CEH and CHFI Certification Training Package

NetCom Named to EC-Council Circle Of excellence The EC-Council Circle of Excellence award is given out to schools that have attributed to the success of EC-Council certification programs and made a difference in the rapidly evolving security domain.

About the CEH and CHFI Certification

CEH: Certified Ethical Hacking v6.1 (3.5 days)   

Course Objectives

• Students will begin by understanding perimeter defenses work and then be lead into scanning and attacking their own networks, no real network is harmed.
• Students then learn how intruders escalate intruders escalate privileges and what steps can be taken to secure a system.
• Students will also learn about Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation.

Course Outline

• Module 1: Introduction to Ethical Hacking
  1. Problem Definition -Why Security?
  2. Essential Terminologies
  3. Elements of Security
  4. The Security, Functionality and Ease of Use Triangle
  5. Effect on Business
  6. Case Study
  7. What does a Malicious Hacker do?
  8. Types of Hacker Attacks
  9. Hacktivism
  10. Hacker Classes
  11. Security News: Suicide Hacker
  12. Ethical Hacker Classes
  13. What do Ethical Hackers do
  14. Can Hacking be Ethical
  15. How to become an Ethical Hacker
  16. Skill Profile of an Ethical Hacker
  17. What is Vulnerability Research
  18. How to Conduct Ethical Hacking
  19. How Do They Go About It
  20. Approaches to Ethical Hacking
  21. Ethical Hacking Testing
  22. Ethical Hacking Deliverables
  23. Computer Crimes and Implications
• Module 2: Hacking Laws
  1. U.S. Securely Protect Yourself Against Cyber Trespass Act (SPY ACT)
  2. Legal Perspective (U.S. Federal Law)
  3. United Kingdom's Cyber Laws
  4. United Kingdom: Police and Justice Act 2006
  5. European Laws
  6. Japan's Cyber Laws
  7. Australia: The Cybercrime Act 2001
  8. Indian Law: THE INFORMTION TECHNOLOGY ACT
  9. Argentina Laws
  10. Germany's Cyber Laws
  11. Singapore's Cyber Laws
  12. Belgium Law
  13. Brazilian Laws
  14. Canadian Laws
  15. France Laws
  16. German Laws
  17. Italian Laws
  18. MALAYSIA: THE COMPUTER CRIMES ACT 1997
  19. HONGKONG: TELECOMMUNICATIONS
  20. Korea: ACT ON PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK UTILIZATION AND INFORMATION PROTECTION, ETC.
  21. Greece Laws
  22. Denmark Laws
  23. Netherlands Laws
  24. Norway
  25. ORDINANCE
  26. Mexico
  27. SWITZERLAND
• Module 3: Footprinting
  1. Revisiting Reconnaissance
  2. Defining Footprinting
  3. Why is Footprinting Necessary
  4. Areas and Information which Attackers Seek
  5. Information Gathering Methodology
  6. Footprinting Tools
  7. E-Mail Spiders
  8. How to Create Fake Website
  9. Real and Fake Website
  10. Tool: Reamweaver
  11. Mirrored Fake Website
  12. Faking Websites using Man-in-the-Middle Phishing Kit
  13. Benefits to Fraudster
  14. Steps to Perform Footprinting
• Module 4: Google Hacking
  1. What is Google hacking
  2. What a hacker can do with vulnerable site
  3. Anonymity with Caches
  4. Using Google as a Proxy Server
  5. Directory Listings
  6. Going Out on a Limb: Traversal Techniques
  7. Extension Walking
  8. Site Operator
  9. intitle:index.of
  10. error / warning
  11. login / logon
  12. username / userid / employee.ID / "your username is"
  13. password / passcode / "your password is"
  14. admin / administrator
  15. ext:html ext:htm ext:shtml ext:asp ext:php
  16. inurl:temp / inurl:tmp / inurl:backup / inurl:bak
  17. intranet / help.desk
  18. Locating Public Exploit Sites
  19. Locating Vulnerable Targets
  20. Directory Listings
  21. Web Server Software Error Messages
  22. Application Software Error Messages
  23. Default Pages
  24. Searching for Passwords
  25. Google Hacking Database (GHDB)
  26. SiteDigger Tool
  27. Gooscan
  28. Goolink Scanner
  29. Goolag Scanner
  30. Tool: Google Hacks
  31. Google Hack Honeypot
  32. Google Protocol
  33. Google Cartography
• Module 5: Scanning
  1. Scanning: Definition
  2. Types of Scanning
  3. Objectives of Scanning
  4. CEH Scanning Methodology
  5. War Dialer Technique
  6. Banner Grabbing
  7. Vulnerability Scanning
  8. Draw Network Diagrams of Vulnerable Hosts
  9. Preparing Proxies
  10. Scanning Countermeasures
  11. Tool: SentryPC
• Module 6: Enumeration
  1. Overview of System Hacking Cycle
  2. What is Enumeration?
  3. Techniques for Enumeration
  4. NetBIOS Null Sessions
  5. PS Tools
  6. Simple Network Management Protocol (SNMP) Enumeration
  7. LDAP enumeration
  8. NTP enumeration
  9. SMTP enumeration
  10. Web enumeration
  11. Winfingerprint
  12. How To Enumerate Web Application Directories in IIS Using DirectoryServices
  13. IP Tools Scanner
  14. Enumerate Systems Using Default Password
  15. Tools
  16. Steps to Perform Enumeration
• Module 7: System Hacking
  1. Part 1: Cracking Password
  2. Part2-Escalating Privileges
  3. Part3-Executing applications
  4. Part4-Hiding files
  5. Part5-Covering Tracks
• Module 8: Trojans and Backdoors
  1. What is a Trojan?
  2. Indications of a Trojan Attack
  3. Ports Used by Trojans
  4. Classic Trojans
  5. Stealth Trojans
  6. Reverse Connecting Trojans
  7. Miscellaneous Trojans
  8. How to Detect Trojans?
