbowCrack
Password Cracking Tools
LM Hash Backward Compatibility

How to Disable LM HASH?

How to Defend against Password Cracking?

Implement and Enforce Strong Security Policy

Privilege Escalation

Escalation of Privileges

Active@ Password Changer
Privilege Escalation Tools
How to Defend against Privilege Escalation?
Executing Applications
Alchemy Remote Executor
RemoteExec
Execute This!
Keylogger
Types of Keystroke Loggers
Acoustic/CAM Keylogger

Keylogger: Advanced Keylogger
Keylogger: Spytech SpyAgent
Keylogger: Perfect Keylogger
Keylogger: Powered Keylogger
Keylogger for Mac: Aobo Mac OS X KeyLogger
Keylogger for Mac: Perfect Keylogger for Mac
Hardware Keylogger: KeyGhost

Keyloggers
Spyware

What Does the Spyware Do?
Types of Spywares

Desktop Spyware

Desktop Spyware: Activity Monitor

Email and Internet Spyware

Email and Internet Spyware: eBLASTER

Internet and E-mail Spyware
Child Monitoring Spyware

Child Monitoring Spyware: Advanced Parental Control

Screen Capturing Spyware

Screen Capturing Spyware: Spector Pro

USB Spyware

USB Spyware: USBDumper

Audio Spyware

Audio Spyware: RoboNanny, Stealth Recorder Pro and Spy Voice Recorder

Video Spyware /li>
- Video Spyware: Net Video Spy
Print Spyware

Print Spyware: Printer Activity Monitor

Telephone/Cellphone Spyware
Cellphone Spyware: Mobile Spy
GPS Spyware

GPS Spyware: GPS TrackMaker

How to Defend against Keyloggers?

Anti-Keylogger
Anti-Keylogger: Zemana AntiLogger
Anti-Keyloggers

How to Defend against Spyware?

Anti-Spyware: Spyware Doctor

Rootkits
Types of Rootkits
How Rootkit Works?
Rootkit: Fu
Detecting Rootkits

Steps for Detecting Rootkits

How to Defend against Rootkits?
Anti-Rootkit: RootkitRevealer and McAfee Rootkit Detective
NTFS Data Stream

How to Create NTFS Streams?
NTFS Stream Manipulation
How to Defend against NTFS Streams?
NTFS Stream Detector: ADS Scan Engine
NTFS Stream Detectors

What is Steganography?

Steganography Techniques
How Steganography Works?

Types of Steganography

Whitespace Steganography Tool: SNOW

Image Steganography

Image Steganography: Hermetic Stego
Image Steganography Tools

Document Steganography: wbStego

Document Steganography Tools

Video Steganography: Our Secret

Video Steganography Tools

Audio Steganography: Mp3stegz

Audio Steganography Tools

Folder Steganography: Invisible Secrets 4

Folder Steganography Tools

Spam/Email Steganography: Spam Mimic
Natural Text Steganography: Sams Big G Play Maker
Steganalysis

Steganalysis Methods/Attacks on Steganography

Steganography Detection Tool: Stegdetect

Steganography Detection Tools

Why Cover Tracks?

Covering Tracks

Ways to Clear Online Tracks
Disabling Auditing: Auditpol
Covering Tracks Tool: Window Washer
Covering Tracks Tool: Tracks Eraser Pro

Track Covering Tools

System Hacking Penetration Testing

Eğitim 6 – Trojans and Backdoors

What is a Trojan?
Overt and Covert Channels
Purpose of Trojans
What Do Trojan Creators Look For?
Indications of a Trojan Attack
Common Ports used by Trojans
How to Infect Systems Using a Trojan?
Wrappers

Wrapper Covert Programs

Different Ways a Trojan can Get into a System
How to Deploy a Trojan?
Evading Anti-Virus Techniques
Types of Trojans

Command Shell Trojans

Command Shell Trojan: Netcat

GUI Trojan: MoSucker

GUI Trojan: Jumper and Biodox

Document Trojans
E-mail Trojans

E-mail Trojans: RemoteByMail

Defacement Trojans

Defacement Trojans: Restorator

Botnet Trojans

Botnet Trojan: Illusion Bot
Botnet Trojan: NetBot Attacker

Proxy Server Trojans

Proxy Server Trojan: W3bPrOxy Tr0j4nCr34t0r (Funny Name)

FTP Trojans

FTP Trojan: TinyFTPD

VNC Trojans
HTTP/HTTPS Trojans

HTTP Trojan: HTTP RAT

Shttpd Trojan – HTTPS (SSL)
ICMP Tunneling

ICMP Trojan: icmpsend

Remote Access Trojans

Remote Access Trojan: RAT DarkComet
Remote Access Trojan: Apocalypse

Covert Channel Trojan: CCTT
E-banking Trojans
Banking Trojan Analysis

E-banking Trojan: ZeuS

Destructive Trojans
Notification Trojans
Credit Card Trojans
Data Hiding Trojans (Encrypted Trojans)
BlackBerry Trojan: PhoneSnoop
MAC OS X Trojan: DNSChanger
MAC OS X Trojan: DNSChanger
Mac OS X Trojan: Hell Raiser
How to Detect Trojans?

Scanning for Suspicious Ports
Port Monitoring Tool: IceSword
Port Monitoring Tools: CurrPorts and TCPView
Scanning for Suspicious Processes

Process Monitoring Tool: What’s Running

Process Monitoring Tools

Scanning for Suspicious Registry Entries
Registry Entry Monitoring Tools
Scanning for Suspicious Device Drivers

Device Drivers Monitoring Tools: DriverView
Device Drivers Monitoring Tool

Scanning for Suspicious Windows Services

Windows Services Monitoring Tools: Windows Service Manager (SrvMan)
Windows Services Monitoring Tools

Scanning for Suspicious Startup Programs

Windows7 Startup Registry Entries
Startup Programs Monitoring Tools: Starter
Startup Programs Monitoring Tools: Security AutoRun
Startup Programs Monitoring Tools

Scanning for Suspicious Files and Folders

Files and Folder Integrity Checker: FastSum and WinMD5
Files and Folder Integrity Checker

Scanning for Suspicious Network Activities

Detecting Trojans and Worms with Capsa Network Analyzer

Trojan Countermeasures
Backdoor Countermeasures
Trojan Horse Construction Kit
Anti-Trojan Software: TrojanHunter
Anti-Trojan Software: Emsisoft Anti-Malware
Anti-Trojan Softwares
Pen Testing for Trojans and Backdoors

Eğitim 7 – Viruses and Worms

Introduction to Viruses
Virus and Worm Statistics 2010
Stages of Virus Life
Working of Viruses: Infection Phase
Working of Viruses: Attack Phase
Why Do People Create Computer Viruses?
Indications of Virus Attack
How does a Computer get Infected by Viruses?
Virus Hoaxes
Virus Analysis:

W32/Sality AA
W32/Toal-A
W32/Virut
Klez

Types of Viruses

System or Boot Sector Viruses
File and Multipartite Viruses
Macro Viruses
Cluster Viruses
Stealth/Tunneling Viruses
Encryption Viruses
Polymorphic Code
Metamorphic Viruses
File Overwriting or Cavity Viruses
Sparse Infector Viruses
Companion/Camouflage Viruses
Shell Viruses
File Extension Viruses
Add-on and Intrusive Viruses

Transient and Terminate and Stay Resident Viruses
Writing a Simple Virus Program

Terabit Virus Maker
JPS Virus Maker
DELmE’s Batch Virus Maker

Computer Worms
How is a Worm Different from a Virus?
Example of Worm Infection: Conficker Worm

What does the Conficker Worm do?
How does the Conficker Worm Work?

Worm Analysis:

W32/Netsky
W32/Bagle.GE

Worm Maker: Internet Worm Maker Thing
What is Sheep Dip Computer?
Anti-Virus Sensors Systems
Malware Analysis Procedure
String Extracting Tool: Bintext
Compression and Decompression Tool: UPX
Process Monitoring Tools: Process Monitor
Log Packet Content Monitoring Tools: NetResident
Debugging Tool: Ollydbg
Virus Analysis Tool: IDA Pro
Online Malware Testing:

Sunbelt CWSandbo
VirusTotal

Online Malware Analysis Services
Virus Detection Methods
Virus and Worms Countermeasures
Companion Antivirus: Immunet Protect
Anti-virus Tools
Penetration Testing for Virus

Eğitim 8 – Sniffers

Lawful Intercept

Benefits of Lawful Intercept
Network Components Used for Lawful Intercept

Wiretapping
Sniffing Threats
How a Sniffer Works?
Hacker Attacking a Switch
Types of Sniffing: Passive Sniffing
Types of Sniffing: Active Sniffing
Protocols Vulnerable to Sniffing
Tie to Data Link Layer in OSI Model
Hardware Protocol Analyzers
SPAN Port
MAC Flooding

MAC Address/CAM Table
How CAM Works?
What Happens When CAM Table is Full?
Mac Flooding Switches with macof
MAC Flooding Tool: Yersinia
How to Defend against MAC Attacks?

How DHCP Works?

DHCP Request/Reply Messages
IPv4 DHCP Packet Format
DHCP Starvation Attack
Rogue DHCP Server Attack
DHCP Starvation Attack Tool: Gobbler
How to Defend Against DHCP Starvation and Rogue Server Attack?

What is Address Resolution Protocol (ARP)?

ARP Spoofing Attack
How Does ARP Spoofing Work?
Threats of ARP Poisoning
ARP Poisoning Tool: Cain and Abel
ARP Poisoning Tool: WinArpAttacker
ARP Poisoning Tool: Ufasoft Snif
How to Defend Against ARP Poisoning? Use DHCP Snooping Binding Table and Dynamic ARP Inspection

Configuring DHCP Snooping and Dynamic ARP Inspection on Cisco Switches
MAC Spoofing/Duplicating

Spoofing Attack Threats
MAC Spoofing Tool: SMAC
How to Defend Against MAC Spoofing? Use DHCP Snooping Binding Table, Dynamic ARP Inspection and IP Source Guard

DNS Poisoning Techniques

Intranet DNS Spoofing
Internet DNS Spoofing
Proxy Server DNS Poisoning
DNS Cache Poisoning
How to Defend Against DNS Spoofing?

Sniffing Tool: Wireshark

Follow TCP Stream in Wireshark
Display Filters in Wireshark
Additional Wireshark Filters

Sniffing Tool: CACE Pilot
Sniffing Tool: Tcpdump/Windump
Discovery Tool: NetworkView
Discovery Tool: The Dude Sniffer
Password Sniffing Tool: Ace
Packet Sniffing Tool: Capsa Network Analyzer
OmniPeek Network Analyzer
Network Packet Analyzer: Observer
Session Capture Sniffer: NetWitness
Email Message Sniffer: Big-Mother
TCP/IP Packet Crafter: Packet Builder
Additional Sniffing Tools
How an Attacker Hacks the Network Using Sniffers?
How to Defend Against Sniffing?
Sniffing Prevention Techniques
How to Detect Sniffing?
Promiscuous Detection Tool: PromqryUI
Promiscuous Detection Tool: PromiScan

Eğitim 9 – Social Engineering

What is Social Engineering?
Behaviors Vulnerable to Attacks

Factors that Make Companies Vulnerable to Attacks

Why is Social Engineering Effective?
Warning Signs of an Attack
Phases in a Social Engineering Attack
Impact on the Organization
Command Injection Attacks
Common Targets of Social Engineering

Common Targets of Social Engineering: Office Workers

Types of Social Engineering

Human-Based Social Engineering

Types of Social Engineering

Human-Based Social Engineering

Technical Support Example
Authority Support Example
Human-based Social Engineering: Dumpster Diving

Computer-Based Social Engineering

Computer-Based Social Engineering: Pop-Ups
Computer-Based Social Engineering: Phishing

Social Engineering Using SMS
Social Engineering by a “Fake SMS Spying Tool”

Insider Attack

Disgruntled Employee
Preventing Insider Threats

Common Intrusion Tactics and Strategies for Prevention

Social Engineering Through Impersonation on Social Networking Sites

Social Engineering Example: LinkedIn Profile
Social Engineering on Facebook
Social Engineering on Twitter
Social Engineering on Orkut
Social Engineering on MySpace

Risks of Social Networking to Corporate Networks

Identity Theft Statistics 2010

Identify Theft
How to Steal an Identity?
STEP 1
STEP 2
STEP 3

Real Steven Gets Huge Credit Card Statement

Identity Theft – Serious Problem

Social Engineering Countermeasures: Policies

Social Engineering Countermeasures

How to Detect Phishing Emails?

Anti-Phishing Toolbar: Netcraft
Anti-Phishing Toolbar: PhishTank

Identity Theft Countermeasures

Social Engineering Pen Testing

Social Engineering Pen Testing: Using Emails
Social Engineering Pen Testing: Using Phone
Social Engineering Pen Testing: In Person

Eğitim 10 – Denial of Service

What is a Denial of Service Attack?
What is Distributed Denial of Service Attacks?

How Distributed Denial of Service Attacks Work?

Symptoms of a DoS Attack
Cyber Criminals

Organized Cyber Crime: Organizational Chart

Internet Chat Query (ICQ)
Internet Relay Chat (IRC)
DoS Attack Techniques

Bandwidth Attacks
Service Request Floods
SYN Attack
SYN Flooding
ICMP Flood Attack
Peer-to-Peer Attacks
Permanent Denial-of-Service Attack
Application Level Flood Attacks

Botnet

Botnet Propagation Technique
Botnet Ecosystem
Botnet Trojan: Shark
Poison Ivy: Botnet Command Control Center
Botnet Trojan: PlugBot

WikiLeak Operation Payback

DDoS Attack
DDoS Attack Tool: LOIC
Denial of Service Attack Against MasterCard, Visa, and Swiss Banks
Hackers Advertise Links to Download Botnet

DoS Attack Tools
Detection Techniques

Activity Profiling
Wavelet Analysis
Sequential Change-Point Detection

DoS/DDoS Countermeasure Strategies
DDoS Attack Countermeasures

DoS/DDoS Countermeasures: Protect Secondary Victims
DoS/DDoS Countermeasures: Detect and Neutralize Handlers
DoS/DDoS Countermeasures: Detect Potential Attacks
DoS/DDoS Countermeasures: Deflect Attacks
DoS/DDoS Countermeasures: Mitigate Attacks

Post-attack Forensics
Techniques to Defend against Botnets
DoS/DDoS Countermeasures
DoS/DDoS Protection at ISP Level
Enabling TCP Intercept on Cisco IOS Software
Advanced DDoS Protection: IntelliGuard DDoS Protection System (DPS)
DoS/DDoS Protection Tool
Denial of Service (DoS) Attack Penetration Testing

Eğitim 11 – Session Hijacking

What is Session Hijacking?
Dangers Posed by Hijacking
Why Session Hijacking is Successful?
Key Session Hijacking Techniques
Brute Forcing

Brute Forcing Attack

HTTP Referrer Attack
Spoofing vs. Hijacking
Session Hijacking Process
Packet Analysis of a Local Session Hijack
Types of Session Hijacking

Session Hijacking in OSI Model
Application Level Session Hijacking
Session Sniffing

Predictable Session Token

How to Predict a Session Token?

