|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/ethical-hacking-and-penetration-testing-x/
课程评论：没有评论
课程名称：道德黑客与渗透测试 课程概述： 本课程旨在教授成为安全专业人士所需的技能，帮助学员理解渗透测试的基本概念，识别系统漏洞并提供减轻攻击风险的解决方案。课程中将讨论使用多种先进工具进行漏洞识别、探测及利用，并结合更实际的演示，帮助学员深化对理论概念的理解。 课程目标： 在本课程中，学员将学习：信息与网络安全概述；黑客与道德黑客的概念；黑客的五个阶段；扫描与漏洞评估工具；恶意软件攻击；中间人攻击；网页服务器及网页应用的渗透测试；无线网络黑客技术。 目标受众： 本课程适合希望成为信息安全和网络安全专业人士的学生和IT专业人员。 先修知识： 学员需具备网络基础和服务器相关知识，同时熟悉TCP/IP、IP地址、子网、端口和协议，以及对Windows和Linux服务器（包括DNS、DHCP、网页服务器、FTP服务器和活动目录）的良好了解。 课程模块： 1. 信息安全导论：信息安全概述、黑客与道德黑客概念、黑客阶段、信息安全控制、渗透测试概述。 2. 足迹收集：足迹概念、通过搜索引擎、网络服务及社交网络进行足迹收集。 3. 网络扫描：理解TCP标志、网络扫描概念、扫描技术和设备。 4. 枚举：枚举概念、方法及工具。 5. 漏洞评估：漏洞评估概念、解决方案、评分系统、工具及报告。 6. 系统黑客：系统黑客概念、破解密码、提升权限、执行应用程序、隐藏文件及覆盖痕迹。 7. 恶意软件威胁：恶意软件概念、木马、病毒与蠕虫概念、恶意软件分析、对策及反恶意软件软件。 8. 嗅探：嗅探概念及技术：MAC攻击、DHCP攻击、ARP中毒、伪装攻击和DNS中毒。 9. 网站/应用渗透测试：网站/应用评估方法、工具及报告。 10. 无线网络渗透测试：Wi-Fi认证模式、无线加密协议及报告。 通过本课程，学员将全面掌握道德黑客和渗透测试的技能，提高在信息安全领域的专业能力。
OVERVIEWEthical Hacking and Penetration testing course provides the skills required for a candidate to become a Security Professional. The skills acquired through this course can make one to understand the essential concepts to perform penetration testing, uncover the vulnerability and solutions mitigate the risk of attack. In this course we will also discuss the scenarios with few advanced tools to identify, detect, and exploit any vulnerability uncovered in the target network environment. The interesting part of this course is that we will have more practical demos to understand the theoretical concepts.ObjectiveIn this course, you will learn:Overview of Information and Cyber SecurityHacking and Ethical Hacking conceptsFive Phases of HackingUsing tools for scanning and Vulnerability AssessmentMalware based AttacksMan-in-the-Middle AttackVAPT of Web Servers and Web Application ServersWireless HackingTarget AudienceThis course is for Students / IT Professionals who is interested in becoming Information Security and Cyber Security professional.PrerequisitesFor taking this course, knowledge about Networking Basics and Servers will be an essential.Good knowledge on TCP/IP, IP Address, Subnet, Ports and Protocols in Networking.Good Knowledge on Windows and Linux Servers including DNS, DHCP, Web Server, FTP Server and Active Directory.Module 1: Introduction to Information Security Information Security Overview Hacking and Ethical Concepts Hacking Phases Information Security Controls Penetration Testing Overview Module 02: Footprinting Footprinting Concepts Footprinting through Search Engines Footprinting through Web Services Footprinting through Social Networking Sites Module 03: Scanning Networks Understanding TCP Flags Network Scanning Concepts Scanning Techniques Scanning Devices Module 04: EnumerationEnumeration Concepts Enumeration Methods and Tools Module 05: Vulnerability Assessment Vulnerability Assessment ConceptsVulnerability Assessment Solutions Vulnerability Scoring Systems Vulnerability Assessment Tools Vulnerability Assessment Reports Module 06: System HackingSystem Hacking Concepts Cracking Passwords Escalating Privileges Executing Applications Hiding Files Covering Tracks Module 07: Malware Threats Malware Concepts Trojan Concepts Virus and Worm Concepts Malware Analysis Countermeasures Anti-Malware Software Module 08: SniffingSniffing Concepts Sniffing Technique: MAC Attacks Sniffing Technique: DHCP Attacks Sniffing Technique: ARP Poisoning Sniffing Technique: Spoofing Attacks Sniffing Technique: DNS Poisoning Module 09: Web Servers/Application VAPTWeb Server/Application Assessment Methodology Web Server/Application Assessment Tools Web Server/Application VAPT and Reporting Module 10: Wireless Network VAPT Wi-Fi Authentication Modes Wireless Encryption Protocols Wireless Network VAPT and Reporting