  9. Anti-Trojan Software
  10. Evading Anti-Virus Techniques
  11. Sample Code for Trojan Client/Server
  12. Evading Anti-Trojan/Anti-Virus using Stealth Tools
  13. Backdoor Countermeasures
  14. Tripwire
  15. System File Verification
  16. MD5 Checksum.exe
  17. Microsoft Windows Defender
  18. How to Avoid a Trojan Infection
• Module 9: Viruses and Worms
  1. Virus History
  2. Characteristics of Virus
  3. Working of Virus
  4. Why people create Computer Viruses
  5. Symptoms of a Virus-like Attack
  6. Virus Hoaxes
  7. Chain Letters
  8. Worms
  9. How is a Worm Different from a Virus
  10. Indications of a Virus Attack
  11. Virus Damage
  12. Stages of Virus Life
  13. Types of Virus
  14. Famous Viruses and Worms
  15. Latest Viruses
  16. Writing Virus Program
  17. Virus Detection Methods
  18. Anti-Virus Software
  19. Popular Anti-Virus Packages
  20. Virus Databases
  21. Snopes.com
• Module 10: Sniffers
  1. Definition: Sniffing
  2. Types of Sniffing
  3. Protocols Vulnerable to Sniffing
  4. Passive Sniffing
  5. Active Sniffing
  6. Switched Port Analyzer (SPAN)
  7. SPAN Port
  8. Lawful Intercept
  9. Benefits of Lawful Intercept
  10. Network Components Used for Lawful Intercept
  11. Ready to Sniff?
  12. Tool: Network View -- Scans the Network for Devices
  13. The Dude Sniffer
  14. Look@LAN
  15. Wireshark
  16. Display Filters in Wireshark
  17. Following the TCP Stream in Wireshark
  18. Pilot
  19. Tcpdump
  20. Tcpdump Commands
  21. Features of Sniffing Tools
  22. What is Address Resolution Protocol (ARP)
  23. ARP Spoofing Attack
  24. How Does ARP Spoofing Work
  25. ARP Poisoning
  26. Threats of ARP Poisoning
  27. MAC Flooding
  28. Mac Duplicating
  29. Mac Duplicating Attack
  30. Tools for ARP Spoofing
  31. DHCP Starvation Attack
  32. DNS Poisoning Techniques
  33. Tools for MAC Flooding
  34. Sniffing Tools
  35. Linux Sniffing Tools (dsniff package)
  36. Hardware Protocol Analyzers
  37. How to Detect Sniffing
• Module 11: Social Engineering
  1. What is Social Engineering?
  2. Human Weakness
  3. "Rebecca" and "Jessica"
  4. Office Workers
  5. Types of Social Engineering
  6. Social Engineering Threats and Defenses
  7. Factors that make Companies Vulnerable to Attacks
  8. Why is Social Engineering Effective
  9. Warning Signs of an Attack
  10. Tool: Netcraft Anti-Phishing Toolbar
  11. Phases in a Social Engineering Attack
  12. Behaviors Vulnerable to Attacks
  13. Impact on the Organization
  14. Countermeasures
  15. Policies and Procedures
  16. Security Policies - Checklist
  17. Impersonating Orkut, Facebook, MySpace
  18. Orkut
  19. Impersonating on Orkut
  20. MW.Orc worm
  21. Facebook
  22. Impersonating on Facebook
  23. MySpace
  24. Impersonating on MySpace
  25. How to Steal Identity
  26. Comparison
  27. Original
  28. Identity Theft
  29. http://www.consumer.gov/idtheft/
• Module 12: Phishing
  1. Phishing
  2. Introduction
  3. Reasons for Successful Phishing
  4. Phishing Methods
  5. Process of Phishing
  6. Types of Phishing Attacks
  7. Phishing Statistics: March 2008
  8. Anti-Phishing
  9. Anti-Phishing Tools
• Module 13: Hacking Email Accounts
  1. Introduction
  2. Vulnerabilities
  3. Email Hacking Tools
  4. Securing Email Accounts
• Module 14: Denial-of-Service
  1. Real World Scenario of DoS Attacks
  2. What are Denial-of-Service Attacks
  3. Goal of DoS
  4. Impact and the Modes of Attack
  5. Types of Attacks
  6. DoS Attack Classification
  7. Bot (Derived from the Word RoBOT)
  8. Botnets
  9. Uses of Botnets
  10. Types of Bots
  11. How Do They Infect? Analysis Of Agabot
  12. How Do They Infect
  13. Tool: Nuclear Bot
  14. What is DDoS Attack
  15. Characteristics of DDoS Attacks
  16. Is DDoS Unstoppable?
  17. Agent Handler Model
  18. DDoS IRC based Model
  19. DDoS Attack Taxonomy
  20. Amplification Attack
  21. Reflective DNS Attacks
  22. Reflective DNS Attacks Tool: ihateperl.pl
  23. DDoS Tools
  24. How to Conduct a DDoS Attack
  25. The Reflected DoS Attacks
  26. Reflection of the Exploit
  27. Countermeasures for Reflected DoS
  28. DDoS Countermeasures
  29. Taxonomy of DDoS Countermeasures
  30. Preventing Secondary Victims
  31. Detect and Neutralize Handlers
  32. Detect Potential Attacks
  33. DoSHTTP Tool
  34. Mitigate or Stop the Effects of DDoS Attacks
  35. Deflect Attacks
  36. Post-attack Forensics
  37. Packet Traceback
• Module 15: Session Hijacking
  1. What is Session Hijacking?
  2. Understanding Session Hijacking
  3. Spoofing v Hijacking
  4. Steps in Session Hijacking
  5. Types of Session Hijacking
  6. Session Hijacking Levels
  7. Network Level Hijacking
  8. The 3-Way Handshake
  9. TCP Concepts 3-Way Handshake
  10. Sequence Numbers
  11. Sequence Number Prediction
  12. TCP/IP hijacking
  13. IP Spoofing: Source Routed Packets
  14. RST Hijacking
  15. Blind Hijacking
  16. Man in the Middle Attack using Packet Sniffer
  17. UDP Hijacking
  18. Application Level Hijacking
  19. Programs that Performs Session Hacking
  20. Dangers Posed by Hijacking
  21. Protecting against Session Hijacking
  22. Countermeasure: IPSec
• Module 16: Hacking Web Servers
  1. How Web Servers Work
  2. How are Web Servers Compromised
  3. Web Server Defacement