Man-in-the-Middle Attack
Man-in-the-Browser Attack

Steps to Perform Man-in-the-Browser Attack

Client-side Attacks
Cross-site Script Attack
Session Fixation

Session Fixation Attack

Network Level Session Hijacking
The 3-Way Handshake
Sequence Numbers

Sequence Number Prediction

TCP/IP Hijacking
IP Spoofing: Source Routed Packets
RST Hijacking
Blind Hijacking
Man-in-the-Middle Attack using Packet Sniffer
UDP Hijacking
Session Hijacking Tools

Paros
Burp Suite
Firesheep

Countermeasures
Protecting against Session Hijacking
Methods to Prevent Session Hijacking: To be Followed by Web Developers
Methods to Prevent Session Hijacking: To be Followed by Web Users
Defending against Session Hijack Attacks
Session Hijacking Remediation
IPSec

Modes of IPSec
IPSec Architecture
IPSec Authentication and Confidentiality
Components of IPSec
IPSec Implementation

Session Hijacking Pen Testing

Eğitim 12 – Hijacking Webservers

Webserver Market Shares
Open Source Webserver Architecture
IIS Webserver Architecture
Website Defacement
Case Study
Why Web Servers are Compromised?
Impact of Webserver Attacks
Webserver Misconfiguration

Example

Directory Traversal Attacks
HTTP Response Splitting Attack
Web Cache Poisoning Attack
HTTP Response Hijacking
SSH Bruteforce Attack
Man-in-the-Middle Attack
Webserver Password Cracking

Webserver Password Cracking Techniques

Web Application Attacks
Webserver Attack Methodology

Information Gathering
Webserver Footprinting

Webserver Footprinting Tools

Mirroring a Website
Vulnerability Scanning
Session Hijacking
Hacking Web Passwords

Webserver Attack Tools

Metasploit

Metasploit Architecture
Metasploit Exploit Module
Metasploit Payload Module
Metasploit Auxiliary Module
Metasploit NOPS Module

Wfetch

Web Password Cracking Tool

Brutus
THC-Hydra

Countermeasures

Patches and Updates
Protocols
Accounts
Files and Directories

How to Defend Against Web Server Attacks?
How to Defend against HTTP Response Splitting and Web Cache Poisoning?
Patches and Hotfixes
What is Patch Management?
Identifying Appropriate Sources for Updates and Patches
Installation of a Patch
Patch Management Tool: Microsoft Baseline Security Analyzer (MBSA)

Patch Management Tools

Web Application Security Scanner: Sandcat
Web Server Security Scanner: Wikto
Webserver Malware Infection Monitoring Tool: HackAlert
Webserver Security Tools
Web Server Penetration Testing

Eğitim 13 – Hijacking Web Applications

Web Application Security Statistics
Introduction to Web Applications
Web Application Components
How Web Applications Work?
Web Application Architecture
Web 2.0 Applications
Vulnerability Stack
Web Attack Vectors
Web Application Threats – 1
Web Application Threats – 2
Unvalidated Input
Parameter/Form Tampering
Directory Traversal
Security Misconfiguration
Injection Flaws

SQL Injection Attacks
Command Injection Attacks
Command Injection Example
File Injection Attack

What is LDAP Injection?
How LDAP Injection Works?
Hidden Field Manipulation Attack
Cross-Site Scripting (XSS) Attacks

How XSS Attacks Work?
Cross-Site Scripting Attack Scenario: Attack via Email
XSS Example: Attack via Email
XSS Example: Stealing Users’ Cookies
XSS Example: Sending an Unauthorized Request
XSS Attack in Blog Posting
XSS Attack in Comment Field
XSS Cheat Sheet
Cross-Site Request Forgery (CSRF) Attack
How CSRF Attacks Work?

Web Application Denial-of-Service (DoS) Attack

Denial of Service (DoS) Examples

Buffer Overflow Attacks
Cookie/Session Poisoning

How Cookie Poisoning Works?

Session Fixation Attack
Insufficient Transport Layer Protection
Improper Error Handling
Insecure Cryptographic Storage
Broken Authentication and Session Management
Unvalidated Redirects and Forwards
Web Services Architecture

Web Services Attack
Web Services Footprinting Attack
Web Services XML Poisoning

Footprint Web Infrastructure

Footprint Web Infrastructure: Server Discovery
Footprint Web Infrastructure: Server Identification/Banner Grabbing
Footprint Web Infrastructure: Hidden Content Discovery

Web Spidering Using Burp Suite
Hacking Web Servers

Web Server Hacking Tool: WebInspect

Analyze Web Applications

Analyze Web Applications: Identify Entry Points for User Input
Analyze Web Applications: Identify Server-Side Technologies
Analyze Web Applications: Identify Server-Side Functionality
Analyze Web Applications: Map the Attack Surface

Attack Authentication Mechanism
Username Enumeration
Password Attacks: Password Guessing
Password Attacks: Brute-forcing
Session Attacks: Session ID Prediction/ Brute-forcing
Cookie Exploitation: Cookie Poisoning
Authorization Attack

HTTP Request Tampering
Authorization Attack: Cookie Parameter Tampering

Session Management Attack

Attacking Session Token Generation Mechanism
Attacking Session Tokens Handling Mechanism: Session Token Sniffing

Injection Attacks
Attack Data Connectivity

Connection String Injection
Connection String Parameter Pollution (CSPP) Attacks
Connection Pool DoS

Attack Web App Client
Attack Web Services
Web Services Probing Attacks

Web Service Attacks: SOAP Injection
Web Service Attacks: XML Injection
Web Services Parsing Attacks

Web Service Attack Tool: soapUI
Web Service Attack Tool: XMLSpy
Web Application Hacking Tool: Burp Suite Professional
Web Application Hacking Tools: CookieDigger
Web Application Hacking Tools: WebScarab

Web Application Hacking Tools

Encoding Schemes

How to Defend Against SQL Injection Attacks?
How to Defend Against Command Injection Flaws?
How to Defend Against XSS Attacks?
How to Defend Against DoS Attack?
How to Defend Against Web Services Attack?

Web Application Countermeasures

How to Defend Against Web Application Attacks?
Web Application Security Tool: Acunetix Web Vulnerability Scanner
Web Application Security Tool: Falcove Web Vulnerability Scanner
Web Application Security Scanner: Netsparker
Web Application Security Tool: N-Stalker Web Application Security Scanner
Web Application Security Tools

Web Application Firewall: dotDefender
Web Application Firewall: IBM AppScan
Web Application Firewall: ServerDefender VP

Web Application Firewall

Web Application Pen Testing

Information Gathering
Configuration Management Testing
Authentication Testing
Session Management Testing
Authorization Testing
Data Validation Testing
Denial of Service Testing
Web Services Testing
AJAX Testing

Eğitim 14 – SQL Injection

SQL Injection is the Most Prevalent Vulnerability in 2010
SQL Injection Threats
What is SQL Injection?
SQL Injection Attacks
How Web Applications Work?
Server Side Technologies
HTTP Post Request

Example 1: Normal SQL Query
Example 1: SQL Injection Query
Example 1: Code Analysis
Example 2: BadProductList.aspx
Example 2: Attack Analysis
Example 3: Updating Table
Example 4: Adding New Records
Example 5: Identifying the Table Name
Example 6: Deleting a Table

SQL Injection Detection

SQL Injection Error Messages
SQL Injection Attack Characters
Additional Methods to Detect SQL Injection

SQL Injection Black Box Pen Testing

Testing for SQL Injection

Types of SQL Injection

Simple SQL Injection Attack
Union SQL Injection Example
SQL Injection Error Based

What is Blind SQL Injection?

No Error Messages Returned
Blind SQL Injection: WAITFOR DELAY YES or NO Response
Blind SQL Injection – Exploitation (MySQL)
Blind SQL Injection – Extract Database User
Blind SQL Injection – Extract Database Name
Blind SQL Injection – Extract Column Name
Blind SQL Injection – Extract Data from ROWS

SQL Injection Methodology
Information Gathering

Extracting Information through Error Messages
Understanding SQL Query
Bypass Website Logins Using SQL Injection

Database, Table, and Column Enumeration

Advanced Enumeration

Features of Different DBMSs

Creating Database Accounts

Password Grabbing

Grabbing SQL Server Hashes
Extracting SQL Hashes (In a Single Statement)

Transfer Database to Attacker’s Machine
Interacting with the Operating System
Interacting with the FileSystem
Network Reconnaissance Full Query
SQL Injection Tools

SQL Injection Tools: BSQLHacker
SQL Injection Tools: Marathon Tool
SQL Injection Tools: SQL Power Injector
SQL Injection Tools: Havij

Evading IDS

Types of Signature Evasion Techniques
Evasion Technique: Sophisticated Matches
Evasion Technique: Hex Encoding
Evasion Technique: Manipulating White Spaces
Evasion Technique: In-line Comment
Evasion Technique: Char Encoding
Evasion Technique: String Concatenation
Evasion Technique: Obfuscated Codes

How to Defend Against SQL Injection Attacks?

How to Defend Against SQL Injection Attacks: Use Type-Safe SQL Parameters

SQL Injection Detection Tools

SQL Injection Detection Tool: Microsoft Source Code Analyzer
SQL Injection Detection Tool: Microsoft UrlScan
SQL Injection Detection Tool: dotDefender
SQL Injection Detection Tool: IBM AppScan

Snort Rule to Detect SQL Injection Attacks

Eğitim 15 – hacking Wireless Networks

Wireless Networks
Wi-Fi Usage Statistics in the US
Wi-Fi Hotspots at Public Places
Wi-Fi Networks at Home
Types of Wireless Networks
Wireless Standards
Service Set Identifier (SSID)
Wi-Fi Authentication Modes

Wi-Fi Authentication Process Using a Centralized Authentication Server
Wi-Fi Authentication Process

Wireless Terminologies
Wi-Fi Chalking

Wi-Fi Chalking Symbols

Wi-Fi Hotspot Finder: jiwire.com
Wi-Fi Hotspot Finder: WeFi.com
Types of Wireless Antenna
Parabolic Grid Antenna
Types of Wireless Encryption
WEP Encryption

How WEP Works?

What is WPA?

How WPA Works?

Temporal Keys
What is WPA2?

How WPA2 Works?

WEP vs. WPA vs. WPA2
WEP Issues
Weak Initialization Vectors (IV)
How to Break WEP Encryption?
How to Break WPA/WPA2 Encryption?
How to Defend Against WPA Cracking?
Wireless Threats: Access Control Attacks
Wireless Threats: Integrity Attacks
Wireless Threats: Confidentiality Attacks
Wireless Threats: Availability Attacks
Wireless Threats: Authentication Attacks
Rogue Access Point Attack
Client Mis-association
Misconfigured Access Point Attack
Unauthorized Association
Ad Hoc Connection Attack
HoneySpot Access Point Attack
AP MAC Spoofing
Denial-of-Service Attack
Jamming Signal Attack
Wi-Fi Jamming Devices
Wireless Hacking Methodology
Find Wi-Fi Networks to Attack
Attackers Scanning for Wi-Fi Networks
Footprint the Wireless Network
Wi-Fi Discovery Tool: inSSIDer
Wi-Fi Discovery Tool: NetSurveyor
Wi-Fi Discovery Tool: NetStumbler
Wi-Fi Discovery Tool: Vistumbler
Wi-Fi Discovery Tool: WirelessMon
Wi-Fi Discovery Tools
GPS Mapping

GPS Mapping Tool: WIGLE
GPS Mapping Tool: Skyhook

How to Discover Wi-Fi Network Using Wardriving?
Wireless Traffic Analysis
Wireless Cards and Chipsets
Wi-Fi USB Dongle: AirPcap
Wi-Fi Packet Sniffer: Wireshark with AirPcap
Wi-Fi Packet Sniffer: Wi-Fi Pilot
Wi-Fi Packet Sniffer: OmniPeek
Wi-Fi Packet Sniffer: CommView for Wi-Fi
What is Spectrum Analysis?
Wireless Sniffers
Aircrack-ng Suite
How to Reveal Hidden SSIDs
Fragmentation Attack
How to Launch MAC Spoofing Attack?
Denial of Service: Deauthentication and Disassociation Attacks
Man-in-the-Middle Attack
MITM Attack Using Aircrack-ng
Wireless ARP Poisoning Attack
Rogue Access Point
Evil Twin

How to Set Up a Fake Hotspot (Evil Twin)?

How to Crack WEP Using Aircrack?
How to Crack WEP Using Aircrack? Screenshot 1/2
How to Crack WEP Using Aircrack? Screenshot 2/2
How to Crack WPA-PSK Using Aircrack?
WPA Cracking Tool: KisMAC
WEP Cracking Using Cain & Abel
WPA Brute Forcing Using Cain & Abel
WPA Cracking Tool: Elcomsoft Wireless Security Auditor
WEP/WPA Cracking Tools
Wi-Fi Sniffer: Kismet
Wardriving Tools
RF Monitoring Tools
Wi-Fi Connection Manager Tools
Wi-Fi Traffic Analyzer Tools
Wi-Fi Raw Packet Capturing Tools
Wi-Fi Spectrum Analyzing Tools
Bluetooth Hacking

Bluetooth Stack
Bluetooth Threats

How to BlueJack a Victim?
Bluetooth Hacking Tool: Super Bluetooth Hack
Bluetooth Hacking Tool: PhoneSnoop
Bluetooth Hacking Tool: BlueScanner

Bluetooth Hacking Tools

How to Defend Against Bluetooth Hacking?
How to Detect and Block Rogue AP?
Wireless Security Layers
How to Defend Against Wireless Attacks?
Wireless Intrusion Prevention Systems
Wireless IPS Deployment
Wi-Fi Security Auditing Tool: AirMagnet WiFi Analyzer
Wi-Fi Security Auditing Tool: AirDefense
Wi-Fi Security Auditing Tool: Adaptive Wireless IPS
Wi-Fi Security Auditing Tool: Aruba RFProtect WIPS
Wi-Fi Intrusion Prevention System
Wi-Fi Predictive Planning Tools
Wi-Fi Vulnerability Scanning Tools
Wireless Penetration Testing

Wireless Penetration Testing Framework
Wi-Fi Pen Testing Framework
Pen Testing LEAP Encrypted WLAN
Pen Testing WPA/WPA2 Encrypted WLAN
Pen Testing WEP Encrypted WLAN
Pen Testing Unencrypted WLAN

Eğitim 16 – Evading IDS, Firewalls and Honeypots

Intrusion Detection Systems (IDS) and its Placement
How IDS Works?
Ways to Detect an Intrusion
Types of Intrusion Detection Systems
System Integrity Verifiers (SIV)
General Indications of Intrusions
General Indications of System Intrusions
Firewall

Firewall Architecture

DeMilitarized Zone (DMZ)
Types of Firewall

Packet Filtering Firewall
Circuit-Level Gateway Firewall
Application-Level Firewall
Stateful Multilayer Inspection Firewall

Firewall Identification

Port Scanning
Firewalking
Banner Grabbing

Honeypot

Types of Honeypots

How to Set Up a Honeypot?
Intrusion Detection Tool

Snort
Snort Rules
Rule Actions and IP Protocols
The Direction Operator and IP Addresses
Port Numbers

Intrusion Detection Systems: Tipping Point

Intrusion Detection Tools

Firewall: Sunbelt Personal Firewall

Firewalls

Honeypot Tools

KFSensor
SPECTER

Insertion Attack
Evasion
Denial-of-Service Attack (DoS)
Obfuscating
False Positive Generation
Session Splicing
Unicode Evasion Technique
Fragmentation Attack
Overlapping Fragments
Time-To-Live Attacks
Invalid RST Packets
Urgency Flag
Polymorphic Shellcode
ASCII Shellcode
Application-Layer Attacks
Desynchronization
Pre Connection SYN
Post Connection SYN
Other Types of Evasion

