Module 1
Introduction to Ethical Hacking
- Information Security Concepts
- Cyber Kill Chain & MITRE ATT&CK
- Types of Hackers
- Hacking Phases
- Legal & Ethical Considerations
Modüller & İçerik
Eğitim, her biri pratik uygulamalarla desteklenen 20 modülden oluşmaktadır. Katılımcılar, her modül sonunda kendilerine verilen testlerle öğrendiklerini pekiştirecekler. Modüller arasında etik hacking temellerinden, ağ, web ve mobil güvenliği gibi ileri düzey konulara kadar geniş bir yelpazede içerik yer alır.
Module 2
Footprinting and Reconnaissance
- Passive & Active Recon
- DNS, WHOIS, Metadata Footprinting
- OSINT Techniques
- Recon-ng, theHarvester
Module 3
Scanning Networks
- Host Discovery
- Port Scanning
- Service Enumeration
- Nmap Advanced Techniques
Module 4
Enumeration
- NetBIOS, SNMP, LDAP Enumeration
- SMTP, SMB, RPC Enumeration
- Automated Enumeration Tools
Module 5
Vulnerability Analysis
- Vulnerability Assessment Concepts
- CVSS
- Automated Vulnerability Scanners
Module 6
System Hacking
- Password Attacks
- Privilege Escalation
- Maintaining Access
- Clearing Tracks
Module 7
Malware Threats
- Malware Types
- Fileless Malware
- Ransomware
- Rootkits
- Malware Analysis Basics
Module 8
Sniffing
- Packet Sniffing Concepts
- MITM Attacks
- ARP Poisoning
- Sniffing Detection
Module 9
Social Engineering
- Human-based Attacks
- Phishing, Vishing, Smishing
- Insider Threats
- Social Engineering Countermeasures
Module 10
Denial-of-Service
- DoS & DDoS Concepts
- Botnets
- Application & Network Layer Attacks
- DDoS Mitigation
Module 11
Session Hijacking
- TCP/IP Hijacking
- Web Session Hijacking
- Session Fixation
- Countermeasures
Module 12
Evading IDS, Firewalls & Honeypots
- IDS/IPS Evasion
- Firewall Bypass Techniques
- Tunneling Methods
- Honeypot Concepts
Module 13
: Hacking Web Servers
- Web Server Architecture
- Server Vulnerabilities
- Directory Traversal
- Hardening Techniques
Module 14
Hacking Web Applications
- OWASP Top 10 Overview
- Authentication & Authorization Attacks
- XSS, CSRF, SQLi Basics
- API Security Concepts
Module 15
SQL Injection
- SQL Injection Types
- Union, Boolean, Time-based
- SQLMap Usage
- WAF Evasion
Module 16
Hacking Wireless Networks
- WiFi Standards
- WPA/WPA2/WPA3 Attacks
- Evil Twin
- Wireless Forensics
Module 17
Hacking Mobile Platforms
- Android & iOS Architecture
- Mobile Malware
- App Security Testing
Module 18
IoT & OT Hacking
- IoT Device Architecture
- ICS/SCADA
- OT Vulnerabilities
Module 19
Cloud Computing
- Cloud Models
- Cloud Threats
- Cloud Attacks
- Cloud Security Controls
Module 20
Cryptography
- Symmetric & Asymmetric Crypto
- Hashing
- PKI
- SSL/TLS
- Crypto Attacks