  4. Apache Vulnerability
  5. Attacks against IIS
  6. Unicode
  7. Hacking Tool
  8. Tool: Metasploit Framework
  9. KARMA
  10. Tool: Immunity CANVAS Professional
  11. Tool: Core Impact
  12. Tool: MPack
  13. Tool: Neosploit
  14. Patch Management
  15. Vulnerability Scanners
  16. Countermeasures
  17. Increasing Web Server Security
  18. Web Server Protection Checklist
• Module 17: Web Application Vulnerabilities
  1. Web Application
  2. Web application Hacking
  3. Anatomy of an Attack
  4. Web Application Threats
  5. Cross-Site Scripting/XSS Flaws
  6. SQL Injection
  7. Command Injection Flaws
  8. Cookie/Session Poisoning
  9. Parameter/Form Tampering
  10. Hidden Field at
  11. Buffer Overflow
  12. Directory Traversal/Forceful Browsing
  13. Cryptographic Interception
  14. Cookie Snooping
  15. Authentication Hijacking
  16. Log Tampering
  17. Error Message Interception
  18. Attack Obfuscation
  19. Platform Exploits
  20. DMZ Protocol Attacks
  21. Security Management Exploits
  22. TCP Fragmentation
  23. Hacking Tools
• Module 18: Web-Based Password Cracking Techniques
  1. Authentication
  2. Password Cracking
  3. Password Cracking Tools
  4. Countermeasures
• Module 19: SQL Injection
  1. SQL Injection: Introduction
  2. SQL Injection Tools
  3. Blind SQL Injection
  4. SQL Injection Countermeasures
  5. SQL Injection Blocking Tool: SQL Block
  6. Acunetix Web Vulnerability Scanner
• Module 20: Hacking Wireless Networks
  1. Introduction to Wireless Networking
  2. Wireless Standards
  3. Wireless Concepts
  4. Wireless Devices
  5. WEP
  6. WPA
  7. TKIP and LEAP
  8. Hacking Methods
  9. Cracking WEP
  10. Rogue Access Point
  11. Scanning Tools
  12. Sniffing Tools
  13. Wireless Security Tools
• Module 21: Physical Security
  1. Security Facts
  2. Understanding Physical Security
  3. Physical Security
  4. What Is the Need for Physical Security
  5. Who Is Accountable for Physical Security
  6. Factors Affecting Physical Security
  7. Physical Security Checklist
  8. Information Security
  9. EPS (Electronic Physical Security)
  10. Wireless Security
  11. Laptop Theft Statistics for 2007
  12. Statistics for Stolen and Recovered Laptops
  13. Laptop Theft
  14. Laptop theft: Data Under Loss
  15. Laptop Security Tools
  16. Laptop Tracker - XTool Computer Tracker
  17. Tools to Locate Stolen Laptops
  18. Stop's Unique, Tamper-proof Patented Plate
  19. Tool: TrueCrypt
  20. Laptop Security Countermeasures
  21. Mantrap
  22. TEMPEST
  23. Challenges in Ensuring Physical Security
  24. Spyware Technologies
  25. Spying Devices
  26. Physical Security: Lock Down USB Ports
  27. Tool: DeviceLock
  28. Blocking the Use of USB Storage Devices
  29. Track Stick GPS Tracking Device
• Module 22: Linux Hacking
  1. Why Linux
  2. Linux Distributions
  3. Linux Live CD-ROMs
  4. Basic Commands of Linux: Files & Directories
  5. Linux Basic
  6. Directories in Linux
  7. Installing, Configuring, and Compiling Linux Kernel
  8. How to Install a Kernel Patch
  9. Compiling Programs in Linux
  10. GCC Commands
  11. Make Files
  12. Make Install Command
  13. Linux Vulnerabilities
  14. Chrooting
  15. Why is Linux Hacked
  16. How to Apply Patches to Vulnerable Programs
  17. Scanning Networks
  18. Nmap in Linux
  19. Scanning Tool: Nessus
  20. Port Scan Detection Tools
  21. Password Cracking in Linux: John the Ripper
  22. Firewall in Linux: IPTables
  23. IPTables Command
  24. Basic Linux Operating System Defense
  25. SARA (Security Auditor's Research Assistant)
  26. Linux Tool: Netcat
  27. Linux Tool: tcpdump
  28. Linux Tool: Snort
  29. Linux Tool: SAINT
  30. Linux Tool: Wireshark
  31. Linux Tool: Abacus Port Sentry
  32. Linux Tool: DSniff Collection
  33. Linux Tool: Hping2
  34. Linux Tool: Sniffit
  35. Linux Tool: Nemesis
  36. Linux Tool: LSOF
  37. Linux Tool: IPTraf
  38. Linux Tool: LIDS
  39. Hacking Tool: Hunt
  40. Tool: TCP Wrappers
  41. Linux Loadable Kernel Modules
  42. Hacking Tool: Linux Rootkits
  43. Rootkits: Knark & Torn
  44. Rootkits: Tuxit, Adore, Ramen
  45. Rootkit: Beastkit
  46. Rootkit Countermeasures
  47. "chkrootkit" detects the following Rootkits
  48. Linux Tools: Application Security
  49. Advanced Intrusion Detection Environment (AIDE)
  50. Linux Tools: Security Testing Tools
  51. Linux Tools: Encryption
  52. Linux Tools: Log and Traffic Monitors
  53. Linux Security Auditing Tool (LSAT)
  54. Linux Security Countermeasures
  55. Steps for Hardening Linux
• Module 23: Evading IDS, Firewalls and Detecting Honey Pots
  1. Introduction to Intrusion Detection System
  2. Terminologies
  3. Intrusion Detection System (IDS)
  4. Intrusion Prevention System
  5. What is a Firewall?
  6. Common Tool for Testing Firewall and IDS
  7. What is Honeypot?
  8. Tools to Detect Honeypots
  9. What to do when hacked
• Module 24: Buffer Overflows
  1. Buffer Overflow Concepts
  2. Attacking a Real Program
  3. NOPs
  4. How to Mutate a Buffer Overflow Exploit
  5. Once the Stack is Smashed
  6. Examples of Buffer Overflow
  7. Tools
  8. How to Detect Buffer Overflows in a Program
  9. Defense Against Buffer Overflows
• Module 25: Cryptography
  1. Public-key Cryptography
  2. Working of Encryption
  3. Digital Signature