IP Address Spoofing
Attacking Session Token Generation Mechanism
Tiny Fragments

Bypass Blocked Sites Using IP Address in Place of URL

Bypass Blocked Sites Using Anonymous Website Surfing Sites

Bypass a Firewall using Proxy Server

Bypassing Firewall through ICMP Tunneling Method
Bypassing Firewall through ACK Tunneling Method
Bypassing Firewall through HTTP Tunneling Method
Bypassing Firewall through External Systems
Bypassing Firewall through MITM Attack

Detecting Honeypots
Honeypot Detecting Tool: Send-Safe Honeypot Hunter
Firewall Evasion Tools

Traffic IQ Professional
tcp-over-dns

Packet Fragment Generators
Countermeasures
Firewall/IDS Penetration Testing

Firewall Penetration Testing
IDS Penetration Testing

Eğitim 17 – Buffer Overflow

Buffer Overflows
Why are Programs And Applications Vulnerable?
Understanding Stacks
Stack-Based Buffer Overflow
Understanding Heap

Heap-Based Buffer Overflow

Stack Operations

Shellcode
No Operations (NOPs)

Knowledge Required to Program Buffer Overflow Exploits
Buffer Overflow Steps

Attacking a Real Program
Format String Problem
Overflow using Format String
Smashing the Stack
Once the Stack is Smashed…

Simple Uncontrolled Overflow
Simple Buffer Overflow in C
Code Analysis
Exploiting Semantic Comments in C (Annotations)
How to Mutate a Buffer Overflow Exploit?
Identifying Buffer Overflows
How to Detect Buffer Overflows in a Program?
BOU (Buffer Overflow Utility)
Testing for Heap Overflow Conditions: heap.exe
Steps for Testing for Stack Overflow in OllyDbg Debugger

Testing for Stack Overflow in OllyDbg Debugger

Testing for Format String Conditions using IDA Pro
BoF Detection Tools
Defense Against Buffer Overflows

Preventing BoF Attacks
Programming Countermeasures

Data Execution Prevention (DEP)
Enhanced Mitigation Experience Toolkit (EMET)

EMET System Configuration Settings
EMET Application Configuration Window

/GS http://microsoft.com
BoF Security Tools

BufferShield

Buffer Overflow Penetration Testing

Eğitim 18 – Cryptography

Cryptography
Types of Cryptography
Government Access to Keys (GAK)
Ciphers
Advanced Encryption Standard (AES)
Data Encryption Standard (DES)
RC4, RC5, RC6 Algorithms
The DSA and Related Signature Schemes
RSA (Rivest Shamir Adleman)

Example of RSA Algorithm
The RSA Signature Scheme

Message Digest (One-way Bash) Functions

Message Digest Function: MD5

Secure Hashing Algorithm (SHA)
What is SSH (Secure Shell)?
MD5 Hash Calculators: HashCalc, MD5 Calculator and HashMyFiles
Cryptography Tool: Advanced Encryption Package
Cryptography Tools
Public Key Infrastructure (PKI)
Certification Authorities
Digital Signature
SSL (Secure Sockets Layer)
Transport Layer Security (TLS)
Disk Encryption

Disk Encryption Tool: TrueCrypt
Disk Encryption Tools

Cryptography Attacks
Code Breaking Methodologies

Brute-Force Attack

Meet-in-the-Middle Attack on Digital Signature Schemes
Cryptanalysis Tool: CrypTool
Cryptanalysis Tools
Online MD5 Decryption Tool

Eğitim 19 – Penetration Testing

Introduction to Penetration Testing
Security Assessments
Vulnerability Assessment

Limitations of Vulnerability Assessment

Penetration Testing
Why Penetration Testing?
What Should be Tested?
What Makes a Good Penetration Test?
ROI on Penetration Testing
Testing Points
Testing Locations
Types of Penetration Testing

External Penetration Testing
Internal Security Assessment
Black-box Penetration Testing
Grey-box Penetration Testing
White-box Penetration Testing
Announced / Unannounced Testing
Automated Testing
Manual Testing

Common Penetration Testing Techniques
Using DNS Domain Name and IP Address Information
Enumerating Information about Hosts on Publicly-Available Networks
Phases of Penetration Testing

Pre-Attack Phase
Attack Phase

Activity: Perimeter Testing
Enumerating Devices
Activity: Acquiring Target
Activity: Escalating Privileges
Activity: Execute, Implant, and Retract

Post-Attack Phase and Activities

Penetration Testing Deliverable Templates

Penetration Testing Methodology

Application Security Assessment

Web Application Testing – I
Web Application Testing – II
Web Application Testing – III

Network Security Assessment
Wireless/Remote Access Assessment

Wireless Testing

Telephony Security Assessment
Social Engineering
Testing Network-Filtering Devices
Denial of Service Emulation

Outsourcing Penetration Testing Services

Terms of Engagement
Project Scope
Project Scope
Penetration Testing Consultants

Denial of Service Emulation

Evaluating Different Types of Pentest Tools
Application Security Assessment Tool

Webscarab

Network Security Assessment Tool

Angry IP scanner
GFI LANguard

Wireless/Remote Access Assessment Tool

Kismet

Telephony Security Assessment Tool

Omnipee

Testing Network-Filtering Device Tool

Traffic IQ Professional

Modülleri, hedefleri ve ön koşulları karşılaştırarak okuyabilirsiniz; güncel kapsam için mevcut iletişim kanalları üzerinden iletişime geçiniz.

CCNA Security

Orijinal kaynaklar: https://cliguru.net/egitimler/ccna-security/ · https://www.cliguru.com/CCNA-Security

CCNA Security Eğitimi İçeriği

Implementing Cisco IOS Network Security (IINS)

Öngereksinimler:

CCNA

Kurs Tanımı:

CCNA Security network’ün temellerini anlamış olan katılımcılara network güvenliği hakkında temel bilgi sağlamaya yönelik hazırlanmış bir eğitimdir.

Kurs İçeriği:

Modül 1 – Common Security Threats
Modül 2 – Security and Cisco Routers
Modül 3 – AAA on Cisco Devices
Modül 4 – IOS ACLs
Modül 5 – Secure Network Management and Reporting
Modül 6 – Common Layer 2 Attacks
Modül 7 – Cisco Firewall Technologies
Modül 8 – Cisco IPS
Modül 9 – VPN Technologies

Ayrıntılı CCNA Security İçeriği

1. Common Security Threats

1.1. Describe common security threats

1.1.1. Common threats to the physical installation
1.1.2. Mitigation methods for common network attacks
1.1.3. Email-based threats
1.1.4. Web-based attacks
1.1.5. Mitigation methods for Worm, Virus, and Trojan Horse attacks
1.1.6. Phases of a secure network lifecycle
1.1.7. Security needs of a typical enterprise with a comprehensive security policy
1.1.8. Mobile/remote security
1.1.9. DLP

2. Security and Cisco Routers

2.1. Implement security on Cisco routers

2.1.1. CCP Security Audit feature
2.1.2. CCP One-Step Lockdown feature
2.1.3. Secure router access using strong encrypted passwords, and using IOS login enhancements, IPV6 security.
2.1.4. Multiple privilege levels/li>
2.1.5. Role-based CLI
2.1.6. Cisco IOS image and configuration files

2.2. Describe securing the control, data and management plane
2.3. Describe CSM
2.4. Describe IPv4 to IPv6 transition

2.4.1. Reasons for IPv6
2.4.2. Understanding IPv6 addressing
2.4.3. Assigning IPv6 addresses
2.4.4. Routing considerations for IPv6

3. AAA on Cisco Devices

3.1. Implement authentication, authorization and accounting (AAA)

3.1.1. AAA using CCP on routers
3.1.2. AAA using CLI on routers and switches
3.1.3. AAA on ASA

3.2. Describe TACACS+
3.3. Describe RADIUS
3.4. Describe AAA

3.4.1. Authentication
3.4.2. Authorization
3.4.3. Accounting

3.5. Verify AAA functionality

4. IOS ACLs

4.1. Describe standard, extended, and named IP IOS ACLs to filter packets

4.1.1. IPv4
4.1.2. IPv6
4.1.3. Object groups
4.1.4. ACL operations
4.1.5. Types of ACLs (dynamic, reflexive, time-based ACLs)
4.1.6. ACL wild card masking
4.1.7. Standard ACLs
4.1.8. Extended ACLs
4.1.9. Named ACLs
4.1.10. VLSM

4.2. Describe considerations when building ACLs

4.2.1. Sequencing of ACEs
4.2.2. Modification of ACEs

4.3. Implement IP ACLs to mitigate threats in a network

4.3.1. Filter IP traffic
4.3.2. SNMP
4.3.3. DDoS attacks
4.3.4. CLI
4.3.5. CCP
4.3.6. IP ACLs to prevent IP spoofing
4.3.7. VACLs

5. Secure Network Management and Reporting

5.1. Describe secure network management

5.1.1. In-band
5.1.2. Out of band
5.1.3. Management protocols
5.1.4. Management enclave
5.1.5. Management plane

5.2. Implement secure network management

5.2.1. SSH
5.2.2. syslog
5.2.3. SNMP
5.2.4. NTP
5.2.5. SCP
5.2.6. CLI
5.2.7. CCP
5.2.8. SSL

6. Common Layer 2 Attacks

6.1. Describe Layer 2 security using Cisco switches

6.1.1. STP attacks
6.1.2. ARP spoofing
6.1.3. MAC spoofing
6.1.4. CAM overflows
6.1.5. CDP/LLDP

6.2. Describe VLAN Security

6.2.1. Voice VLAN
6.2.2. PVLAN
6.2.3. VLAN hopping
6.2.4. Native VLAN

6.3. Implement VLANs and trunking

6.3.1. VLAN definition
6.3.2. Grouping functions into VLANs
6.3.3. Considering traffic source to destination paths
6.3.4. Trunking
6.3.5. Native VLAN
6.3.6. VLAN trunking protocols
6.3.7. Inter-VLAN routing

6.4. Implement Spanning Tree

6.4.1. Potential issues with redundant switch topologies
6.4.2. STP operations
6.4.3. Resolving issues with STP

7. Cisco Firewall Technologies

7.1. Describe operational strengths and weaknesses of the different firewall technologies

7.1.1. Proxy firewalls
7.1.2. Packet and stateful packet
7.1.3. Application firewall
7.1.4. Personal firewal

7.2. Describe stateful firewalls

7.2.1. Operations
7.2.2. Function of the state table

7.3. Describe the types of NAT used in firewall technologies

7.3.1. Static
7.3.2. Dynamic
7.3.3. PAT

7.4. Implement Zone Based Firewall using CCP

7.4.1. Zone to zone
7.4.2. Self zone

7.5. Implement the Cisco Adaptive Security Appliance (ASA)

7.5.1. NAT
7.5.2. ACL
7.5.3. Default MPF
7.5.4. Cisco ASA sec level

7.6. Implement NAT and PAT

7.6.1. Functions of NAT, PAT, and NAT Overload
7.6.2. Translating inside source addresses
Overloading Inside global addresses/li>

8. Cisco IPS

8.1. Describe IPS deployment considerations

8.1.1. SPAN
8.1.2. IPS product portfolio
8.1.3. Placement
8.1.4. Caveats

8.2. Describe IPS technologies

8.2.1. Attack responses
8.2.2. Monitoring options
8.2.3. syslog
8.2.4. SDEE
8.2.5. Signature engines
8.2.6. Signatures
8.2.7. Global correlation and SIO
8.2.8. Network-based
8.2.9. Host-based

8.3. Configure Cisco I Logging OS IPS using CCP

8.3.1. Logging
8.3.2. Signatures

9. VPN Technologies

9.1. Describe the different methods used in cryptography

9.1.1. Symmetric
9.1.2. Asymetric
9.1.3. HMAC
9.1.4. Message digest
9.1.5. PKI

9.2. Describe VPN technologies

9.2.1. IPsec
9.2.2. SSL

9.3. Describe the building blocks of IPSec

9.3.1. IKE
9.3.2. ESP
9.3.3. AH
9.3.4. Tunnel mode
9.3.5. Transport mode

9.4. Implement an IOS IPSec site-to-site VPN with pre-shared key authentication

9.4.1. CCP
9.4.2. CLI

9.5. Verify VPN operations
9.6. Implement SSL VPN using ASA device manager

9.6.1. Clientless
9.6.2. AnyConnect

Ayrıntılı CCNA Security Türkçe İçerik

IINS – Implementing Cisco IOS Network Security

Eğitim 1 – NAT ve PAT

NAT ve PAT Temelleri.
NAT ve PAT Yapılandırması.
NAT ve PAT Sürdürülebilirliği.
Gelişmiş Konseptler.

Eğitim 2 – Ağ Güvenlik Prensiplerine Giriş

Ağ Güvenlik Temelleri.
Ağ Saldırıları Metodolojisi.
İşlem Güvenliği.
Güvenlik İlkeleri.
Cisco Self-Defending Ağları Oluşturma.
Şifreleme Servisleri.
Simetrik Şifreleme.
Şifreleme Hash’leri ve Dijital İmzalar.
Asimetrik Şifreleme ve PKI.

Eğitim 3 – Ağ Güvenliği

Yönetimsel Erişimin Güvenliği.
Cisco SDM.
Cisco Router’da Yerel Veri Tabanı Kullanılarak AAA Yapılandırması.
Cisco Router’da Cisco ACS Kullanarak AAA Yapılandırması.
Güvenli Yönetim ve Raporlamanın Devreye Sokulması.
Router’ı Kilitlemek.

Eğitim 4 – Cisco IOS Firewall Kullanarak Ağ Güvenliğini Sağlamak

Güvenlik Duvarı Teknolojileri.
ACL Kullanarak Sabit Paket Filtreleme Yapmak.
Cisco IOS ZBPFW Yapılandırması.

Eğitim 5 – Site-to-Site VPN

IPSec Temelleri.
Site-to-Site IPSec VPN Oluşturma.
Cisco SDM kullanılan bir Site-to-Site VPN’de IPSec Yapılandırmak.
IPSec over GRE.

Eğitim 6 – Cisco IOS IPS Kullanarak Ağ Güvenliğini Sağlamak

IPS Teknolojisi.
Cisco IOS IPS’I Cisco SDM Kullanarak Yapılandırmak.

Eğitim 7 – LAN,SAN,Ses ve Son Nokta Güvenliği

Son-nokta Güvenliği.
SAN Güvenliği.
Ses Güvenliği.
Layer 2 Saldırıları Azaltma.

