|
ECSA/LPT: EC-Council Certified Security Analyst and License Penetration Tester |
|
Course Length: 5 days.
Overview This in-depth advanced Hacking and Penetration Testing course provides students with real world hands on experience as well as knowledge and skills to undertake comprehensive security tests. Students will be taught how to design, secure and test networks to protect organisations from hackers and crackers. Furthermore, students will learn to effectively identify and mitigate risks to the security of the organisation infrastructure and to avoid and eliminate security problems.
Audience This course is intended for Site and Network Server Administrators, Firewall Administrators, System Administrators, Security Testers as well as Risk Assessment Professionals.
Outline - The Need for Security Analysis
- Advanced Googling
- TCP/IP Packet Analysis
- Advanced Sniffing Techniques
- Vulnerability Analysis with Nessus
- Advanced Wireless Testing
- Designing a DMZ
- Snort Analysis
- Log Analysis
- Advanced Exploits and Tools
- Penetration Testing Methodologies
- Customers and Legal Agreements
- Penetration Testing, Planning and Scheduling
- Pre-Penetration Testing Checklist
- Information Gathering
- External Penetration Testing
- Internal Network Penetration Testing
- Wireless Network Penetration Testing
- Router, Firewall and IDS Penetration Testing
- Denial of Service Penetration Testing
- Password Cracking Penetration Testing
- Social Engineering Penetration Testing
- Stolen Laptop Penetration Testing
- Application Penetration Testing
- Physical Security Penetration Testing
- Database Penetration Testing
- VoIP and VPN Penetration Testing
- Penetration Testing Reporting Analysis and Documentation Writing
- Penetration Testing Deliverables and Conclusions
- Ethics of a Licensed Penetration Tester
Prerequisites Students should be familiar with networking, the OSI Model, TCP/IP and basic systems administration as well as posses a familiarity with the Command Line. Prior to commencing this course, students must sign a Non-Disclosure Agreement (NDA) stating that they will not use skills learnt for illegal or malicious attacks and will not use such tools in an attempt to compromise any computer system.
|