  4. RSA (Rivest Shamir Adleman)
  5. RC4, RC5, RC6, Blowfish
  6. Algorithms and Security
  7. Brute-Force Attack
  8. RSA Attacks
  9. Message Digest Functions
  10. SHA (Secure Hash Algorithm)
  11. SSL (Secure Sockets Layer)
  12. What is SSH
  13. Government Access to Keys (GAK)
  14. RSA Challenge
  15. distributed.net
  16. Code Breaking: Methodologies
  17. Cryptography Attacks
  18. Disk Encryption
  19. Magic Lantern
  20. WEPCrack
  21. Cracking S/MIME Encryption Using Idle CPU Time
  22. Cryptography Tools
• Module 26: Penetration Testing
  1. Introduction to Penetration Testing (PT)
  2. Categories of security assessments
  3. Vulnerability Assessment
  4. Limitations of Vulnerability Assessment
  5. Testing
  6. Penetration Testing Tools
  7. Threat
  8. Other Tools Useful in Pen-Test
  9. Phases of Penetration Testing
  10. Pre-attack Phase
  11. Best Practices
  12. Results that can be Expected
  13. Passive Reconnaissance
  14. Active Reconnaissance
  15. Attack Phase
  16. Post Attack Phase and Activities
  17. Penetration Testing Deliverables Templates
• Module 27: Covert Hacking
  1. Insider Attacks
  2. What is Covert Channel?
  3. Security Breach
  4. Why Do You Want to Use Covert Channel?
  5. Motivation of a Firewall Bypass
  6. Covert Channels Scope
  7. Covert Channel: Attack Techniques
  8. Simple Covert Attacks
  9. Advanced Covert Attacks
  10. Standard Direct Connection
  11. Reverse Shell (Reverse Telnet)
  12. Direct Attack Example
  13. In-Direct Attack Example
  14. Reverse Connecting Agents
  15. Covert Channel Attack Tools
  16. Covert Channel Hacking Tool: Active Port Forwarder
  17. Covert Channel Hacking Tool: CCTT
  18. Covert Channel Hacking Tool: Firepass
  19. Covert Channel Hacking Tool: MsnShell
  20. Covert Channel Hacking Tool: Web Shell
  21. Covert Channel Hacking Tool: NCovert
  22. Covert Channel Hacking via Spam E-mail Messages
  23. Hydan
• Module 28: Writing Virus Codes
  1. Introduction of Virus
  2. Types of Viruses
  3. Symptoms of a Virus Attack
  4. Prerequisites for Writing Viruses
  5. Required Tools and Utilities
  6. Virus Infection Flow Chart
  7. Components of Viruses
  8. Testing Virus Codes
  9. Tips for Better Virus Writing
• Module 29: Assembly Language Tutorial
  1. Base 10 System
  2. Base 2 System
  3. Decimal 0 to 15 in Binary
  4. Binary Addition (C stands for Canary)
  5. Hexadecimal Number
  6. Hex Example
  7. Hex Conversion
  8. nibble
  9. Computer memory
  10. Characters Coding
  11. ASCII and UNICODE
  12. CPU
  13. Machine Language
  14. Compilers
  15. Clock Cycle
  16. Original Registers
  17. Instruction Pointer
  18. Pentium Processor
  19. Interrupts
  20. Interrupt handler
  21. External interrupts and Internal interrupts
  22. Handlers
  23. Machine Language
  24. Assembly Language
  25. Assembler
  26. Assembly Language Vs High-level Language
  27. Assembly Language Compilers
  28. Instruction operands
  29. MOV instruction
  30. ADD instruction
  31. SUB instruction
  32. INC and DEC instructions
  33. Directive
  34. preprocessor
  35. equ directive
  36. %define directive
  37. Data directives
  38. Labels
  39. Input and output
  40. C Interface
  41. Call
  42. Creating a Program
  43. Why should anyone learn assembly at all?
  44. Assembling the code
  45. Compiling the C code
  46. Linking the object files
  47. Understanding an assembly listing file
  48. Big and Little Endian Representation
  49. Skeleton File
  50. Working with Integers
  51. Signed integers
  52. Signed Magnitude
  53. Two's Compliment
  54. If statements
  55. Do while loops
  56. Indirect addressing
  57. Subprogram
  58. The Stack
  59. The SS segment
  60. ESP
  61. The Stack Usage
  62. The CALL and RET Instructions
  63. General subprogram form
  64. Local variables on the stack
  65. General subprogram form with local variables
  66. Multi-module program
  67. Saving registers
  68. Labels of functions
  69. Calculating addresses of local variables
• Module 30: Exploit Writing
  1. Exploits Overview
  2. Prerequisites for Writing Exploits and Shellcodes
  3. Purpose of Exploit Writing
  4. Types of Exploits
  5. Stack Overflow
  6. Heap Corruption
  7. The Proof-of-Concept and Commercial Grade Exploit
  8. Converting a Proof of Concept Exploit to Commercial Grade Exploit
  9. Attack Methodologies
  10. Socket Binding Exploits
  11. Tools for Exploit Writing
  12. Steps for Writing an Exploit
  13. Differences Between Windows and Linux Exploits
  14. Shellcodes
  15. NULL Byte
  16. Types of Shellcodes
  17. Tools Used for Shellcode Development
  18. Steps for Writing a Shellcode
  19. Issues Involved With Shellcode Writing
• Module 31: Smashing the Stack for Fun and Profit
  1. What is a Buffer?
  2. Static Vs Dynamic Variables
  3. Stack Buffers
  4. Data Region
  5. Memory Process Regions
  6. What Is A Stack?
  7. Why Do We Use A Stack?
  8. The Stack Region
  9. Stack frame
  10. Stack pointer
  11. Procedure Call (Procedure Prolog)
  12. Compiling the code to assembly
  13. Call Statement
  14. Return Address (RET)
  15. Word Size
  16. Stack
  17. Buffer Overflows
  18. Error
  19. Why do we get a segmentation violation?
  20. Segmentation Error
  21. Instruction Jump