Labaratuar Çalışmaları

Lab 1: IOS Yönetim Erişimi Güvenliği.
Fiziksel Linelara şifre verilmesi.
Enable Secret şifresi verilmesi.
VTY Line için şifre verilmesi.
Service Password Encryption Komutunun kullanımı.
Şifrelerin şifrelenmesi ve güvenliği.
Haslenmiş şifrelerin güvenliği.
Minimum Şifre Uzunluğu.
Line zaman aşımı.
Yetki Seviyeleri.
Banner Mesajlarının Konfigürasyonu.
IOS-FW konfigürasyonunun kontrolü.
Lab 2: Cisco SDM Hazırlığı.
SDM için Admin PC oluşturma.
IOS-FWnin SDM için hazırlanması.
SDMin admin PCye yüklenmesi.
SDM Başlatılması.
IOS-FW Anahtar ve sertifikalarının Yönetilmesi.
SDM’in yeniden başlatılması.
Router Konfigürasyonunun kontrolü.
Lab 3: Local Database ile IOS AAA konfigürasyonu.
AAA’yı aktifleştir.
AAA’yı test et.
Kullanıcı adı ve şifreler oluştur, test et.
Kişi bazlı IOS yetkileri oluştur.
Kişi bazlı CLI ve AAA Authorization.
SDM Rolleri.
Gelişmiş login rolleri.
Router Konfigürasyonunun kontrolü.
Lab 4: IOS AAA nın ACS ile kontrolü.
ACS’ye bağlan.
IOS-FW’yi ACS bağlantısı için hazırla.
ACS üzerinde yeni bir grup tanımla.
ACS-Based Authentication ve Authorization konfigürasyonu.
ACS-Based Authentication ve Authorization testi.
ACS ve Active Directory Entegrasyonu konfigürasyonu.
Fallback Method Testi.
Command Authorization kümeleri.
AAA Accounting.
Router Konfigürasyonunun kontrolü.
Lab 5: IOS Güvenli Yönetim ve Raporlama.
SSH Server Konfigürasyon.
IOS-FW üzerinde NTP konfigürasyonu.
IOS-FW üzerinde syslog konfigürasyonu.
Perimeter Router üzerinde syslog konfigürasyonu.
Unicast-VRF Verification konfigürasyonu.
Route Authentication Konfigürasyonu.
Router Konfigürasyonunun kontrolü
Lab 6: IOS Router servislerinin Güvenliği.
Mock Security Audit Çalıştırma.
Real Security Audit Çalıştırma.
Konfigürasyon iletişim Kontrolü.
Router Konfigürasyonunun kontrolü.
Lab 7: ACL kullanrak paket filtreleme.
VTY erişimini limitle.
Bogon paketlerini filtrele.
Paket Filtreleme limitlerini anlama.
Beklenen trafiğin DMZ servera gitmesine izin ver.
Diğer Servislere izin ver.
ACL kurallarını test et.
Var olan ACL içerisine yeni kurallar ekle.
Router Konfigürasyonunun kontrolü.
Lab 8: IOS Zone-Based Firewall.
Basit Firewall kurulumu.
DMZ Inbound konfigürasyonu.
DMZ Outbound konfigürasyonu.
Perimeter Router yönetimine izin vermek.
Attack Mitigation Gösterimi.
Router Konfigürasyonunun kontrolü.

Modülleri, hedefleri ve ön koşulları karşılaştırarak okuyabilirsiniz; güncel kapsam için mevcut iletişim kanalları üzerinden iletişime geçiniz.

CCNP Security

Orijinal kaynaklar: https://cliguru.net/egitimler/ccnp-security/ · https://www.cliguru.com/CCNP_Security

CCNP Security Eğitim İçeriği

Kurs Tanımı:

CCNP Security eğitimi, giriş seviyesi network ve security bilgilerini alan katılımcıların kariyerlerini güvenlik üzerine sürdürebilmeleri için hazırlanmıştır.

Öngereksinimler:

CCNA, CCNA Security (IINS)

SECURE

Kurs İçeriği:

Eğitim 0 – Kurs Tanıtımı
Eğitim 1 – Deploying Cisco IOS Software Network Foundation Protection Lesson
Eğitim 2 – Deploying Cisco IOS Software Threat Control and Containment
Eğitim 3 – Deploying Cisco IOS Software Site-to-Site Transmission Security
Eğitim 4 – Deploying Secure Remote Access with Cisco IOS Software

FIREWALL

Kurs İçeriği:

Eğitim 0 – Kurs Tanıtımı
Eğitim 1 – Introduction to the Cisco ASA Adaptive Security Appliance
Eğitim 2 – Deployment of Cisco ASA Adaptive Security Appliance Access Control Features
Eğitim 3 – Deployment of Cisco ASA Adaptive Security Appliance Virtualization and High-Availability Features
Eğitim 4 – Configuring Routing on the Cisco ASA Adaptive Security Appliance

VPN

Kurs İçeriği:

Eğitim 0 – Kurs Tanıtımı
Eğitim 1 – Evaluate the Cisco ASA adaptive security appliance VPN subsystem
Eğitim 2 – Deploy Cisco ASA adaptive security appliance IPsec VPN solutions
Eğitim 3 – Deploy Cisco ASA adaptive security appliance Cisco AnyConnect remote access VPN solutions
Eğitim 4 – Deploy Cisco ASA adaptive security appliance clientless remote access VPN solutions
Eğitim 5 – Deploy advanced Cisco ASA adaptive security appliance VPN

IPS

Kurs İçeriği:

Eğitim 0 – Kurs Tanıtımı
Eğitim 1 – Introduction to Intrusion Prevention and Detection, Cisco IPS Software, and Supporting Devices
Eğitim 2 – Installing and Maintaining Cisco IPS Sensors
Eğitim 3 – Applying Cisco IPS Security Policies
Eğitim 4 – Adapting Traffic Analysis and Response to the Environment
Eğitim 5 – Managing and Analyzing Events
Eğitim 6 – Deploying Virtualization, High Availability, and High Performance Solutions
Eğitim 7 – Configuring and Maintaining Specific Cisco IPS Hardware

Modülleri, hedefleri ve ön koşulları karşılaştırarak okuyabilirsiniz; güncel kapsam için mevcut iletişim kanalları üzerinden iletişime geçiniz.

Cisco ISE

Orijinal kaynaklar: https://cliguru.net/egitimler/cisco-ise/ · https://www.cliguru.com/Cisco_ISE

ISE Eğitimi İçeriği

SISE v1.1 (Implementing and Configuring Cisco Identity Services Engine)

Öngereksinimler:

CCNA Eğitimini tamamlamış olmak

Kurs Tanımı:

Cisco ISE Eğitimi, tüm organizasyonunuzda, authentication, authorization, accounting, posture, profiling, device on-boarding, guest yönetimi gibi servisleri tek çatı altında birleştirerek, yeni nesil, context-aware, identity-based, tanımlama ve erişim kontrolü politikalarının yönetim platformunu kurma ve kullanmayı öğretmeyi hedeflemektedir.

Kurs İçeriği:

Eğitim 1 – Cisco ISE Product Overview

Introducing the Cisco ISE
Getting Started with Cisco ISE
Lab prep
Lab 1-1: Installing the Cisco ISE
Lab 1-2: Certificate Operations
Lab 1-3: Cisco ISE Node Deployment

Eğitim 2 – Cisco ISE Authentication and Authorization

Configuring Basic Access
Understanding External Authentication
Lab 2-1: Configure and Add Network Access Devices to Cisco ISE
Lab 2-2: Configure External Identity Sources
Using Cisco ISE Dictionaries
Lab 2-3: Examine Cisco ISE Dictionaries
Configuring Authorization
Basic Cisco ISE Policies
Configuring Multiple Cisco ISE Policies

Eğitim 3 – Web Authentication and User Access Management

Implementing Web Authentication
Implementing Guest Services
Lab 3-1: Configuring Cisco ISE Guest Services
Lab 3-2: Guest Services Self-Registration

Eğitim 4 – Cisco ISE Profiler, Posture and Endpoint Protection Services

Implementing Cisco ISE Profiler Services
Lab 4-1: Configuring ISE for Profiling
Implementing Cisco ISE Posture Service
Lab 4-2: Configuring Cisco ISE for Posture Assessment
Implementing Cisco ISE Endpoint Protection Services
Lab 4-3:Endpoint Protections Services
Implementing BYOD – Bring Your Own Device
Lab 4-4: BYOD – Bring Your Own Device

Eğitim 5 – Reports, Monitoring, Troubleshooting and Security

Implementing Inline Posture and TrustSec Security
Describing the Cisco ISE Architecture
Performing Cisco ISE Administration and Maintenance
Using Cisco ISE Reporting Monitoring and Troubleshooting
Lab 5-1: Logging Setup
Lab 5-2: Cisco ISE Reporting
Lab 5-3: Working with Cisco ISE Monitoring and Troubleshooting
Lab 5-4: Patching Cisco ISE

Modülleri, hedefleri ve ön koşulları karşılaştırarak okuyabilirsiniz; güncel kapsam için mevcut iletişim kanalları üzerinden iletişime geçiniz.

Orijinal eğitim PDF arşivi

Belgeler geçmiş sürüm ve programlara aittir; güncel sınav, takvim veya yetki beyanı değildir. Orijinal dosyaları indirip yazdırabilirsiniz.

CCNA Security (Arşiv) — eğitim ayrıntıları ve PDF — tarihsel orijinal PDF

EC-Council — cliguru.com kaynak sürümü

Tarihsel cliguru.com program metni, daha önce korunan cliguru.net kaynak sürümünden ayrı sunulmuştur. Teknik başlıklar, modüller ve kaynak döneminin sürüm ayrımları korunmuştur; eski görsel/etkileşimli biçim kaldırılmış, bağlantılar inceleme tasarımına uyarlanmıştır. Kaynaktaki yetki, sertifika, süre ve takvim ifadeleri güncel taahhüt olarak doğrulanmamıştır.

Orijinal tarihsel kaynak: https://www.cliguru.com/BeyazSapkaliHacker

Beyaz Şapkalı Hacker Eğitimi İçeriği

Öngereksinimler:

Microsoft ve Linux Sistemleri hakkında bilgi, giriş seviye network bilgisi.

Kurs Tanımı:

Beyaz Şapkalı Hacker katılımcıları deneyimli güvenlik uzmanlarının seviyesine yükseltmek için detaylı bir Ethical Hacking ve network güvenliği eğitimi programıdır.

Kurs İçeriği:

Eğitim 1 - Introduction to Ethical Hacking
Eğitim 2 - Footprinting and Reconnaissance
Eğitim 3 - Scanning Networks
Eğitim 4 - Enumeration
Eğitim 5 - Vulnerability Analysis
Eğitim 6 - System Hacking
Eğitim 7 - Malware Threats
Eğitim 8 - Sniffing
Eğitim 9 - Social Engineering
Eğitim 10 - Denial of Service
Eğitim 11 - Session Hijacking
Eğitim 12 - Evading IDS, Firewalls and Honeypots
Eğitim 13 - Hacking Webservers
Eğitim 14 - Hacking Web Applications
Eğitim 15 - SQL Injection
Eğitim 16 - Hacking Wireless Networks
Eğitim 17 - Hacking Mobile Platforms
Eğitim 18 - IoT Hacking and OT Hacking
Eğitim 19 - Cloud Computing
Eğitim 20 - Cryptography

Ayrıntılı İçerik:

Eğitim 1 - Introduction to Ethical Hacking

Internet Crime Current Report: IC3
Data Breach Investigations Report
Types of Data Stolen From the Organizations
Essential Terminologies
Elements of Information Security
Authenticity and Non-Repudiation
The Security, Functionality, and Usability Triangle
Security Challenges
Effects of Hacking

Effects of Hacking on Business

Who is a Hacker?
Hacker Classes
Hacktivism
What Does a Hacker Do?
Phase 1 - Reconnaissance

Reconnaissance Types

Phase 2 - Scanning
Phase 3 - Gaining Access
Phase 4 - Maintaining Access
Phase 5 - Covering Tracks
Types of Attacks on a System

Operating System Attacks
Application-Level Attacks
Shrink Wrap Code Attacks
Misconfiguration Attacks

Why Ethical Hacking is Necessary?
Defense in Depth
Scope and Limitations of Ethical Hacking
What Do Ethical Hackers Do?
Skills of an Ethical Hacker
Vulnerability Research
Vulnerability Research Websites
What is Penetration Testing?
Why Penetration Testing?
Penetration Testing Methodology

Eğitim 2 - Footprinting and Reconnaissance

Footprinting Terminologies
What is Footprinting?
Objectives of Footprinting
Footprinting Threats
Finding a Company's URL
Locate Internal URLs
Public and Restricted Websites
Search for Company's Information

Tools to Extract Company's Data

Footprinting Through Search Engines
Collect Location Information

Satellite Picture of a Residence

People Search

People Search Using http://pipl.com
People Search Online Services
People Search on Social Networking Services

Gather Information from Financial Services
Footprinting Through Job Sites
Monitoring Target Using Alerts
Competitive Intelligence Gathering

Competitive Intelligence-When Did this Company Begin? How Did it Develop?
Competitive Intelligence-What are the Company's Plans?
Competitive Intelligence-What Expert Opinion Say About the Company?
Competitive Intelligence Tools
Competitive Intelligence Consulting Companies

WHOIS Lookup

WHOIS Lookup
WHOIS Lookup Tools: SmartWhois
WHOIS Lookup Tools
WHOIS Lookup Online Tools

Extracting DNS Information

DNS Interrogation Tools
DNS Interrogation Online Tools

Locate the Network Range

Traceroute

Traceroute Analysis
Traceroute Tool: 3D Traceroute
Traceroute Tool: LoriotPro
Traceroute Tool: Path Analyzer Pro
Traceroute Tools

Mirroring Entire Website

Website Mirroring Tools
Mirroring Entire Website Tools

Extract Website Information from http://www.archive.org

Monitoring Web Updates Using Website Watcher

Tracking Email Communications

Email Tracking Tools

Footprint Using Google Hacking Techniques

What a Hacker Can Do With Google Hacking?

