Gedetailleerde cursusinhoud
Module 01: Introduction to Ethical Hacking Section 01: What is Ethical Hacking? Section 02: Threat Actors and Motivations Section 03: Hacker Mindsets and Methodologies Section 04: Rules of Engagement and Professional Conduct Section 05: Ethical Dilemmas and Gray Areas Section 06: Career Foundations Module 02: Cybersecurity Foundation Section 01: Core Cybersecurity Principles Section 02: Security Architecture Fundamentals Section 03: Essential Security Controls Section 04: Security Governance and Policy Section 05: Applying Controls and Architecture in Testing Section 06: Risk, Compliance, and Controls Module 03: Reconnaissance & Enumeration Section 01: Passive vs. Active Reconnaissance Section 02: Practical Recon Tools Section 03: Enumeration Techniques Section 04: Applied Recon: Nmap, Scripting, and Enumeration Section 05: Practice Scenarios and Reporting Section 06: Capstone & Reflection Module 04: Cryptography Section 01: Cryptography Foundations Section 02: Symmetric Cryptography Section 03: Asymmetric Cryptography Section 04: Hashing Section 05: Hybrid Crypto Systems Section 06: Quantum Cryptography Section 07: Advancements in Cryptography Section 08: Attacking Weak Cryptography: Hashes, Keys, and Real-World Failures Module 05: Vulnerability Scanning & Analysis Section 01: Understanding Vulnerability Assessment Section 02: Vulnerability Assessment Methodologies Section 03: Interpreting and Validating Vulnerabilities Section 04: Prioritizing Risks in Vulnerability Assessment Section 05: What is Patch Management? Section 06: Different Types of Patches Module 06: Web and Application Attacks Section 01: OWASP Top 10 Explained Section 02: Bridging OWASP and CWE for Pen Testers Section 03: API Top 10 Module 07: Exploitation and Post-Exploitation Section 01: Exploitation Basics Section 02: Exploit Frameworks in Action Section 03: Post-Exploitation Fundamentals Section 04: Pivoting and Lateral Movement Section 05: Cloud Exploitation Basics Module 08: Social Engineering Section 01: Social Engineering Concepts and Psychology Section 02: Phishing and Digital Deception Section 03: Pretexting and In-Person Tactics Section 04: USB Drops and Device Attacks Section 05: Social Engineering Tools and Payloads Section 06: Case Studies and Field Operations Module 09: Wireless Pen Testing Section 01: Wi-Fi Recon and Enumeration Section 02: Wi-Fi Tools Section 03: Sniffing Section 04: Authentication Attacks Section 05: Rogue AP Section 06: Wi-Fi Exploits Section 07: Threat Assessment Module 10: Reporting & Ethics Section 01: The Role of Reporting in Ethical Hacking Section 02: Writing Effective Reports Section 03: Ethics in Ethical Hacking Section 04: Professional Development and Accountability
Module 01: Penetration Testing Methodologies Section 01: Pen Test Phases Section 02: Scoping and Legal Boundaries Section 03: OWASP Testing Framework Module 02: Advanced Recon & Attack Surface Mapping Section 01: Recon Philosophy & Objectives Section 02: DNS, Subdomains, and Certificates Section 03: OSINT & Metadata Intelligence Section 04: Tech Stack & Service Fingerprinting Section 05: Mapping the Attack Surface Module 03: Exploitation Techniques (Local & Remote) Section 01: Understanding Exploitation Process Section 02: Modern Exploitation Techniques and Shell Management Section 03: Payload Execution & Stability Module 04: Post-Exploitation & Lateral Movement Section 01: Credential Harvesting & Token Abuse Section 02: Scanning, Pivoting & Routing Through Compromised Hosts Section 03: Lateral Movement Techniques Section 04: Persistence Mechanisms Section 05: Hiding Persistence and Cleanup Module 05: Cloud & Active Directory Exploitation Section 01: Enterprise Identity and AD Basics for Attackers Section 02: Local Privilege Escalation to Domain Admin Escalation Paths Section 03: Azure/M365 Exploitation - Initial Access to Persistence Section 04: Hybrid Identity Exploitation Paths (AD Connect, Entra Sync) Section 05: Real-World Kill Chain Examples (Hybrid Pathways) Module 06: Evasion & Payload Crafting Section 01: EDR & AV Evasion Fundamentals Section 02: Crafting Payloads with Caution Section 03: Obfuscation and Execution Techniques Section 04: Frameworks & Modern C2 Delivery Section 05: Red Team Tradecraft for Evasion Success Module 07: Web, API & Mobile Attacks Section 01: OWASP Top 10 Deep Dive Section 02: Advanced API Testing Section 03: Mobile App Exploitation (Android/iOS) Section 04: Web Shells and Post-Exploitation via Web Section 05: Defense Evasion in Web Contexts Module 08: Threat Simulation & Attack Chains Section 01: Threat Simulation Fundamentals Section 02: Planning and Scoping an Attack Chain Section 03: Chaining Techniques - From Access to Impact Section 04: Threat Simulation Tools and Frameworks Section 05: Communication, Debriefing, and Lessons Learned Module 09: Purple Team Collaboration Section 01: Introduction to Purple Teaming Section 02: Building a Purple Team Program Section 03: Adversary Emulation in Purple Teams Section 04: Detection Engineering and Alert Tuning Section 05: Purple Team Exercises - Real World to Lab Section 06: Continuous Improvement and Lessons Learned Module 10: Reporting & Business Risk Analysis Section 01: Reporting for Technical and Executive Audiences Section 02: Prioritizing Findings Based on Business Risk Section 03: Communicating Attack Paths and Exposure Chains Section 04: Mapping Findings to Frameworks and Controls Section 05: Strategic Debriefing and Executive Communication Section 06: Improving the Reporting Lifecycle