  22. Guess Key Parameters
  23. Calculation
  24. Shell Code
  25. Let's try to understand what is going on here. We'll start by studying main:
  26. execve()
  27. exit.c
  28. The code in Assembly
  29. JMP
  30. Code using indexed addressing
  31. Offset calculation
  32. shellcodeasm.c
  33. testsc.c
  34. Compile the code
  35. NULL byte
  36. shellcodeasm2.c
  37. testsc2.c
  38. Writing an Exploit
  39. overflow1.c
  40. Compiling the code
  41. sp.c
  42. vulnerable.c
  43. NOPs
• Module 32: Windows Based Buffer Overflow Exploit Writing
  1. Buffer Overflow
  2. Stack overflow
  3. Writing Windows Based Exploits
  4. Exploiting stack based buffer overflow
  5. OpenDataSource Buffer Overflow Vulnerability Details
  6. Simple Proof of Concept
  7. Windbg.exe
  8. Analysis
  9. EIP Register
  10. Execution Flow
  11. But where can we jump to?
  12. Offset Address
  13. The Query
  14. Finding jmp esp
  15. Debug.exe
  16. listdlls.exe
  17. Msvcrt.dll
  18. Out.sql
  19. The payload
  20. ESP
  21. Limited Space
  22. Getting Windows API/function absolute address
  23. Memory Address
  24. Other Addresses
  25. Compile the program
  26. Final Code
• Module 33: Reverse Engineering
  1. Positive Applications of Reverse Engineering
  2. Ethical Reverse Engineering
  3. World War Case Study
  4. DMCA Act
  5. What is Disassembler?
  6. Why do you need to decompile?
  7. Professional Disassembler Tools
  8. Tool: IDA Pro
  9. Convert Machine Code to Assembly Code
  10. Decompilers
  11. Program Obfuscation
  12. Convert Assembly Code to C++ code
  13. Machine Decompilers
  14. Tool: dcc
  15. Machine Code of compute.exe Program
  16. Assembly Code of compute.exe Program
  17. Code Produced by the dcc Decompiler in C
  18. Tool: Boomerang
  19. What Boomerang Can Do?
  20. Andromeda Decompiler
  21. Tool: REC Decompiler
  22. Tool: EXE To C Decompiler
  23. Delphi Decompilers
  24. Tools for Decompiling .NET Applications
  25. Salamander .NET Decompiler
  26. Tool: LSW DotNet-Reflection-Browser
  27. Tool: Reflector
  28. Tool: Spices NET.Decompiler
  29. Tool: Decompilers.NET
  30. .NET Obfuscator and .NET Obfuscation
  31. Java Bytecode Decompilers
  32. Tool: JODE Java Decompiler
  33. Tool: JREVERSEPRO
  34. Tool: SourceAgain
  35. Tool: ClassCracker
  36. Python Decompilers
  37. Reverse Engineering Tutorial
  38. OllyDbg Debugger
  39. How Does OllyDbg Work?
  40. Debugging a Simple Console Application
• Module 34: Macintosh Hacking
  1. Introduction to MAC OS
  2. Vulnerabilities in MAC
  3. How a Malformed Installer Package Can Crack Mac OS X
  4. Worm and Viruses in MAC
  5. MAC OS X Trojans
  6. Anti-Viruses in MAC
  7. Mac Security Tools
  8. Countermeasures
• Module 35: Hacking Routers, cable Modems and Firewalls
  1. Network Devices
  2. Identifying a Router
  3. HTTP Configuration Arbitrary Administrative Access Vulnerability
  4. ADMsnmp
  5. Solarwinds MIB Browser
  6. Brute-Forcing Login Services
  7. Hydra
  8. Analyzing the Router Config
  9. Cracking the Enable Password
  10. Tool: Cain and Abel
  11. Implications of a Router Attack
  12. Types of Router Attacks
  13. Router Attack Topology
  14. Denial of Service (DoS) Attacks
  15. Packet "Mistreating" Attacks
  16. Routing Table Poisoning
  17. Hit-and-run Attacks vs. Persistent Attacks
  18. Cisco Router
  19. Eigrp-tool
  20. Tool: Zebra
  21. Tool: Yersinia for HSRP, CDP, and other layer 2 attacks
  22. Tool: Cisco Torch
  23. Monitoring SMTP(port25) Using SLcheck
  24. Monitoring HTTP(port 80)
  25. Cable Modem Hacking
  26. www.bypassfirewalls.net
  27. Waldo Beta 0.7 (b)
• Module 36: Hacking Mobile Phones, PDA and Handheld Devices
  1. Different OS in Mobile Phone
  2. Different OS Structure in Mobile Phone
  3. Evolution of Mobile Threat
  4. Threats
  5. What Can A Hacker Do
  6. Vulnerabilities in Different Mobile Phones
  7. Malware
  8. Spyware
  9. Blackberry
  10. PDA
  11. iPod
  12. Mobile: Is It a Breach to Enterprise Security?
  13. Viruses
  14. Antivirus
  15. Security Tools
  16. Defending Cell Phones and PDAs Against Attack
  17. Mobile Phone Security Tips
• Module 37: Bluetooth Hacking
  1. Bluetooth Introduction
  2. Security Issues in Bluetooth
  3. Security Attacks in Bluetooth Devices
  4. Bluetooth hacking tools
  5. Bluetooth Viruses and Worms
  6. Bluetooth Security tools
  7. Countermeasures
• Module 38: VoIP Hacking
  1. What is VoIP
  2. VoIP Hacking Steps
  3. Footprinting
  4. Scanning
  5. Enumeration
  6. Steps to Exploit the Network
  7. Covering Tracks
• Module 39: RFID Hacking
  1. RFID- Definition
  2. Components of RFID Systems
  3. RFID Collisions
  4. RFID Risks
  5. RFID and Privacy Issues
  6. Countermeasures
  7. RFID Security and Privacy Threats
  8. Protection Against RFID Attacks
  9. RFID Guardian
  10. RFID Malware
  11. RFID Exploits
  12. Vulnerabilities in RFID-enabled Credit Cards
  13. RFID Hacking Tool: RFDump
  14. RFID Security Controls
  15. RFID Security
• Module 40: Spamming
  1. Introduction
  2. Techniques used by Spammers
  3. How Spamming is performed
  4. Ways of Spamming
  5. Spammer: Statistics
  6. Worsen ISP: Statistics
  7. Top Spam Effected Countries: Statistics
  8. Types of Spam Attacks
  9. Spamming Tools
  10. Anti-Spam Techniques