Google Advance Search Operators

Finding Resources using Google Advance Operator

Google Hacking Tool: Google Hacking Database (GHDB)

Google Hacking Tools

Additional Footprinting Tools

Footprinting Pen Testing

Eğitim 3 - Scanning Networks

Network Scanning
Types of Scanning
Checking for Live Systems - ICMP Scanning
Ping Sweep

Ping Sweep Tools

Three-Way Handshake
TCP Communication Flags

Create Custom Packet using TCP Flags

Create Custom Packet using TCP Flags
Hping Commands
Scanning Techniques

TCP Connect / Full Open Scan
Stealth Scan (Half-open Scan)
Xmas Scan
FIN Scan
NULL Scan
IDLE Scan

IDLE Scan: Step 1
IDLE Scan: Step 2.1 (Open Port)
IDLE Scan: Step 2.1 (Open Port)
IDLE Scan: Step 3

ICMP Echo Scanning/List Scan
SYN/FIN Scanning Using IP Fragments
UDP Scanning
Inverse TCP Flag Scanning
ACK Flag Scanning

Scanning: IDS Evasion Techniques
IP Fragmentation Tools
Scanning Tool: Nmap
Scanning Tool: NetScan Tools Pro
Scanning Tools
Do Not Scan These IP Addresses (Unless you want to get into trouble)
Scanning Countermeasures
War Dialing
Why War Dialing?
War Dialing Tools
War Dialing Countermeasures

War Dialing Countermeasures: SandTrap Tool

OS Fingerprinting

Active Banner Grabbing Using Telnet

Banner Grabbing Tool: ID Serve
GET REQUESTS
Banner Grabbing Tool: Netcraft
Banner Grabbing Tools
Banner Grabbing Countermeasures: Disabling or Changing Banner
Hiding File Extensions
Hiding File Extensions from Webpages
Vulnerability Scanning

Vulnerability Scanning Tool: Nessus
Vulnerability Scanning Tool: SAINT
Active Banner Grabbing Using Telnet

Network Vulnerability Scanners
LANsurveyor
Network Mappers
Proxy Servers
Why Attackers Use Proxy Servers?
Use of Proxies for Attack
How Does MultiProxy Work?
Free Proxy Servers
Proxy Workbench
Proxifier Tool: Create Chain of Proxy Servers
SocksChain
TOR (The Onion Routing)
TOR Proxy Chaining Software
HTTP Tunneling Techniques
Why do I Need HTTP Tunneling?
Super Network Tunnel Tool
Httptunnel for Windows
Additional HTTP Tunneling Tools
SSH Tunneling
SSL Proxy Tool
How to Run SSL Proxy?
Proxy Tools
Anonymizers
Types of Anonymizers
Case: Bloggers Write Text Backwards to Bypass Web Filters in China
Text Conversion to Avoid Filters
Censorship Circumvention Tool: Psiphon
How Psiphon Works?
How to Check if Your Website is Blocked in China or Not?
How to Check if Your Website is Blocked in China or Not?
Anonymizer Tools
Spoofing IP Address
IP Spoofing Detection Techniques: Direct TTL Probes
IP Spoofing Detection Techniques: IP Identification Number
IP Spoofing Detection Techniques: TCP Flow Control Method
IP Spoofing Countermeasures
Scanning Pen Testing

Eğitim 4 - Enumeration

What is Enumeration?
Techniques for Enumeration
Netbios Enumeration

NetBIOS Enumeration Tool: SuperScan
NetBIOS Enumeration Tool: NetBIOS Enumerator

Enumerating User Accounts
Enumerate Systems Using Default Passwords
SNMP (Simple Network Management Protocol) Enumeration

Management Information Base (MIB)
SNMP Enumeration Tool: OpUtils Network Monitoring Toolset
SNMP Enumeration Tool: SolarWinds
SNMP Enumeration Tools

UNIX/Linux Enumeration

Linux Enumeration Tool: Enum4linux

LDAP Enumeration

LDAP Enumeration Tool: JXplorer
LDAP Enumeration Tool

NTP Enumeration

NTP Server Discovery Tool: NTP Server Scanner
NTP Server: PresenTense Time Server
NTP Enumeration Tools

SMTP Enumeration

SMTP Enumeration Tool: NetScanTools Pro

DNS Zone Transfer Enumeration Using nslookup

DNS Analyzing and Enumeration Tool: The Men & Mice Suite

Enumeration Countermeasures

SMB Enumeration Countermeasures

Enumeration Pen Testing

Eğitim 5 - System Hacking

Information at Hand Before System Hacking Stage
System Hacking: Goals
White Hat Hacking Methodology (WHHM)
Password Cracking

Password Complexity
Password Cracking Techniques
Types of Password Attacks

Passive Online Attacks: Wire Sniffing
Password Sniffing
Passive Online Attack: Man-in-the-Middle and Replay Attack
Active Online Attack: Password Guessing

Active Online Attack: Trojan/Spyware/Keylogger
Active Online Attack: Hash Injection Attack

Rainbow Attacks: Pre-Computed Hash
Distributed Network Attack

Elcomsoft Distributed Password Recovery

Non-Electronic Attacks

Default Passwords

Manual Password Cracking (Guessing)
Automatic Password Cracking Algorithm
Stealing Passwords Using USB Drive

Microsoft Authentication
How Hash Passwords are Stored in Windows SAM?
What is LAN Manager Hash?

LM "Hash" Generation
LM, NTLMv1, and NTLMv2
NTLM Authentication Process

Kerberos Authentication
Salting
PWdump7 and Fgdump
L0phtCrack
Ophcrack
Cain & Abel
RainbowCrack
Password Cracking Tools
LM Hash Backward Compatibility

How to Disable LM HASH?

How to Defend against Password Cracking?

Implement and Enforce Strong Security Policy

Privilege Escalation

Escalation of Privileges

Active@ Password Changer
Privilege Escalation Tools
How to Defend against Privilege Escalation?
Executing Applications
Alchemy Remote Executor
RemoteExec
Execute This!
Keylogger
Types of Keystroke Loggers
Acoustic/CAM Keylogger

Keylogger: Advanced Keylogger
Keylogger: Spytech SpyAgent
Keylogger: Perfect Keylogger
Keylogger: Powered Keylogger
Keylogger for Mac: Aobo Mac OS X KeyLogger
Keylogger for Mac: Perfect Keylogger for Mac
Hardware Keylogger: KeyGhost

Keyloggers
Spyware

What Does the Spyware Do?
Types of Spywares

Desktop Spyware

Desktop Spyware: Activity Monitor

Email and Internet Spyware

Email and Internet Spyware: eBLASTER

Internet and E-mail Spyware
Child Monitoring Spyware

Child Monitoring Spyware: Advanced Parental Control

Screen Capturing Spyware

Screen Capturing Spyware: Spector Pro

USB Spyware

USB Spyware: USBDumper

Audio Spyware

Audio Spyware: RoboNanny, Stealth Recorder Pro and Spy Voice Recorder

Video Spyware /li>
- Video Spyware: Net Video Spy
Print Spyware

Print Spyware: Printer Activity Monitor

Telephone/Cellphone Spyware
Cellphone Spyware: Mobile Spy
GPS Spyware

GPS Spyware: GPS TrackMaker

How to Defend against Keyloggers?

Anti-Keylogger
Anti-Keylogger: Zemana AntiLogger
Anti-Keyloggers

How to Defend against Spyware?

Anti-Spyware: Spyware Doctor

Rootkits
Types of Rootkits
How Rootkit Works?
Rootkit: Fu
Detecting Rootkits

Steps for Detecting Rootkits

How to Defend against Rootkits?
Anti-Rootkit: RootkitRevealer and McAfee Rootkit Detective
NTFS Data Stream

How to Create NTFS Streams?
NTFS Stream Manipulation
How to Defend against NTFS Streams?
NTFS Stream Detector: ADS Scan Engine
NTFS Stream Detectors

What is Steganography?

Steganography Techniques
How Steganography Works?

Types of Steganography

Whitespace Steganography Tool: SNOW

Image Steganography

Image Steganography: Hermetic Stego
Image Steganography Tools

Document Steganography: wbStego

Document Steganography Tools

Video Steganography: Our Secret

Video Steganography Tools

Audio Steganography: Mp3stegz

Audio Steganography Tools

Folder Steganography: Invisible Secrets 4

Folder Steganography Tools

Spam/Email Steganography: Spam Mimic
Natural Text Steganography: Sams Big G Play Maker
Steganalysis

Steganalysis Methods/Attacks on Steganography

Steganography Detection Tool: Stegdetect

Steganography Detection Tools

Why Cover Tracks?

Covering Tracks

Ways to Clear Online Tracks
Disabling Auditing: Auditpol
Covering Tracks Tool: Window Washer
Covering Tracks Tool: Tracks Eraser Pro

Track Covering Tools

System Hacking Penetration Testing

Eğitim 6 - Trojans and Backdoors

What is a Trojan?
Overt and Covert Channels
Purpose of Trojans
What Do Trojan Creators Look For?
Indications of a Trojan Attack
Common Ports used by Trojans
How to Infect Systems Using a Trojan?
Wrappers

Wrapper Covert Programs

Different Ways a Trojan can Get into a System
How to Deploy a Trojan?
Evading Anti-Virus Techniques
Types of Trojans

Command Shell Trojans

Command Shell Trojan: Netcat

GUI Trojan: MoSucker

GUI Trojan: Jumper and Biodox

Document Trojans
E-mail Trojans

E-mail Trojans: RemoteByMail

Defacement Trojans

Defacement Trojans: Restorator

Botnet Trojans

Botnet Trojan: Illusion Bot
Botnet Trojan: NetBot Attacker

Proxy Server Trojans

Proxy Server Trojan: W3bPrOxy Tr0j4nCr34t0r (Funny Name)

FTP Trojans

FTP Trojan: TinyFTPD

VNC Trojans
HTTP/HTTPS Trojans

HTTP Trojan: HTTP RAT

Shttpd Trojan - HTTPS (SSL)
ICMP Tunneling

ICMP Trojan: icmpsend

Remote Access Trojans

Remote Access Trojan: RAT DarkComet
Remote Access Trojan: Apocalypse

Covert Channel Trojan: CCTT
E-banking Trojans
Banking Trojan Analysis

E-banking Trojan: ZeuS

Destructive Trojans
Notification Trojans
Credit Card Trojans
Data Hiding Trojans (Encrypted Trojans)
BlackBerry Trojan: PhoneSnoop
MAC OS X Trojan: DNSChanger
MAC OS X Trojan: DNSChanger
Mac OS X Trojan: Hell Raiser
How to Detect Trojans?

Scanning for Suspicious Ports
Port Monitoring Tool: IceSword
Port Monitoring Tools: CurrPorts and TCPView
Scanning for Suspicious Processes

Process Monitoring Tool: What's Running

Process Monitoring Tools

Scanning for Suspicious Registry Entries
Registry Entry Monitoring Tools
Scanning for Suspicious Device Drivers

Device Drivers Monitoring Tools: DriverView
Device Drivers Monitoring Tool

Scanning for Suspicious Windows Services

Windows Services Monitoring Tools: Windows Service Manager (SrvMan)
Windows Services Monitoring Tools

Scanning for Suspicious Startup Programs

Windows7 Startup Registry Entries
Startup Programs Monitoring Tools: Starter
Startup Programs Monitoring Tools: Security AutoRun
Startup Programs Monitoring Tools

Scanning for Suspicious Files and Folders

Files and Folder Integrity Checker: FastSum and WinMD5
Files and Folder Integrity Checker

Scanning for Suspicious Network Activities

Detecting Trojans and Worms with Capsa Network Analyzer

Trojan Countermeasures
Backdoor Countermeasures
Trojan Horse Construction Kit
Anti-Trojan Software: TrojanHunter
Anti-Trojan Software: Emsisoft Anti-Malware
Anti-Trojan Softwares
Pen Testing for Trojans and Backdoors

Eğitim 7 - Viruses and Worms

Introduction to Viruses
Virus and Worm Statistics 2010
Stages of Virus Life
Working of Viruses: Infection Phase
Working of Viruses: Attack Phase
Why Do People Create Computer Viruses?
Indications of Virus Attack
How does a Computer get Infected by Viruses?
Virus Hoaxes
Virus Analysis:

W32/Sality AA
W32/Toal-A
W32/Virut
Klez

Types of Viruses

System or Boot Sector Viruses
File and Multipartite Viruses
Macro Viruses
Cluster Viruses
Stealth/Tunneling Viruses
Encryption Viruses
Polymorphic Code
Metamorphic Viruses
File Overwriting or Cavity Viruses
Sparse Infector Viruses
Companion/Camouflage Viruses
Shell Viruses
File Extension Viruses
Add-on and Intrusive Viruses

Transient and Terminate and Stay Resident Viruses
Writing a Simple Virus Program

Terabit Virus Maker
JPS Virus Maker
DELmE's Batch Virus Maker

Computer Worms
How is a Worm Different from a Virus?
Example of Worm Infection: Conficker Worm

What does the Conficker Worm do?
How does the Conficker Worm Work?

Worm Analysis:

W32/Netsky
W32/Bagle.GE

Worm Maker: Internet Worm Maker Thing
What is Sheep Dip Computer?
Anti-Virus Sensors Systems
Malware Analysis Procedure
String Extracting Tool: Bintext
Compression and Decompression Tool: UPX
Process Monitoring Tools: Process Monitor
Log Packet Content Monitoring Tools: NetResident
Debugging Tool: Ollydbg
Virus Analysis Tool: IDA Pro
Online Malware Testing:

Sunbelt CWSandbo
VirusTotal

Online Malware Analysis Services
Virus Detection Methods
Virus and Worms Countermeasures
Companion Antivirus: Immunet Protect
Anti-virus Tools
Penetration Testing for Virus

Eğitim 8 - Sniffers

Lawful Intercept

Benefits of Lawful Intercept
Network Components Used for Lawful Intercept

Wiretapping
Sniffing Threats
How a Sniffer Works?
Hacker Attacking a Switch
Types of Sniffing: Passive Sniffing
Types of Sniffing: Active Sniffing
Protocols Vulnerable to Sniffing
Tie to Data Link Layer in OSI Model
Hardware Protocol Analyzers
SPAN Port
MAC Flooding

MAC Address/CAM Table
How CAM Works?
What Happens When CAM Table is Full?
Mac Flooding Switches with macof
MAC Flooding Tool: Yersinia
How to Defend against MAC Attacks?

How DHCP Works?

DHCP Request/Reply Messages
IPv4 DHCP Packet Format
DHCP Starvation Attack
Rogue DHCP Server Attack
DHCP Starvation Attack Tool: Gobbler
How to Defend Against DHCP Starvation and Rogue Server Attack?

What is Address Resolution Protocol (ARP)?

ARP Spoofing Attack
How Does ARP Spoofing Work?
Threats of ARP Poisoning
ARP Poisoning Tool: Cain and Abel
ARP Poisoning Tool: WinArpAttacker
ARP Poisoning Tool: Ufasoft Snif
How to Defend Against ARP Poisoning? Use DHCP Snooping Binding Table and Dynamic ARP Inspection

Configuring DHCP Snooping and Dynamic ARP Inspection on Cisco Switches
MAC Spoofing/Duplicating

Spoofing Attack Threats
MAC Spoofing Tool: SMAC
How to Defend Against MAC Spoofing? Use DHCP Snooping Binding Table, Dynamic ARP Inspection and IP Source Guard

DNS Poisoning Techniques

Intranet DNS Spoofing
Internet DNS Spoofing
Proxy Server DNS Poisoning
DNS Cache Poisoning
How to Defend Against DNS Spoofing?

Sniffing Tool: Wireshark

Follow TCP Stream in Wireshark
Display Filters in Wireshark
Additional Wireshark Filters

Sniffing Tool: CACE Pilot
Sniffing Tool: Tcpdump/Windump
Discovery Tool: NetworkView
Discovery Tool: The Dude Sniffer
Password Sniffing Tool: Ace
Packet Sniffing Tool: Capsa Network Analyzer
OmniPeek Network Analyzer
Network Packet Analyzer: Observer
Session Capture Sniffer: NetWitness
Email Message Sniffer: Big-Mother
TCP/IP Packet Crafter: Packet Builder
Additional Sniffing Tools
How an Attacker Hacks the Network Using Sniffers?
How to Defend Against Sniffing?
Sniffing Prevention Techniques
How to Detect Sniffing?
Promiscuous Detection Tool: PromqryUI
Promiscuous Detection Tool: PromiScan

Eğitim 9 - Social Engineering

What is Social Engineering?
Behaviors Vulnerable to Attacks

Factors that Make Companies Vulnerable to Attacks

Why is Social Engineering Effective?
Warning Signs of an Attack
Phases in a Social Engineering Attack
Impact on the Organization
Command Injection Attacks
Common Targets of Social Engineering

Common Targets of Social Engineering: Office Workers

Types of Social Engineering

Human-Based Social Engineering

Types of Social Engineering

Human-Based Social Engineering

Technical Support Example
Authority Support Example
Human-based Social Engineering: Dumpster Diving

Computer-Based Social Engineering

Computer-Based Social Engineering: Pop-Ups
Computer-Based Social Engineering: Phishing

Social Engineering Using SMS
Social Engineering by a "Fake SMS Spying Tool"

Insider Attack

Disgruntled Employee
Preventing Insider Threats

Common Intrusion Tactics and Strategies for Prevention

Social Engineering Through Impersonation on Social Networking Sites

Social Engineering Example: LinkedIn Profile
Social Engineering on Facebook
Social Engineering on Twitter
Social Engineering on Orkut
Social Engineering on MySpace

Risks of Social Networking to Corporate Networks

Identity Theft Statistics 2010

Identify Theft
How to Steal an Identity?
STEP 1
STEP 2
STEP 3

Real Steven Gets Huge Credit Card Statement

Identity Theft - Serious Problem

Social Engineering Countermeasures: Policies

Social Engineering Countermeasures

How to Detect Phishing Emails?

