Foot Printing/reconnaissance/Information Gathering

 What is Foot Printing
 Objectives of Foot Printing
 Finding a company’s details
 Finding a company’s domain name
 Finding a company’s Internal URLs
 Finding a company’s Public and Restricted URLs
 Finding a company’s Server details
 Finding the details of domain registration
 Finding the range of IP Address
 Finding the DNS information
 Finding the services running on the server
 Finding the location of servers
 Traceroute analysis
 Tracking e-mail communications
Scanning
 What is network scanning
 Objectives of network scanning
 Finding the live hosts in a network
 Finding open ports on a server
 Finding the services on a server
 OS fingerprinting
 Server Banner grabbing tools
 What is a Vulnerability Scanning
 Vulnerability Scanner tools
 Finding more details about a vulnerability
 What is a proxy server
 How does proxy server work
 Types of proxy servers
 How to find proxy servers
 Why do hackers use proxy servers
 What is a TOR network
 Why hackers prefer to use TOR network
Enumeration:
 SNMP Enumeration
 SMTP Enumeration
 DNS Enumeration
Vulnerability Analysis (New)
 Perform vulnerability analysis to identify security
loopholes in the target organization’s network,
Communication infrastructure and end systems.
Sniffing and Sniffers
 What is a sniffer
 How sniffer works
 Types of sniffing
 Active sniffing

 How to differentiate a Phishing webpage from the
original webpage
 How to defend against Phishing attacks
 SET: Social Engineering Toolkit
DOS : Denial of Service
 What is a DOS attack
 What is a DDOS attack
 Symptoms of a Dos attack
 DoS attack techniques
 What is a Botnet
 Defending DoS attacks
Session Hijacking
 What is session hijacking.
 Dangers of session hijacking attacks
 Session hijacking techniques
 Cross-Site scripting attack
 Session hijacking tools
 How to defend against session hijacking.
Hacking Web Servers & Web Applications
 What is a web server
 Different webserver applications in use
 Why are webservers hacked & its consequences
 Directory traversal attacks
 Website defacement
 Website password brute forcing
 How to defend against web server hacking
SQL Injection
 What is SQL Injection
 Effects of SQL Injection attacks
 Types of SQL Injection attacks
 SQL Injection detection tools
Wireless Network Hacking
 Types of wireless networks
 Wi-Fi usage statistics
 Finding a Wi-Fi network
 Types of Wi-Fi authentications
 Using a centralized authentication server
 Using local authentication
 Types of Wi-Fi encryption methods
 WEP
 WPA
 WPAT
 How does WEP work
 Weakness of WEP encryption
 How does WPA work
 How does WPAT work
 Hardware and software required to crack Wi-Fi
networks
 How to crack WEP encryption
 How to crack WPA encryption
 How to crack WPAT encryption
 How to defend against Wi-Fi cracking attacks
Android Hacking
 Android Hacking Online and Offline.
 What is Metasploit framework.
 Using Metasploit framework to attack Android
mobile devices.
Evading Firewalls, IDS & Honeypots
 What is a Firewall
 What are the functions of a Firewall
 What is an IDS

 Stateful Multilayer Inspection Firewall
 Limitations of a Firewall
 IDS / IPS
 What is an IDS
 What is a IPS
 Difference between IDS & IPS
 Placement of IDS in the Network
 Configuring an IDS in the Network
 Placement of IPS in the Network
 Configuring an IPS in the Network
 UTM / Next-Generation Firewall
 What is a UTM
 Features of UTM
 Difference between a Firewall & a UTM
 Placement of UTM in the Network
 Configuring a UTM in the Network
 Monitoring attacks using UTM
 Configuring IPS module in UTM to detect and stop
attacks
Counter Measure Techniques for Local Systems
 Identifying the Vulnerabilities of a system
 Understanding the Vulnerabilities of a system
 CVE ID
 Bugtraq ID
 Patch Management
 Identifying the patch for a Vulnerability
 Downloading the Patch
 Testing the patch for stability in test environment
 Deploying the patch to Live Network
 Finding the missing updates in an Operating System
 Microsoft Baseline Security Analyser
 Belarc Advisor
Counter Measure Techniques for Malware Attacks
 Scanning systems for Malware infections
 Types of anti-malwares
 Anti-Virus
 Anti-Worm
 Anti-Trojan
 Anti-Rootkit
 Internet Security Suites
 HIDS
 HIPS