  11. Anti- Spamming Tools
  12. Countermeasures
• Module 41: Hacking USB Devices
  1. Introduction to USB Devices
  2. Electrical Attack
  3. Software Attack
  4. USB Attack on Windows
  5. Viruses and Worms
  6. Hacking Tools
  7. USB Security Tools
  8. Countermeasures
• Module 42: Hacking Database Servers
  1. Hacking Database server: Introduction
  2. Hacking Oracle Database Server
  3. Attacking Oracle
  4. Hacking SQL Server
  5. Security Tools
  6. SQL Server Security Best Practices: Administrator Checklist
  7. SQL Server Security Best Practices: Developer Checklist
• Module 43: Cyber Warfare- Hacking, Al-Qaida and Terrorism
  1. Cyber Terrorism Over Internet
  2. Cyber-Warfare Attacks
  3. 45 Muslim Doctors Planned US Terror Raids
  4. Net Attack
  5. Al-Qaeda
  6. Why Terrorists Use Cyber Techniques
  7. Cyber Support to Terrorist Operations
  8. Planning
  9. Recruitment
  10. Research
  11. Propaganda
  12. Propaganda: Hizballah Website
  13. Cyber Threat to the Military
  14. Russia "hired botnets" for Estonia Cyber-War
  15. NATO Threatens War with Russia
  16. Bush on Cyber War: "a subject I can learn a lot about"
  17. E.U. Urged to Launch Coordinated Effort Against Cybercrime
  18. Budget: Eye on Cyber-Terrorism Attacks
  19. Cyber Terror Threat is Growing, Says Reid
  20. Terror Web 2.0
  21. Table 1: How Websites Support Objectives of terrorist/Extremist Groups
  22. Electronic Jihad
  23. Electronic Jihad App Offers Cyber Terrorism for the Masses
  24. Cyber Jihad Cyber Firesale
  25. http://internet-haganah.com/haganah/
• Module 44: Internet Content Filtering Techniques
  1. Introduction to Internet Filter
  2. Key Features of Internet Filters
  3. Pros and Cons of Internet Filters
  4. Internet Content Filtering Tools
• Module 45: Privacy on the Internet
  1. Internet privacy
  2. Proxy privacy
  3. Spyware privacy
  4. Email privacy
  5. Cookies
  6. Examining Information in Cookies
  7. How Internet Cookies Work
  8. How Google Stores Personal Information
  9. Google Privacy Policy
  10. Web Browsers
  11. Web Bugs
  12. Downloading Freeware
  13. Internet Relay Chat
  14. Pros and Cons of Internet Relay Chat
  15. Electronic Commerce
  16. Internet Privacy Tools: Anonymizers
  17. Internet Privacy Tools: Firewall Tools
  18. Internet Privacy Tools: Others
  19. Best Practices
  20. Counter measures
• Module 46: Securing Laptop Computers
  1. Statistics for Stolen and Recovered Laptops
  2. Statistics on Security
  3. Percentage of Organizations Following the Security Measures
  4. Laptop threats
  5. Laptop Theft
  6. Fingerprint Reader
  7. Protecting Laptops Through Face Recognition
  8. Bluetooth in Laptops
  9. Tools
  10. Securing from Physical Laptop Thefts
  11. Hardware Security for Laptops
  12. Protecting the Sensitive Data
  13. Preventing Laptop Communications from Wireless Threats
  14. Protecting the Stolen Laptops from Being Used
  15. Security Tips
• Module 47: Spying Technologies
  1. Spying
  2. Motives of Spying
  3. Spying Devices
  4. Vendors Hosting Spy Devices
  5. Spying Tools
  6. Anti-Spying Tools
• Module 48: Corporate Espionage- Hacking Using Insiders
  1. Introduction To Corporate Espionage
  2. Information Corporate Spies Seek
  3. Insider Threat
  4. Different Categories of Insider Threat
  5. Privileged Access
  6. Driving Force behind Insider Attack
  7. Common Attacks carried out by Insiders
  8. Techniques Used for Corporate Espionage
  9. Process of Hacking
  10. Former Forbes Employee Pleads Guilty
  11. Former Employees Abet Stealing Trade Secrets
  12. California Man Sentenced For Hacking
  13. Federal Employee Sentenced for Hacking
  14. Facts
  15. Key Findings from U.S Secret Service and CERT Coordination Center/SEI study on Insider Threat
  16. Tools
  17. Countermeasures
• Module 49: Creating Security Policies
  1. Security policies
  2. Key Elements of Security Policy
  3. Defining the Purpose and Goals of Security Policy
  4. Role of Security Policy
  5. Classification of Security Policy
  6. Design of Security Policy
  7. Contents of Security Policy
  8. Configurations of Security Policy
  9. Implementing Security Policies
  10. Types of Security Policies
  11. Policy Statements
  12. Basic Document Set of Information Security Policies
  13. E-mail Security Policy
  14. Software Security Policy
  15. Software License Policy
  16. Points to Remember While Writing a Security Policy
  17. Sample Policies
• Module 50: Software Piracy and Warez
  1. Software Activation: Introduction
  2. Piracy
  3. Software Copy Protection Backgrounders
  4. Warez
  5. Tool: Crypkey
  6. Tool: EnTrial
  7. EnTrial Tool: Distribution File
  8. EnTrial Tool: Product & Package Initialization Dialog
  9. EnTrial Tool: Add Package GUI
  10. Tool: DF_ProtectionKit
  11. Tool: Crack Killer
  12. Tool: Logic Protect
  13. Tool: Software License Manager
  14. Tool: Quick License Manager
  15. Tool: WTM CD Protect
• Module 51: Hacking and Cheating Online Games
  1. Online Games
  2. Basics of Game Hacking
  3. Online Gaming Exploits
  4. Types of Exploits
  5. Online Gaming Risks
  6. Threats in Online Gaming
  7. Online Gaming Theft
  8. How Passwords for Online Games are Stolen
  9. Social Engineering and Phishing