Anti-Phishing Toolbar: Netcraft
Anti-Phishing Toolbar: PhishTank

Identity Theft Countermeasures

Social Engineering Pen Testing

Social Engineering Pen Testing: Using Emails
Social Engineering Pen Testing: Using Phone
Social Engineering Pen Testing: In Person

Eğitim 10 - Denial of Service

What is a Denial of Service Attack?
What is Distributed Denial of Service Attacks?

How Distributed Denial of Service Attacks Work?

Symptoms of a DoS Attack
Cyber Criminals

Organized Cyber Crime: Organizational Chart

Internet Chat Query (ICQ)
Internet Relay Chat (IRC)
DoS Attack Techniques

Bandwidth Attacks
Service Request Floods
SYN Attack
SYN Flooding
ICMP Flood Attack
Peer-to-Peer Attacks
Permanent Denial-of-Service Attack
Application Level Flood Attacks

Botnet

Botnet Propagation Technique
Botnet Ecosystem
Botnet Trojan: Shark
Poison Ivy: Botnet Command Control Center
Botnet Trojan: PlugBot

WikiLeak Operation Payback

DDoS Attack
DDoS Attack Tool: LOIC
Denial of Service Attack Against MasterCard, Visa, and Swiss Banks
Hackers Advertise Links to Download Botnet

DoS Attack Tools
Detection Techniques

Activity Profiling
Wavelet Analysis
Sequential Change-Point Detection

DoS/DDoS Countermeasure Strategies
DDoS Attack Countermeasures

DoS/DDoS Countermeasures: Protect Secondary Victims
DoS/DDoS Countermeasures: Detect and Neutralize Handlers
DoS/DDoS Countermeasures: Detect Potential Attacks
DoS/DDoS Countermeasures: Deflect Attacks
DoS/DDoS Countermeasures: Mitigate Attacks

Post-attack Forensics
Techniques to Defend against Botnets
DoS/DDoS Countermeasures
DoS/DDoS Protection at ISP Level
Enabling TCP Intercept on Cisco IOS Software
Advanced DDoS Protection: IntelliGuard DDoS Protection System (DPS)
DoS/DDoS Protection Tool
Denial of Service (DoS) Attack Penetration Testing

Eğitim 11 - Session Hijacking

What is Session Hijacking?
Dangers Posed by Hijacking
Why Session Hijacking is Successful?
Key Session Hijacking Techniques
Brute Forcing

Brute Forcing Attack

HTTP Referrer Attack
Spoofing vs. Hijacking
Session Hijacking Process
Packet Analysis of a Local Session Hijack
Types of Session Hijacking

Session Hijacking in OSI Model
Application Level Session Hijacking
Session Sniffing

Predictable Session Token

How to Predict a Session Token?

Man-in-the-Middle Attack
Man-in-the-Browser Attack

Steps to Perform Man-in-the-Browser Attack

Client-side Attacks
Cross-site Script Attack
Session Fixation

Session Fixation Attack

Network Level Session Hijacking
The 3-Way Handshake
Sequence Numbers

Sequence Number Prediction

TCP/IP Hijacking
IP Spoofing: Source Routed Packets
RST Hijacking
Blind Hijacking
Man-in-the-Middle Attack using Packet Sniffer
UDP Hijacking
Session Hijacking Tools

Paros
Burp Suite
Firesheep

Countermeasures
Protecting against Session Hijacking
Methods to Prevent Session Hijacking: To be Followed by Web Developers
Methods to Prevent Session Hijacking: To be Followed by Web Users
Defending against Session Hijack Attacks
Session Hijacking Remediation
IPSec

Modes of IPSec
IPSec Architecture
IPSec Authentication and Confidentiality
Components of IPSec
IPSec Implementation

Session Hijacking Pen Testing

Eğitim 12 - Hijacking Webservers

Webserver Market Shares
Open Source Webserver Architecture
IIS Webserver Architecture
Website Defacement
Case Study
Why Web Servers are Compromised?
Impact of Webserver Attacks
Webserver Misconfiguration

Example

Directory Traversal Attacks
HTTP Response Splitting Attack
Web Cache Poisoning Attack
HTTP Response Hijacking
SSH Bruteforce Attack
Man-in-the-Middle Attack
Webserver Password Cracking

Webserver Password Cracking Techniques

Web Application Attacks
Webserver Attack Methodology

Information Gathering
Webserver Footprinting

Webserver Footprinting Tools

Mirroring a Website
Vulnerability Scanning
Session Hijacking
Hacking Web Passwords

Webserver Attack Tools

Metasploit

Metasploit Architecture
Metasploit Exploit Module
Metasploit Payload Module
Metasploit Auxiliary Module
Metasploit NOPS Module

Wfetch

Web Password Cracking Tool

Brutus
THC-Hydra

Countermeasures

Patches and Updates
Protocols
Accounts
Files and Directories

How to Defend Against Web Server Attacks?
How to Defend against HTTP Response Splitting and Web Cache Poisoning?
Patches and Hotfixes
What is Patch Management?
Identifying Appropriate Sources for Updates and Patches
Installation of a Patch
Patch Management Tool: Microsoft Baseline Security Analyzer (MBSA)

Patch Management Tools

Web Application Security Scanner: Sandcat
Web Server Security Scanner: Wikto
Webserver Malware Infection Monitoring Tool: HackAlert
Webserver Security Tools
Web Server Penetration Testing

Eğitim 13 - Hijacking Web Applications

Web Application Security Statistics
Introduction to Web Applications
Web Application Components
How Web Applications Work?
Web Application Architecture
Web 2.0 Applications
Vulnerability Stack
Web Attack Vectors
Web Application Threats - 1
Web Application Threats - 2
Unvalidated Input
Parameter/Form Tampering
Directory Traversal
Security Misconfiguration
Injection Flaws

SQL Injection Attacks
Command Injection Attacks
Command Injection Example
File Injection Attack

What is LDAP Injection?
How LDAP Injection Works?
Hidden Field Manipulation Attack
Cross-Site Scripting (XSS) Attacks

How XSS Attacks Work?
Cross-Site Scripting Attack Scenario: Attack via Email
XSS Example: Attack via Email
XSS Example: Stealing Users' Cookies
XSS Example: Sending an Unauthorized Request
XSS Attack in Blog Posting
XSS Attack in Comment Field
XSS Cheat Sheet
Cross-Site Request Forgery (CSRF) Attack
How CSRF Attacks Work?

Web Application Denial-of-Service (DoS) Attack

Denial of Service (DoS) Examples

Buffer Overflow Attacks
Cookie/Session Poisoning

How Cookie Poisoning Works?

Session Fixation Attack
Insufficient Transport Layer Protection
Improper Error Handling
Insecure Cryptographic Storage
Broken Authentication and Session Management
Unvalidated Redirects and Forwards
Web Services Architecture

Web Services Attack
Web Services Footprinting Attack
Web Services XML Poisoning

Footprint Web Infrastructure

Footprint Web Infrastructure: Server Discovery
Footprint Web Infrastructure: Server Identification/Banner Grabbing
Footprint Web Infrastructure: Hidden Content Discovery

Web Spidering Using Burp Suite
Hacking Web Servers

Web Server Hacking Tool: WebInspect

Analyze Web Applications

Analyze Web Applications: Identify Entry Points for User Input
Analyze Web Applications: Identify Server-Side Technologies
Analyze Web Applications: Identify Server-Side Functionality
Analyze Web Applications: Map the Attack Surface

Attack Authentication Mechanism
Username Enumeration
Password Attacks: Password Guessing
Password Attacks: Brute-forcing
Session Attacks: Session ID Prediction/ Brute-forcing
Cookie Exploitation: Cookie Poisoning
Authorization Attack

HTTP Request Tampering
Authorization Attack: Cookie Parameter Tampering

Session Management Attack

Attacking Session Token Generation Mechanism
Attacking Session Tokens Handling Mechanism: Session Token Sniffing

Injection Attacks
Attack Data Connectivity

Connection String Injection
Connection String Parameter Pollution (CSPP) Attacks
Connection Pool DoS

Attack Web App Client
Attack Web Services
Web Services Probing Attacks

Web Service Attacks: SOAP Injection
Web Service Attacks: XML Injection
Web Services Parsing Attacks

Web Service Attack Tool: soapUI
Web Service Attack Tool: XMLSpy
Web Application Hacking Tool: Burp Suite Professional
Web Application Hacking Tools: CookieDigger
Web Application Hacking Tools: WebScarab

Web Application Hacking Tools

Encoding Schemes

How to Defend Against SQL Injection Attacks?
How to Defend Against Command Injection Flaws?
How to Defend Against XSS Attacks?
How to Defend Against DoS Attack?
How to Defend Against Web Services Attack?

Web Application Countermeasures

How to Defend Against Web Application Attacks?
Web Application Security Tool: Acunetix Web Vulnerability Scanner
Web Application Security Tool: Falcove Web Vulnerability Scanner
Web Application Security Scanner: Netsparker
Web Application Security Tool: N-Stalker Web Application Security Scanner
Web Application Security Tools

Web Application Firewall: dotDefender
Web Application Firewall: IBM AppScan
Web Application Firewall: ServerDefender VP

Web Application Firewall

Web Application Pen Testing

Information Gathering
Configuration Management Testing
Authentication Testing
Session Management Testing
Authorization Testing
Data Validation Testing
Denial of Service Testing
Web Services Testing
AJAX Testing

Eğitim 14 - SQL Injection

SQL Injection is the Most Prevalent Vulnerability in 2010
SQL Injection Threats
What is SQL Injection?
SQL Injection Attacks
How Web Applications Work?
Server Side Technologies
HTTP Post Request

Example 1: Normal SQL Query
Example 1: SQL Injection Query
Example 1: Code Analysis
Example 2: BadProductList.aspx
Example 2: Attack Analysis
Example 3: Updating Table
Example 4: Adding New Records
Example 5: Identifying the Table Name
Example 6: Deleting a Table

SQL Injection Detection

SQL Injection Error Messages
SQL Injection Attack Characters
Additional Methods to Detect SQL Injection

SQL Injection Black Box Pen Testing

Testing for SQL Injection

Types of SQL Injection

Simple SQL Injection Attack
Union SQL Injection Example
SQL Injection Error Based

What is Blind SQL Injection?

No Error Messages Returned
Blind SQL Injection: WAITFOR DELAY YES or NO Response
Blind SQL Injection - Exploitation (MySQL)
Blind SQL Injection - Extract Database User
Blind SQL Injection - Extract Database Name
Blind SQL Injection - Extract Column Name
Blind SQL Injection - Extract Data from ROWS

SQL Injection Methodology
Information Gathering

Extracting Information through Error Messages
Understanding SQL Query
Bypass Website Logins Using SQL Injection

Database, Table, and Column Enumeration

Advanced Enumeration

Features of Different DBMSs

Creating Database Accounts

Password Grabbing

Grabbing SQL Server Hashes
Extracting SQL Hashes (In a Single Statement)

Transfer Database to Attacker's Machine
Interacting with the Operating System
Interacting with the FileSystem
Network Reconnaissance Full Query
SQL Injection Tools

SQL Injection Tools: BSQLHacker
SQL Injection Tools: Marathon Tool
SQL Injection Tools: SQL Power Injector
SQL Injection Tools: Havij

Evading IDS

Types of Signature Evasion Techniques
Evasion Technique: Sophisticated Matches
Evasion Technique: Hex Encoding
Evasion Technique: Manipulating White Spaces
Evasion Technique: In-line Comment
Evasion Technique: Char Encoding
Evasion Technique: String Concatenation
Evasion Technique: Obfuscated Codes

How to Defend Against SQL Injection Attacks?

How to Defend Against SQL Injection Attacks: Use Type-Safe SQL Parameters

SQL Injection Detection Tools

SQL Injection Detection Tool: Microsoft Source Code Analyzer
SQL Injection Detection Tool: Microsoft UrlScan
SQL Injection Detection Tool: dotDefender
SQL Injection Detection Tool: IBM AppScan

Snort Rule to Detect SQL Injection Attacks

Eğitim 15 - hacking Wireless Networks

Wireless Networks
Wi-Fi Usage Statistics in the US
Wi-Fi Hotspots at Public Places
Wi-Fi Networks at Home
Types of Wireless Networks
Wireless Standards
Service Set Identifier (SSID)
Wi-Fi Authentication Modes

Wi-Fi Authentication Process Using a Centralized Authentication Server
Wi-Fi Authentication Process

Wireless Terminologies
Wi-Fi Chalking

Wi-Fi Chalking Symbols

Wi-Fi Hotspot Finder: jiwire.com
Wi-Fi Hotspot Finder: WeFi.com
Types of Wireless Antenna
Parabolic Grid Antenna
Types of Wireless Encryption
WEP Encryption

How WEP Works?

What is WPA?

How WPA Works?

Temporal Keys
What is WPA2?

How WPA2 Works?

WEP vs. WPA vs. WPA2
WEP Issues
Weak Initialization Vectors (IV)
How to Break WEP Encryption?
How to Break WPA/WPA2 Encryption?
How to Defend Against WPA Cracking?
Wireless Threats: Access Control Attacks
Wireless Threats: Integrity Attacks
Wireless Threats: Confidentiality Attacks
Wireless Threats: Availability Attacks
Wireless Threats: Authentication Attacks
Rogue Access Point Attack
Client Mis-association
Misconfigured Access Point Attack
Unauthorized Association
Ad Hoc Connection Attack
HoneySpot Access Point Attack
AP MAC Spoofing
Denial-of-Service Attack
Jamming Signal Attack
Wi-Fi Jamming Devices
Wireless Hacking Methodology
Find Wi-Fi Networks to Attack
Attackers Scanning for Wi-Fi Networks
Footprint the Wireless Network
Wi-Fi Discovery Tool: inSSIDer
Wi-Fi Discovery Tool: NetSurveyor
Wi-Fi Discovery Tool: NetStumbler
Wi-Fi Discovery Tool: Vistumbler
Wi-Fi Discovery Tool: WirelessMon
Wi-Fi Discovery Tools
GPS Mapping

GPS Mapping Tool: WIGLE
GPS Mapping Tool: Skyhook

How to Discover Wi-Fi Network Using Wardriving?
Wireless Traffic Analysis
Wireless Cards and Chipsets
Wi-Fi USB Dongle: AirPcap
Wi-Fi Packet Sniffer: Wireshark with AirPcap
Wi-Fi Packet Sniffer: Wi-Fi Pilot
Wi-Fi Packet Sniffer: OmniPeek
Wi-Fi Packet Sniffer: CommView for Wi-Fi
What is Spectrum Analysis?
Wireless Sniffers
Aircrack-ng Suite
How to Reveal Hidden SSIDs
Fragmentation Attack
How to Launch MAC Spoofing Attack?
Denial of Service: Deauthentication and Disassociation Attacks
Man-in-the-Middle Attack
MITM Attack Using Aircrack-ng
Wireless ARP Poisoning Attack
Rogue Access Point
Evil Twin

How to Set Up a Fake Hotspot (Evil Twin)?

