طاها رضوی

• متوسط
• مسیر قرمز
• ۱۰ درس

دربارۀ این دوره

مخاطبان

• علاقه‌مندان ورود به حوزۀ تست نفوذ و ارزیابی امنیت سایبری
• متخصصان امنیت سایبری
• مشاوران امنیت سایبری

پیش‌نیازها

• آشنایی با مبانی و مفاهیم شبکه
• آشنایی با مبانی امنیت
• آشنایی با حداقل یکی از زبان‌های اسکریپت‌نویسی

• Foundations
  • Network+ in a Nutshell
  • Deep Dive in TCP/IP Protocols
  • Analyzing Common Protocols
• Environment Setup
  • Setting Up Safe Environment
  • Installing Pen-testing tools
• Reconnaissance & Enumeration
  • Information Gathering
  • Passive
    • Online Databases
    • DNS
    • OSINT
  • Active
    • Scanning with Nmap
    • Network Mapping
    • Banner Grabbing
    • Pitfalls to avoid
• Vulnerability Discovery
  • Scanning with Vulnerability Assessment Tools
  • Result Verification
  • Manual Research
  • Introducing Vulnerability Databases
• Active Directory
  • AD Architecture Basics
  • Authentication Flows
  • Enumeration Tools
  • Mapping with Bloodhound
  • Credential Harvesting
  • Kerberos-specific Attacks
  • Lateral Movement
  • Relaying
  • Persistence
  • Clearing Tracks
• Exploitation Basics
  • Exploiting Misconfigurations
  • Exploiting Vulnerable Software
  • Fuzzing
  • Manual Exploitation Basics
  • Building Password Dictionary
  • Brute-force and Dictionary Attacks
  • Layer 2 Attacks
  • Layer 3 & Dynamic Routing Protocol Attacks
  • IPv6
  • Voice over IP
    • Basic Call Flow
    • SIP & RTP Packet-level Analysis
    • SIP Spoofing Attacks
    • RTP Injection
  • Protocol-Specific Attacks
• Post-Exploitation
  • Lateral Movement
  • Credential Harvesting
  • Privilege Escalation
  • Persistence
  • Data Exfiltration
  • Covering Tracks
• Wireless
  • Basic WiFi Attacks
  • Evil-Twin Setup
  • Bluetooth Basics
  • Other Wireless Protocols
• Reporting
  • CIA Triad
  • Introducing MITRE ATT&CK
  • Communicating with Non-Technical Stakeholders
  • Jurisdiction & Regulation
• Next Plan
  • Telecommunication Networks (SS7/SIGTRAN + GTP + ...)
  • Red Teaming

گواهینامه‌ی دوره