مهدی حاتمی

• پیشرفته
• مسیر بنفش
• ۱۰ درس

دربارۀ این دوره

مخاطبان

• مناسب برای شکارچیان تهدید
• Red Teamerها
• کارشناسان لایۀ ۲ و ۳ مرکز عملیات امنیت
• تیم‌های پاسخ به رخداد

پیش‌نیازها

• حداقل ۲ سال سابقۀ فعالیت در زمینۀ امنیت سایبری

• Introduction to Client-Side Initial Access
  • What client-side attacks are
  • Initial access attack chain (Delivery → Execution)
  • Real-world examples of client-side intrusion
  • How attackers use user-side applications to gain access
• Phishing & Social Engineering (Client-Side Only)
  • Email-based delivery techniques
  • Malicious links and redirect tricks
  • HTML Smuggling
  • Browser-in-Browser (visual phishing)
  • Malicious attachments (ZIP, JS, VBS, PDF)
  • QR-based phishing
  • Cloaked URLs and multi-redirect chains
• Malicious Office Documents
  • VBA macro malware
  • VSTO and COM add-in abuse
  • Malicious OneNote files
  • Embedded payloads (DOCX, XLSM, PPTM)
  • RTF weaponization
  • DDE and OLE execution
  • LNK files hidden inside ZIP archives
• Remote Template Injection
  • DOCX remote template loading
  • DOTM remote resource injection
  • RTF external object injection
  • Template swapping for dynamic payload delivery
  • Use of remote templates in APT operations
• HTML Smuggling (Deep Dive)
  • JavaScript-based payload assembly
  • Blob/ArrayBuffer payload construction
  • Encoded and obfuscated JS in smuggling
  • Auto-download and hidden file generation
  • Browser-based ZIP/ISO creation
  • Modern HTML smuggling campaigns and patterns
• LOLBIN-Based Initial Access
  • Abuse of Windows native binaries for payload delivery
  • mshta, wscript, cscript
  • certutil download and decode
  • rundll32 HTML/JS execution
  • PowerShell loaders
  • BITS/Background Intelligent Transfer Service abuse
  • Curl/Invoke-WebRequest usage
  • Signed binary proxy execution
• Browser Exploitation & Drive-By Attacks
  • Watering-hole attacks
  • Malvertising
  • Modern exploit chain concepts
  • Malicious HTML/JS loader chains
  • Exploiting browser vulnerabilities
  • Drive-by download mechanics
  • WebAssembly-based payload staging
  • Malicious browser extensions (Chrome, Edge)
• File Format Abuse (Non-Office)
  • PDF JavaScript exploits
  • Archive-based attack tricks
  • ZIP/JAR/7z payload delivery
  • Double extensions and hidden files
  • Deeply nested payloads
  • ISO/VHD disk-image malware delivery
  • Image-based payload concealment
  • Steganography for payload delivery
  • CHM (Compiled HTML Help) exploitation
• Script-Based Initial Access
  • JavaScript droppers
  • HTA-based attacks
  • WSF/WSH script execution chains
  • PowerShell-based initial loaders
  • Batch file exploit chains
  • Polyglot file techniques (JS+HTML, PDF+JS, etc.)
• Combined / Multi-Vector Client-Side Chains
  • Email → HTML Smuggling → LNK → PowerShell
  • Website → ISO → LOLBIN execution
  • RTF → Remote template → DLL loader
  • Browser-in-browser + malicious extension combo
  • OneNote → embedded script → LOLBIN chain

گواهینامه‌ی دوره