How to Crack WEP Using Aircrack?
How to Crack WEP Using Aircrack? Screenshot 1/2
How to Crack WEP Using Aircrack? Screenshot 2/2
How to Crack WPA-PSK Using Aircrack?
WPA Cracking Tool: KisMAC
WEP Cracking Using Cain & Abel
WPA Brute Forcing Using Cain & Abel
WPA Cracking Tool: Elcomsoft Wireless Security Auditor
WEP/WPA Cracking Tools
Wi-Fi Sniffer: Kismet
Wardriving Tools
RF Monitoring Tools
Wi-Fi Connection Manager Tools
Wi-Fi Traffic Analyzer Tools
Wi-Fi Raw Packet Capturing Tools
Wi-Fi Spectrum Analyzing Tools
Bluetooth Hacking

Bluetooth Stack
Bluetooth Threats

How to BlueJack a Victim?
Bluetooth Hacking Tool: Super Bluetooth Hack
Bluetooth Hacking Tool: PhoneSnoop
Bluetooth Hacking Tool: BlueScanner

Bluetooth Hacking Tools

How to Defend Against Bluetooth Hacking?
How to Detect and Block Rogue AP?
Wireless Security Layers
How to Defend Against Wireless Attacks?
Wireless Intrusion Prevention Systems
Wireless IPS Deployment
Wi-Fi Security Auditing Tool: AirMagnet WiFi Analyzer
Wi-Fi Security Auditing Tool: AirDefense
Wi-Fi Security Auditing Tool: Adaptive Wireless IPS
Wi-Fi Security Auditing Tool: Aruba RFProtect WIPS
Wi-Fi Intrusion Prevention System
Wi-Fi Predictive Planning Tools
Wi-Fi Vulnerability Scanning Tools
Wireless Penetration Testing

Wireless Penetration Testing Framework
Wi-Fi Pen Testing Framework
Pen Testing LEAP Encrypted WLAN
Pen Testing WPA/WPA2 Encrypted WLAN
Pen Testing WEP Encrypted WLAN
Pen Testing Unencrypted WLAN

Eğitim 16 - Evading IDS, Firewalls and Honeypots

Intrusion Detection Systems (IDS) and its Placement
How IDS Works?
Ways to Detect an Intrusion
Types of Intrusion Detection Systems
System Integrity Verifiers (SIV)
General Indications of Intrusions
General Indications of System Intrusions
Firewall

Firewall Architecture

DeMilitarized Zone (DMZ)
Types of Firewall

Packet Filtering Firewall
Circuit-Level Gateway Firewall
Application-Level Firewall
Stateful Multilayer Inspection Firewall

Firewall Identification

Port Scanning
Firewalking
Banner Grabbing

Honeypot

Types of Honeypots

How to Set Up a Honeypot?
Intrusion Detection Tool

Snort
Snort Rules
Rule Actions and IP Protocols
The Direction Operator and IP Addresses
Port Numbers

Intrusion Detection Systems: Tipping Point

Intrusion Detection Tools

Firewall: Sunbelt Personal Firewall

Firewalls

Honeypot Tools

KFSensor
SPECTER

Insertion Attack
Evasion
Denial-of-Service Attack (DoS)
Obfuscating
False Positive Generation
Session Splicing
Unicode Evasion Technique
Fragmentation Attack
Overlapping Fragments
Time-To-Live Attacks
Invalid RST Packets
Urgency Flag
Polymorphic Shellcode
ASCII Shellcode
Application-Layer Attacks
Desynchronization
Pre Connection SYN
Post Connection SYN
Other Types of Evasion

IP Address Spoofing
Attacking Session Token Generation Mechanism
Tiny Fragments

Bypass Blocked Sites Using IP Address in Place of URL

Bypass Blocked Sites Using Anonymous Website Surfing Sites

Bypass a Firewall using Proxy Server

Bypassing Firewall through ICMP Tunneling Method
Bypassing Firewall through ACK Tunneling Method
Bypassing Firewall through HTTP Tunneling Method
Bypassing Firewall through External Systems
Bypassing Firewall through MITM Attack

Detecting Honeypots
Honeypot Detecting Tool: Send-Safe Honeypot Hunter
Firewall Evasion Tools

Traffic IQ Professional
tcp-over-dns

Packet Fragment Generators
Countermeasures
Firewall/IDS Penetration Testing

Firewall Penetration Testing
IDS Penetration Testing

Eğitim 17 - Buffer Overflow

Buffer Overflows
Why are Programs And Applications Vulnerable?
Understanding Stacks
Stack-Based Buffer Overflow
Understanding Heap

Heap-Based Buffer Overflow

Stack Operations

Shellcode
No Operations (NOPs)

Knowledge Required to Program Buffer Overflow Exploits
Buffer Overflow Steps

Attacking a Real Program
Format String Problem
Overflow using Format String
Smashing the Stack
Once the Stack is Smashed...

Simple Uncontrolled Overflow
Simple Buffer Overflow in C
Code Analysis
Exploiting Semantic Comments in C (Annotations)
How to Mutate a Buffer Overflow Exploit?
Identifying Buffer Overflows
How to Detect Buffer Overflows in a Program?
BOU (Buffer Overflow Utility)
Testing for Heap Overflow Conditions: heap.exe
Steps for Testing for Stack Overflow in OllyDbg Debugger

Testing for Stack Overflow in OllyDbg Debugger

Testing for Format String Conditions using IDA Pro
BoF Detection Tools
Defense Against Buffer Overflows

Preventing BoF Attacks
Programming Countermeasures

Data Execution Prevention (DEP)
Enhanced Mitigation Experience Toolkit (EMET)

EMET System Configuration Settings
EMET Application Configuration Window

/GS http://microsoft.com
BoF Security Tools

BufferShield

Buffer Overflow Penetration Testing

Eğitim 18 - Cryptography

Cryptography
Types of Cryptography
Government Access to Keys (GAK)
Ciphers
Advanced Encryption Standard (AES)
Data Encryption Standard (DES)
RC4, RC5, RC6 Algorithms
The DSA and Related Signature Schemes
RSA (Rivest Shamir Adleman)

Example of RSA Algorithm
The RSA Signature Scheme

Message Digest (One-way Bash) Functions

Message Digest Function: MD5

Secure Hashing Algorithm (SHA)
What is SSH (Secure Shell)?
MD5 Hash Calculators: HashCalc, MD5 Calculator and HashMyFiles
Cryptography Tool: Advanced Encryption Package
Cryptography Tools
Public Key Infrastructure (PKI)
Certification Authorities
Digital Signature
SSL (Secure Sockets Layer)
Transport Layer Security (TLS)
Disk Encryption

Disk Encryption Tool: TrueCrypt
Disk Encryption Tools

Cryptography Attacks
Code Breaking Methodologies

Brute-Force Attack

Meet-in-the-Middle Attack on Digital Signature Schemes
Cryptanalysis Tool: CrypTool
Cryptanalysis Tools
Online MD5 Decryption Tool

Eğitim 19 - Penetration Testing

Introduction to Penetration Testing
Security Assessments
Vulnerability Assessment

Limitations of Vulnerability Assessment

Penetration Testing
Why Penetration Testing?
What Should be Tested?
What Makes a Good Penetration Test?
ROI on Penetration Testing
Testing Points
Testing Locations
Types of Penetration Testing

External Penetration Testing
Internal Security Assessment
Black-box Penetration Testing
Grey-box Penetration Testing
White-box Penetration Testing
Announced / Unannounced Testing
Automated Testing
Manual Testing

Common Penetration Testing Techniques
Using DNS Domain Name and IP Address Information
Enumerating Information about Hosts on Publicly-Available Networks
Phases of Penetration Testing

Pre-Attack Phase
Attack Phase

Activity: Perimeter Testing
Enumerating Devices
Activity: Acquiring Target
Activity: Escalating Privileges
Activity: Execute, Implant, and Retract

Post-Attack Phase and Activities

Penetration Testing Deliverable Templates

Penetration Testing Methodology

Application Security Assessment

Web Application Testing - I
Web Application Testing - II
Web Application Testing - III

Network Security Assessment
Wireless/Remote Access Assessment

Wireless Testing

Telephony Security Assessment
Social Engineering
Testing Network-Filtering Devices
Denial of Service Emulation

Outsourcing Penetration Testing Services

Terms of Engagement
Project Scope
Project Scope
Penetration Testing Consultants
Denial of Service Emulation

Evaluating Different Types of Pentest Tools
Application Security Assessment Tool

Webscarab

Network Security Assessment Tool

Angry IP scanner
GFI LANguard

Wireless/Remote Access Assessment Tool

Kismet

Telephony Security Assessment Tool

Omnipee

Testing Network-Filtering Device Tool

Traffic IQ Professional

CCNA Security — cliguru.com kaynak sürümü

Orijinal tarihsel kaynak: https://www.cliguru.com/CCNA-Security

CCNA Security Eğitimi İçeriği

Implementing Cisco IOS Network Security (IINS)

Öngereksinimler:

CCNA

Kurs Tanımı:

CCNA Security network'ün temellerini anlamış olan katılımcılara network güvenliği hakkında temel bilgi sağlamaya yönelik hazırlanmış bir eğitimdir.

Kurs İçeriği:

Modül 1 - Common Security Threats
Modül 2 - Security and Cisco Routers
Modül 3 - AAA on Cisco Devices
Modül 4 - IOS ACLs
Modül 5 - Secure Network Management and Reporting
Modül 6 - Common Layer 2 Attacks
Modül 7 - Cisco Firewall Technologies
Modül 8 - Cisco IPS
Modül 9 - VPN Technologies

CCNA Security Deneme Sınavı

CCNA Security (Arşiv) — eğitim ayrıntıları ve PDF

Ayrıntılı CCNA Security İçeriği

1. Common Security Threats

1.1. Describe common security threats

1.1.1. Common threats to the physical installation
1.1.2. Mitigation methods for common network attacks
1.1.3. Email-based threats
1.1.4. Web-based attacks
1.1.5. Mitigation methods for Worm, Virus, and Trojan Horse attacks
1.1.6. Phases of a secure network lifecycle
1.1.7. Security needs of a typical enterprise with a comprehensive security policy
1.1.8. Mobile/remote security
1.1.9. DLP

2. Security and Cisco Routers

2.1. Implement security on Cisco routers

2.1.1. CCP Security Audit feature
2.1.2. CCP One-Step Lockdown feature
2.1.3. Secure router access using strong encrypted passwords, and using IOS login enhancements, IPV6 security.
2.1.4. Multiple privilege levels/li>
2.1.5. Role-based CLI
2.1.6. Cisco IOS image and configuration files

2.2. Describe securing the control, data and management plane
2.3. Describe CSM
2.4. Describe IPv4 to IPv6 transition

2.4.1. Reasons for IPv6
2.4.2. Understanding IPv6 addressing
2.4.3. Assigning IPv6 addresses
2.4.4. Routing considerations for IPv6

3. AAA on Cisco Devices

3.1. Implement authentication, authorization and accounting (AAA)

3.1.1. AAA using CCP on routers
3.1.2. AAA using CLI on routers and switches
3.1.3. AAA on ASA

3.2. Describe TACACS+
3.3. Describe RADIUS
3.4. Describe AAA

3.4.1. Authentication
3.4.2. Authorization
3.4.3. Accounting

3.5. Verify AAA functionality

4. IOS ACLs

4.1. Describe standard, extended, and named IP IOS ACLs to filter packets

4.1.1. IPv4
4.1.2. IPv6
4.1.3. Object groups
4.1.4. ACL operations
4.1.5. Types of ACLs (dynamic, reflexive, time-based ACLs)
4.1.6. ACL wild card masking
4.1.7. Standard ACLs
4.1.8. Extended ACLs
4.1.9. Named ACLs
4.1.10. VLSM

4.2. Describe considerations when building ACLs

4.2.1. Sequencing of ACEs
4.2.2. Modification of ACEs

4.3. Implement IP ACLs to mitigate threats in a network

4.3.1. Filter IP traffic
4.3.2. SNMP
4.3.3. DDoS attacks
4.3.4. CLI
4.3.5. CCP
4.3.6. IP ACLs to prevent IP spoofing
4.3.7. VACLs

5. Secure Network Management and Reporting

5.1. Describe secure network management

5.1.1. In-band
5.1.2. Out of band
5.1.3. Management protocols
5.1.4. Management enclave
5.1.5. Management plane

5.2. Implement secure network management

5.2.1. SSH
5.2.2. syslog
5.2.3. SNMP
5.2.4. NTP
5.2.5. SCP
5.2.6. CLI
5.2.7. CCP
5.2.8. SSL

6. Common Layer 2 Attacks

6.1. Describe Layer 2 security using Cisco switches

6.1.1. STP attacks
6.1.2. ARP spoofing
6.1.3. MAC spoofing
6.1.4. CAM overflows
6.1.5. CDP/LLDP

6.2. Describe VLAN Security

6.2.1. Voice VLAN
6.2.2. PVLAN
6.2.3. VLAN hopping
6.2.4. Native VLAN

6.3. Implement VLANs and trunking

6.3.1. VLAN definition
6.3.2. Grouping functions into VLANs
6.3.3. Considering traffic source to destination paths
6.3.4. Trunking
6.3.5. Native VLAN
6.3.6. VLAN trunking protocols
6.3.7. Inter-VLAN routing

6.4. Implement Spanning Tree

6.4.1. Potential issues with redundant switch topologies
6.4.2. STP operations
6.4.3. Resolving issues with STP

7. Cisco Firewall Technologies

7.1. Describe operational strengths and weaknesses of the different firewall technologies

7.1.1. Proxy firewalls
7.1.2. Packet and stateful packet
7.1.3. Application firewall
7.1.4. Personal firewal

7.2. Describe stateful firewalls

7.2.1. Operations
7.2.2. Function of the state table

7.3. Describe the types of NAT used in firewall technologies

7.3.1. Static
7.3.2. Dynamic
7.3.3. PAT

7.4. Implement Zone Based Firewall using CCP

7.4.1. Zone to zone
7.4.2. Self zone

7.5. Implement the Cisco Adaptive Security Appliance (ASA)

7.5.1. NAT
7.5.2. ACL
7.5.3. Default MPF
7.5.4. Cisco ASA sec level

7.6. Implement NAT and PAT

7.6.1. Functions of NAT, PAT, and NAT Overload
7.6.2. Translating inside source addresses
Overloading Inside global addresses/li>

8. Cisco IPS

8.1. Describe IPS deployment considerations

8.1.1. SPAN
8.1.2. IPS product portfolio
8.1.3. Placement
8.1.4. Caveats

8.2. Describe IPS technologies

8.2.1. Attack responses
8.2.2. Monitoring options
8.2.3. syslog
8.2.4. SDEE
8.2.5. Signature engines
8.2.6. Signatures
8.2.7. Global correlation and SIO
8.2.8. Network-based
8.2.9. Host-based

8.3. Configure Cisco I Logging OS IPS using CCP

8.3.1. Logging
8.3.2. Signatures

9. VPN Technologies

9.1. Describe the different methods used in cryptography

9.1.1. Symmetric
9.1.2. Asymetric
9.1.3. HMAC
9.1.4. Message digest
9.1.5. PKI

9.2. Describe VPN technologies

9.2.1. IPsec
9.2.2. SSL

9.3. Describe the building blocks of IPSec

9.3.1. IKE
9.3.2. ESP
9.3.3. AH
9.3.4. Tunnel mode
9.3.5. Transport mode

9.4. Implement an IOS IPSec site-to-site VPN with pre-shared key authentication

9.4.1. CCP
9.4.2. CLI

9.5. Verify VPN operations
9.6. Implement SSL VPN using ASA device manager

9.6.1. Clientless
9.6.2. AnyConnect

Ayrıntılı CCNA Security Türkçe İçerik

IINS - Implementing Cisco IOS Network Security

Eğitim 1 - NAT ve PAT

NAT ve PAT Temelleri.
NAT ve PAT Yapılandırması.
NAT ve PAT Sürdürülebilirliği.
Gelişmiş Konseptler.