  10. An Example of a Phishing Email
  11. Exploiting Game Server Vulnerabilities
  12. Vulnerability in-game chat in Lineage 2
  13. Using Malware
  14. Malicious Programs and Malware
  15. Email-Worm.Win32.Lewor.a
  16. Part of a file infected by Virus.Win32.Alman.a
  17. Online Gaming Malware from 1997-2007
  18. How Modern Attacks are Conducted
  19. Geographical Considerations
  20. Statistics
  21. Best Practices for Secure Online Gaming
• Module 52: Hacking RSS and Atom
  1. Introduction
  2. Areas Where RSS and Atom is Used
  3. Building a Feed Aggregator
  4. Routing Feeds to the Email Inbox
  5. Monitoring the Server with Feeds
  6. Tracking Changes in Open Source Projects
  7. Risks by Zone
  8. Reader Specific Risks
  9. Utilizing the Web Feeds Vulnerabilities
  10. Example for Attacker to Attack the Feeds
  11. Tools
• Module 53: Hacking Web Browsers
  1. Introduction
  2. How Web Browsers Work
  3. How Web Browsers Access HTML Documents
  4. Protocols for an URL
  5. Hacking Firefox
  6. Firefox Security
  7. Hacking Internet Explorer
  8. Internet Explorer Security
  9. Hacking Opera
  10. Security Features of Opera
  11. Hacking Safari
  12. Hacking Netscape
  13. Securing Netscape
• Module 54: Proxy Server Technologies
  1. Introduction: Proxy Server
  2. Working of Proxy Server
  3. Types of Proxy Server
  4. Socks Proxy
  5. Free Proxy Servers
  6. Use of Proxies for Attack
  7. Tools
  8. How Does MultiProxy Work
  9. TOR Proxy Chaining Software
  10. TOR Proxy Chaining Software
  11. AnalogX Proxy
  12. NetProxy
  13. Proxy+
  14. ProxySwitcher Lite
  15. Tool: JAP
  16. Proxomitron
  17. SSL Proxy Tool
  18. How to Run SSL Proxy
• Module 55: Data Loss Prevention
  1. Introduction: Data Loss
  2. Causes of Data Loss
  3. How to Prevent Data Loss
  4. Impact Assessment for Data Loss Prevention
  5. Tools
• Module 56: Hacking Global Positioning System (GPS)
  1. Global Positioning System (GPS)
  2. Terminologies
  3. GPS Devices Manufacturers
  4. Gpsd-GPS Service Daemon
  5. Sharing Waypoints
  6. Wardriving
  7. Areas of Concern
  8. Sources of GPS Signal Errors
  9. Methods to Mitigate Signal Loss
  10. GPS Secrets
  11. Firmware Hacking
  12. GPS Tools
• Module 57: Computer Forensics and Incident Handling
  1. Computer Forensics
  2. Incident Handling
  3. Incident Management
  4. Why don't Organizations Report Computer Crimes
  5. Estimating Cost of an Incident
  6. Whom to Report an Incident
  7. Incident Reporting
  8. Vulnerability Resources
  9. What is CSIRT
  10. World CERTs
  11. IRTs Around the World
• Module 58: Credit Card Frauds
  1. E-Crime
  2. Statistics
  3. Credit Card
  4. Credit Card Generators
  5. Credit Card Fraud Detection
  6. Best Practices: Ways to Protect Your Credit Cards
• Module 59: How to Steal Passwords
  1. Password Stealing
  2. How to Steal Passwords
  3. Password Stealing Techniques
  4. Password Stealing Trojans
  5. Password Stealing Tools
  6. Recommendations for Improving Password Security
  7. Best Practices
• Module 60: Firewall Technologies
  1. Firewalls: Introduction
  2. Hardware Firewalls
  3. Software Firewalls
  4. Windows Firewalls
  5. Mac OS X Firewalls
• Module 61: Threats and Countermeasures
• Module 62: Case Studies
• Module 63: Botnets
  1. What Is a Botnet?
  2. The Botnet Life Cycle
  3. Uses of Botnets
  4. How to Identify Whether Your Computer is a Botnet
  5. Common Botnets
  6. Botnet Detection: Tools and Techniques
  7. Tool: Ourmon
  8. Anomaly Detection
  9. IRC Protocol
  10. Detecting an IRC Client Botnet
  11. Detecting an IRC Botnet Server
  12. Automated Packet Capture
  13. Ourmon Event Log
  14. Sniffing IRC Messages
  15. Sandboxes
  16. CWSandbox
  17. Automated Analysis Suite (AAS)
  18. Responding to Botnets
• Module 64: Economic Espionage
  1. Economic Espionage
  2. Who are Behind This?
  3. Motives
  4. Economic Intelligence
  5. Trade Secrets
  6. How Foreign Competitors Get the Information
  7. Methods of Acquiring Trade Secrets
  8. How Economic Espionage Increases
  9. Difference Between Industrial Espionage and Economic Espionage
  10. Competitive Intelligence
  11. The Economic Espionage Act of 1996, 18 U.S.C. §§ 1831-1839
  12. Methods for Economic Espionage Protection
• Module 65: Patch Management
  1. Hotfixes and Patches
  2. What is Patch Management
  3. Patch Testing
  4. Understanding Patch Monitoring and Management
  5. Types of Patches Defined by Microsoft
  6. Opsware Server Automation System (SAS)
  7. Patch Management Checklist
  8. Best Practices for Patch Management
• Module 66: Security Convergence
  1. Security Convergence
  2. Challenges Confronting an Effective Security Convergence Policy
  3. Benefits of Using Risk Management in Planning IT Security Administration
  4. RAMCAP
  5. Open Security Exchange (OSE)
  6. CISO (Chief Information Security Officer)
  7. Elements of Building Secure Operations
  8. Enterprise Security Management (ESM)
  9. Convergence of Network Operations and Security Operations
  10. Log Collection
  11. Log Normalization
  12. Log Severity
  13. Log Time Correction
  14. Log Categorization
  15. Event Storage
  16. Discovering and Interacting with Patterns
  17. Intelligent Platform Management Interface (IPMI) Standard

