Difference between revisions of "Security Workshop"

From Gridkaschool
m (Requirements)
m (Content)
Line 6: Line 6:
 
* An SSH client (OpenSSH, [http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe PuTTY]) is necessary.
 
* An SSH client (OpenSSH, [http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe PuTTY]) is necessary.
   
== Content ==
+
== Agenda ==
   
 
* ''Part I'' - '''Introduction'''
 
* ''Part I'' - '''Introduction'''

Revision as of 13:08, 20 August 2014

Abstract

Requirements

  • You need to bring your own notebook (BYOD), Unix-based preferred.
  • An SSH client (OpenSSH, PuTTY) is necessary.

Agenda

  • Part I - Introduction
    • What is "hacking"?
    • How do hackers (and white hat pentesters) break into computers?
    • Our lab environment
  • Part II - Webhacking
    • Injection Attacks (SQL, OS commands, ...)
    • Cross-site Scripting (XSS)
    • Inclusion Attacks
    • Attacks on browsers
  • Part III - Man in the Middle-Attacks
    • ARP Spoofing
    • DNS Spoofing
    • MitM in IPv6 networks
  • Part IV - Metasploit Framework
    • Exploits
    • Payloads

Course Material

Slides:
...

Handout:
whatever your notes will be ;-) (we can provide written handouts, but only in German)