Eğitim 2 - Ağ Güvenlik Prensiplerine Giriş

Ağ Güvenlik Temelleri.
Ağ Saldırıları Metodolojisi.
İşlem Güvenliği.
Güvenlik İlkeleri.
Cisco Self-Defending Ağları Oluşturma.
Şifreleme Servisleri.
Simetrik Şifreleme.
Şifreleme Hash'leri ve Dijital İmzalar.
Asimetrik Şifreleme ve PKI.

Eğitim 3 - Ağ Güvenliği

Yönetimsel Erişimin Güvenliği.
Cisco SDM.
Cisco Router'da Yerel Veri Tabanı Kullanılarak AAA Yapılandırması.
Cisco Router'da Cisco ACS Kullanarak AAA Yapılandırması.
Güvenli Yönetim ve Raporlamanın Devreye Sokulması.
Router'ı Kilitlemek.

Eğitim 4 - Cisco IOS Firewall Kullanarak Ağ Güvenliğini Sağlamak

Güvenlik Duvarı Teknolojileri.
ACL Kullanarak Sabit Paket Filtreleme Yapmak.
Cisco IOS ZBPFW Yapılandırması.

Eğitim 5 - Site-to-Site VPN

IPSec Temelleri.
Site-to-Site IPSec VPN Oluşturma.
Cisco SDM kullanılan bir Site-to-Site VPN'de IPSec Yapılandırmak.
IPSec over GRE.

Eğitim 6 - Cisco IOS IPS Kullanarak Ağ Güvenliğini Sağlamak

IPS Teknolojisi.
Cisco IOS IPS'I Cisco SDM Kullanarak Yapılandırmak.

Eğitim 7 - LAN,SAN,Ses ve Son Nokta Güvenliği

Son-nokta Güvenliği.
SAN Güvenliği.
Ses Güvenliği.
Layer 2 Saldırıları Azaltma.

Labaratuar Çalışmaları

Lab 1: IOS Yönetim Erişimi Güvenliği.Fiziksel Linelara şifre verilmesi.Enable Secret şifresi verilmesi.VTY Line için şifre verilmesi.Service Password Encryption Komutunun kullanımı.Şifrelerin şifrelenmesi ve güvenliği.Haslenmiş şifrelerin güvenliği.Minimum Şifre Uzunluğu.Line zaman aşımı.Yetki Seviyeleri.Banner Mesajlarının Konfigürasyonu.IOS-FW konfigürasyonunun kontrolü.
Lab 2: Cisco SDM Hazırlığı.SDM için Admin PC oluşturma.IOS-FWnin SDM için hazırlanması.SDMin admin PCye yüklenmesi.SDM Başlatılması.IOS-FW Anahtar ve sertifikalarının Yönetilmesi.SDM'in yeniden başlatılması.Router Konfigürasyonunun kontrolü.
Lab 3: Local Database ile IOS AAA konfigürasyonu.AAA'yı aktifleştir.AAA'yı test et.Kullanıcı adı ve şifreler oluştur, test et.Kişi bazlı IOS yetkileri oluştur.Kişi bazlı CLI ve AAA Authorization.SDM Rolleri.Gelişmiş login rolleri.Router Konfigürasyonunun kontrolü.
Lab 4: IOS AAA nın ACS ile kontrolü.ACS'ye bağlan.IOS-FW'yi ACS bağlantısı için hazırla.ACS üzerinde yeni bir grup tanımla.ACS-Based Authentication ve Authorization konfigürasyonu.ACS-Based Authentication ve Authorization testi.ACS ve Active Directory Entegrasyonu konfigürasyonu.Fallback Method Testi.Command Authorization kümeleri.AAA Accounting.Router Konfigürasyonunun kontrolü.
Lab 5: IOS Güvenli Yönetim ve Raporlama.SSH Server Konfigürasyon.IOS-FW üzerinde NTP konfigürasyonu.IOS-FW üzerinde syslog konfigürasyonu.Perimeter Router üzerinde syslog konfigürasyonu.Unicast-VRF Verification konfigürasyonu.Route Authentication Konfigürasyonu.Router Konfigürasyonunun kontrolü
Lab 6: IOS Router servislerinin Güvenliği.Mock Security Audit Çalıştırma.Real Security Audit Çalıştırma.Konfigürasyon iletişim Kontrolü.Router Konfigürasyonunun kontrolü.
Lab 7: ACL kullanrak paket filtreleme.VTY erişimini limitle.Bogon paketlerini filtrele.Paket Filtreleme limitlerini anlama.Beklenen trafiğin DMZ servera gitmesine izin ver.Diğer Servislere izin ver.ACL kurallarını test et.Var olan ACL içerisine yeni kurallar ekle.Router Konfigürasyonunun kontrolü.
Lab 8: IOS Zone-Based Firewall.Basit Firewall kurulumu.DMZ Inbound konfigürasyonu.DMZ Outbound konfigürasyonu.Perimeter Router yönetimine izin vermek.Attack Mitigation Gösterimi.Router Konfigürasyonunun kontrolü.

CCNA Security Deneme Sınavı

CCNA Security (Arşiv) — eğitim ayrıntıları ve PDF

CCNP Security — cliguru.com kaynak sürümü

Orijinal tarihsel kaynak: https://www.cliguru.com/CCNP_Security

CCNP Security Eğitim İçeriği

Kurs Tanımı:

CCNP Security eğitimi, giriş seviyesi network ve security bilgilerini alan katılımcıların kariyerlerini güvenlik üzerine sürdürebilmeleri için hazırlanmıştır.

Öngereksinimler:

CCNA, CCNA Security (IINS)

SECURE

Kurs İçeriği:

Eğitim 0 - Kurs Tanıtımı
Eğitim 1 - Deploying Cisco IOS Software Network Foundation Protection Lesson
Eğitim 2 - Deploying Cisco IOS Software Threat Control and Containment
Eğitim 3 - Deploying Cisco IOS Software Site-to-Site Transmission Security
Eğitim 4 - Deploying Secure Remote Access with Cisco IOS Software

FIREWALL

Kurs İçeriği:

Eğitim 0 - Kurs Tanıtımı
Eğitim 1 - Introduction to the Cisco ASA Adaptive Security Appliance
Eğitim 2 - Deployment of Cisco ASA Adaptive Security Appliance Access Control Features
Eğitim 3 - Deployment of Cisco ASA Adaptive Security Appliance Virtualization and High-Availability Features
Eğitim 4 - Configuring Routing on the Cisco ASA Adaptive Security Appliance

VPN

Kurs İçeriği:

Eğitim 0 - Kurs Tanıtımı
Eğitim 1 - Evaluate the Cisco ASA adaptive security appliance VPN subsystem
Eğitim 2 - Deploy Cisco ASA adaptive security appliance IPsec VPN solutions
Eğitim 3 - Deploy Cisco ASA adaptive security appliance Cisco AnyConnect remote access VPN solutions
Eğitim 4 - Deploy Cisco ASA adaptive security appliance clientless remote access VPN solutions
Eğitim 5 - Deploy advanced Cisco ASA adaptive security appliance VPN

IPS

Kurs İçeriği:

Eğitim 0 - Kurs Tanıtımı
Eğitim 1 - Introduction to Intrusion Prevention and Detection, Cisco IPS Software, and Supporting Devices
Eğitim 2 - Installing and Maintaining Cisco IPS Sensors
Eğitim 3 - Applying Cisco IPS Security Policies
Eğitim 4 - Adapting Traffic Analysis and Response to the Environment
Eğitim 5 - Managing and Analyzing Events
Eğitim 6 - Deploying Virtualization, High Availability, and High Performance Solutions
Eğitim 7 - Configuring and Maintaining Specific Cisco IPS Hardware

CCNP Security Deneme Sınavı

CCNP Security Eğitimi Zamanlaması

Cisco ISE — cliguru.com kaynak sürümü

Orijinal tarihsel kaynak: https://www.cliguru.com/Cisco_ISE

Cisco ISE Eğitimi | Cisco Identity Services Manager | Ankara

ISE Eğitimi İçeriği

SISE v1.1 (Implementing and Configuring Cisco Identity Services Engine)

Öngereksinimler:

CCNA Eğitimini tamamlamış olmak

Kurs Tanımı:

Kurs İçeriği:

Eğitim 1 - Cisco ISE Product Overview

Introducing the Cisco ISE
Getting Started with Cisco ISE
Lab prep
Lab 1-1: Installing the Cisco ISE
Lab 1-2: Certificate Operations
Lab 1-3: Cisco ISE Node Deployment

Eğitim 2 - Cisco ISE Authentication and Authorization

Configuring Basic Access
Understanding External Authentication
Lab 2-1: Configure and Add Network Access Devices to Cisco ISE
Lab 2-2: Configure External Identity Sources
Using Cisco ISE Dictionaries
Lab 2-3: Examine Cisco ISE Dictionaries
Configuring Authorization
Basic Cisco ISE Policies
Configuring Multiple Cisco ISE Policies

Eğitim 3 - Web Authentication and User Access Management

Implementing Web Authentication
Implementing Guest Services
Lab 3-1: Configuring Cisco ISE Guest Services
Lab 3-2: Guest Services Self-Registration

Eğitim 4 - Cisco ISE Profiler, Posture and Endpoint Protection Services

Implementing Cisco ISE Profiler Services
Lab 4-1: Configuring ISE for Profiling
Implementing Cisco ISE Posture Service
Lab 4-2: Configuring Cisco ISE for Posture Assessment
Implementing Cisco ISE Endpoint Protection Services
Lab 4-3:Endpoint Protections Services
Implementing BYOD - Bring Your Own Device
Lab 4-4: BYOD - Bring Your Own Device

Eğitim 5 - Reports, Monitoring, Troubleshooting and Security

Implementing Inline Posture and TrustSec Security
Describing the Cisco ISE Architecture
Performing Cisco ISE Administration and Maintenance
Using Cisco ISE Reporting Monitoring and Troubleshooting
Lab 5-1: Logging Setup
Lab 5-2: Cisco ISE Reporting
Lab 5-3: Working with Cisco ISE Monitoring and Troubleshooting
Lab 5-4: Patching Cisco ISE

Kaynak Eğitim Videoları

Aşağıdaki liste, tarihsel kaynaklardan alınan teknik eğitim videosu kesitlerini içermektedir. Bu içerikler tam veya güncel bir sertifika programı teşkil etmez; sadece yönlendirme amaçlı video bağlantılarıdır.

Bağlantılar açık tıklamayla YouTube üzerinde açılır; bu sayfada video gömme, otomatik oynatma veya uzak küçük resim yükleme kullanılmaz.

Özgün video dizini: cliguru.com/video.html

Eski site arşiv müfredatları

Aşağıdaki bağlantılar, özgün siteden korunmuş tarihsel program içeriklerini açar; güncel sürüm veya sertifika eşdeğerliği değildir.

TEKNİK VE KURUMSAL EĞİTİM

Ağ ve Siber Güvenlik.Eğitim Programı.

BU EĞİTİM

Siber Güvenlik.Eğitim Programı.

Ayrıntılı tarihsel program arşivi

Microsoft Forefront Threat Management Gateway 2010 Eğitim İçeriği

Implementing Forefront Threat Management Gateway 2010 (Course 50357B)

CEH Eğitimi İçeriği

Kurs İçeriği:

Ayrıntılı İçerik:

Eğitim 1 – Introduction to Ethical Hacking

Eğitim 2 – Footprinting and Reconnaissance

Eğitim 3 – Scanning Networks

Eğitim 4 – Enumeration

Eğitim 5 – System Hacking

Eğitim 6 – Trojans and Backdoors

Eğitim 7 – Viruses and Worms

Eğitim 8 – Sniffers

Eğitim 9 – Social Engineering

Eğitim 10 – Denial of Service

Eğitim 11 – Session Hijacking

Eğitim 12 – Hijacking Webservers

Eğitim 13 – Hijacking Web Applications

Eğitim 14 – SQL Injection

Eğitim 15 – hacking Wireless Networks

Eğitim 16 – Evading IDS, Firewalls and Honeypots

Eğitim 17 – Buffer Overflow

Eğitim 18 – Cryptography

Eğitim 19 – Penetration Testing

CCNA Security Eğitimi İçeriği

Implementing Cisco IOS Network Security (IINS)

Ayrıntılı CCNA Security İçeriği

Ayrıntılı CCNA Security Türkçe İçerik

CCNP Security Eğitim İçeriği

SECURE

FIREWALL

VPN

IPS

ISE Eğitimi İçeriği

SISE v1.1 (Implementing and Configuring Cisco Identity Services Engine)

Orijinal eğitim PDF arşivi

Beyaz Şapkalı Hacker Eğitimi İçeriği

Kurs İçeriği:

Ayrıntılı İçerik:

Eğitim 1 - Introduction to Ethical Hacking

Eğitim 2 - Footprinting and Reconnaissance

Eğitim 3 - Scanning Networks

Eğitim 4 - Enumeration

Eğitim 5 - System Hacking

Eğitim 6 - Trojans and Backdoors

Eğitim 7 - Viruses and Worms

Eğitim 8 - Sniffers

Eğitim 9 - Social Engineering

Eğitim 10 - Denial of Service

Eğitim 11 - Session Hijacking

Eğitim 12 - Hijacking Webservers

Eğitim 13 - Hijacking Web Applications

Eğitim 14 - SQL Injection

Eğitim 15 - hacking Wireless Networks

Eğitim 16 - Evading IDS, Firewalls and Honeypots

Eğitim 17 - Buffer Overflow

Eğitim 18 - Cryptography

Eğitim 19 - Penetration Testing

CCNA Security Eğitimi İçeriği

Implementing Cisco IOS Network Security (IINS)

Ayrıntılı CCNA Security İçeriği

Ayrıntılı CCNA Security Türkçe İçerik

CCNP Security Eğitim İçeriği

SECURE

FIREWALL

VPN

IPS

ISE Eğitimi İçeriği

SISE v1.1 (Implementing and Configuring Cisco Identity Services Engine)

Kaynak Eğitim Videoları

Eski site arşiv müfredatları

BİR SONRAKİ ADIM

İhtiyacınızı birliktedeğerlendirelim.

Tercihleri Yönet

Ağ ve Siber Güvenlik.
Eğitim Programı.

Siber Güvenlik.
Eğitim Programı.

İhtiyacınızı birlikte
değerlendirelim.