CHFI: Computer Hacking Forensic Investigator (3.5 days)   

Course Outline

• Computer Forensics and Investigations as a Profession
• Understanding Computer Investigations
• Working with Windows and DOS Systems
• Macintosh and Linux Boot Processes and Disk Structures
• The Investigator's Office and Laboratory
• Current Computer Forensics Tools
• Digital Evidence Controls
• Processing Crime and Incident Scenes
• Data Acquisition
• Computer Forensic Analysis
• E-mail Investigations
• Recovering Image Files
• Writing Investigation Reports
• Becoming an Expert Witness
• Computer Security Incident Response Team
• Logfile Analysis
• Recovering Deleted Files
• Application Password Crackers
• Investigating E-Mail Crimes
• Investigating Web Attacks
• Investigating Network Traffic
• Investigating Router Attacks
• The Computer Forensics Process
• Data Duplication
• Windows Forensics
• Linux Forensics
• Investigating PDA
• Enforcement Law and Prosecution
• Investigating Trademark and Copyright Infringement

Do you have the right background for CEH and CHFI Certification?

Benefit of taking CEH and CHFI Certification at NetCom

• Why Choose EC-Council Training at NetCom Learning?

  As a recognition for training excellence, NetCom Learning was chosen by Microsoft as the 2007 Worldwide Learning Solutions Partner of the year out of 1400 training companies.

  In addition, we have won numerous other training awards for quality and customer satisfaction by CompTIA, EC-Council and other vendors. We are simply passionate about learning and achieving the highest customer satisfaction in your learning experience!

  See the training value proposition below:

  Why EC-Council Training at NetCom?   CEH: Certified Ethical Hacker v7  CEH v7 showcases the latest hacking techniques and countermeasures. This class will immerse the students into an interactive environment where they will be shown how to scan, test, hack and secure their own systems. The lab intensive environment gives each student in-depth knowledge and practical experience with the current essential security systems. CEHv7.1 provides a comprehensive ethical hacking and network security-training program to meet the standards of highly skilled security professionals. Hundreds of SMEs and authors have contributed towards the content presented in the CEHv7.1 courseware. Latest tools and exploits uncovered from the underground community are featured in the new package. When a student leaves this intensive 5 day class they will have hands on understanding and experience in Ethical Hacking.    Updated core content and well-organized flow for a best-in-class learning experience. Exclusive section for countermeasures against different attacks with detailed explanation of how to implement the countermeasures in a real-time environment. Attractive and descriptive diagrammatic representations of concepts and attacks. Complete section dedicated to penetration testing, illustrating how to implement learned concepts to test network system security. Courseware includes over 20GB of the latest hacking and security tools. A result-oriented, descriptive lab manual; the labs showcased in the courseware are tested against the latest Operating Systems with all patches and hot fixes applied. CEH v7 meets Government and DoD compliance with Federal Information Security Management Act (FISMA) and DoD Directive 8570.1-M. Over 1000 minutes of video demonstrations and more. Â

• NetCom provides Authorized Training

  NetCom Learning is a Microsoft Gold Certified Partner for Learning Solutions (CPLS), Cisco Learning Partner, CompTIA Platinum Partner, EC-Council Accredited Training Center, Adobe Authorized Training Center, Autodesk Authorized Training Center and many others. We are proud to offer the highest quality, authorized training solutions from our many partners for our customers.

  See our comprehensive list of partner authorizations.

• Award winning, world-class Instructors

  Emilio G. - Vastly experienced working within multinational environments and capable of connecting to different audiences - In-depth expertise in the implementation, troubleshooting and documentation of networks and security systems, with strong "hands on" technical knowledge of CISSP, CEH and CHFI. - Master of Science in Electronics Engineering, and holder of several technical certifications. - Highly-skilled in diverse fields ranging from Security, Computer Forensics, Networking, Routing Protocols, Programming, Databases and Applications to name a few. Bio: With over 25 years of technical experience, Emilio brings a dynamic set of skills supported by a Masters Degree in Electronics Engineering and on-the-field experience working in multinational environments. He also holds more than 12 Cisco, CompTIA, and Microsoft certifications. Although he is well versed and thorough in multiple technological fields, his technical forte lies in the security domain, specifically CISSP, CEH and CHFI. Emilio�s skills have evolved over time, studying closely and constantly staying well informed of the growing cyber threats. These are just some of the few reasons why Emilio brings to his classes more than just what's in the books.

  Richard L. - Over 20 years experience in the IT industry. - CEH and Microsoft training for many government agencies, including the United States Department of Homeland Security, and the Federal Bureau of Investigation. - CEH and Microsoft training for Fortune corporations such as Merrill Lynch and ADP. Bio: Richard is a premier Microsoft Certified Trainer and Certified EC-Council Instructor. He has over 20 years of experience as a network administrator, security consultant, vulnerability assessor, and penetration tester for assorted Fortune companies. Richardâ??s knowledge on the development and implementation of policies and procedures concerning the security of network data is unsurpassed. He has conducted successful CEH and Microsoft training classes for many government agencies including the United States Department of Homeland Security, the Department of Justice and the Federal Bureau of Investigation, as well as Fortune enterprises such as Merrill Lynch and ADP.

  See more...  
• Actual Client Testimonials

  Mar 02 2012 The training was "outstanding". Mr. Garcia is the best instructor on the subject; very knowledgeable. - Draughon W. Course(s) Taken CEH: Certified Ethical Hacker v7.1 Boot Camp

  
  

  Jan 13 2012 Excellent instructor. Good Course material. -Dan S. Course(s) Taken CEH: Certified Ethical Hacker v7.1

  
  

  Sep 30 2011 I will be back for more training. The training material/illustrations are perfect. Once I pass the certification it will make all this work well worth it. -Robert K. Course(s) Taken CEH: Certified Ethical Hacker v7.1 Boot Camp

  
  

  Sep 19 2011 The instructor was very knowledgeable and presented well! -Marvin L. Course(s) Taken CEH: Certified Ethical Hacker v7.1 Boot Camp

  
  

  Sep 19 2011 The instructor's breath of knowledge and professionalism was nothing short of outstanding. As such, I would continue to coordinate service through Greg. He has assured high quality training for the past few years. -Greg C. Course(s) Taken CEH: Certified Ethical Hacker v7.1 Boot Camp

  
  

  Sep 19 2011 A lot of material, but good to go! -Victor W. Course(s) Taken CEH: Certified Ethical Hacker v7.1 Boot Camp

  
  

  May 07 2010 Very knowledgeable instructor. Class was very helpful. -Robert D. Course(s) Taken CEH and CHFI Certification

  
  

  May 07 2010 Overall experience is good. Instructor very knowledgeable Educational consultant also very helpful and great. -Binh V. Course(s) Taken CEH and CHFI Certification

  
  
• Awards won by NetCom

  NetCom Learning is an award winning, customer focused company. We are simply Passionate About Learning!

  See our list of awards.

• Specialized Boot Camp Training

  

  This training is also available as a boot camp. NetCom is world famous for delivering specialized boot camp training to our clients.

  For answers to questions regarding our boot camp training delivery format, please refer to our Boot Camp FAQ section.

Next Step, how do I attend the CEH and CHFI Certification?

Call us toll-free at 1-888-563-8266 FREE Training Inquiry form Website Live Chat Contact us via Email: info@netcomlearning.com