Hacking Tactics, Techniques, and Procedures (TTPs)

Modules Content

0% Complete 0/4 Steps

Welcome

How to Navigate This Course

Course Overview

Meet Your Instructor

Modules Content

0% Complete 0/13 Steps

Intro: Knowing the Adversary

Threat and Risk Terminology

Knowing the Adversary

Hacker Ethics (White, Gray, and Black Hat)

An Adversary’s Characteristics

An Adversary’s Motivations

An Adversary’s Targets

An Adversary’s Objectives

An Adversary’s Resources and Sponsorships

An Adversary’s Capabilities

Inside Threats and Shadow IT

Module Exercises: Knowing the Adversary

Wrap Up: Knowing the Adversary

Modules Content

0% Complete 0/11 Steps

Intro: Attack Methodologies

Attack Methodologies

Tactic, Techniques, and Procedures (TTPs)

MITRE ATT&CK

Cyber Attack Tactics

Cyber Kill Chain

Cyber Kill Chain and Cyber Defense

Diamond Model of Intrusion Analysis

Attack Patterns and Adversary Signatures

Exercises: Attack Methodologies

Wrap Up: Attack Methodologies

Modules Content

0% Complete 0/12 Steps

Intro: Reconnaissance and Attack Planning

Reconnaissance

Open-Source Intelligence (OSINT)

DNS Reconnaissance

Websites Reconnaissance

Social Media Scraping

Dumpster Diving

Eavesdropping

Attack Surface

Attack Vectors and Vulnerabilities

Exercises: Recon and Attack Planning

Wrap Up: Recon and Attack Planning

Modules Content

0% Complete 0/24 Steps

Intro: Weaponization and Malware

Command and Control (C2)

Remote Access Trojan (RAT)

Enterprise Level Concerns

Exercises: Weaponization and Malware

Wrap Up: Weaponization and Malware

Modules Content

0% Complete 0/30 Steps

Intro: Delivery and Social Engineering

Delivery

Social Engineering

Social Engineering Methods

Developing Connection and Trust

Impersonation

Typosquating

DEMO: URL Obfuscation

Domain Shadowing

HTTP 302 Cushioning

Business Email Compromise (BEC)

Tailgating and Piggybacking

AI and Social Engineering

Exercises: Delivery and Social Engineering

Wrap Up: Delivery and Social Engineering

Modules Content

0% Complete 0/16 Steps

Intro: Exploitation and Vulnerabilities

Vulnerabilities and Exploitation

Common Network Vulnerabilities

Common Protocol Vulnerabilities

Common Hardware Vulnerabilities

Common Software Vulnerabilities

Common Virtualization and Cloud Vulnerabilities

Common Cryptographic Vulnerabilities

Common Human Vulnerabilities

Common Password Vulnerabilities

Common Process Vulnerabilities

Physical Vulnerabilities

Exploit Chaining

Common Attacks

Exercises: Exploitation and Vulnerabilities

Wrap Up: Exploitation and Vulnerabilities

Modules Content

0% Complete 0/15 Steps

Intro: Persistence and Discovery

Installation and Persistence

Network Discovery and Enumeration

Network Reconnaissance

Wiretapping

DEMO: Sniffing Attack with Wireshark

DEMO: Network Scanning with Nmap

Wireless Reconnaissance

Wardriving

DEMO: Port Scanning with Nmap

DEMO: Fingerprinting

Credential Harvesting

Vulnerability Scanning and Enumeration

Target Prioritization

Wrap Up: Persistence and Discovery

Modules Content

0% Complete 0/20 Steps

Intro: DoS Attacks

Denial of Service (DoS) Attack

Jamming

DEMO: DoS Attack with Rogue DHCP

DEMO: DHCP Starvation Attack

DEMO: Buffer Overflow Attack

DEMO: Ping of Death

DEMO: TCP Reset Attack

Wi-Fi Deauthentication Attack

Resources Limitations and Flooding

DEMO: Ping Flood (ICMP Flood) Attack

DEMO: TCP SYN Flood Attack

DEMO: UDP Flood Attacks

DEMO: DNS Flood Attack

Amplification Attack

Distributed Denial of Service (DDoS) Attack

DEMO: Reflected DDoS Attack

Directed Broadcasts and Broadcast Storm

DEMO: Smurf Attacks

Wrap Up: DoS Attacks

Modules Content

0% Complete 0/9 Steps

Intro: AitM and Spoofing Attacks

Adversary-in-the-Middle (AitM)

Replay Attacks

Spoofing Attacks

DEMO: DHCP Spoofing

DEMO: ARP Cache Poisoning

DEMO: DNS Cache Poisoning

Evil Twin

Wrap Up: AitM and Spoofing Attacks

Modules Content

0% Complete 0/13 Steps

Intro: Common Application Attacks

Software Vulnerabilities and Attacks

Common Weakness Enumeration (CWE)

OWASP Top 10

DEMO: Race Conditions

Deserialization Attack

DEMO: Buffer Overflow Attack

DEMO: Path Traversal

DEMO: Injection Attacks

DEMO: Structured Query Language (SQL) Injection

DEMO: Cross-Site Scripting (XSS)

DEMO: iFrame Attacks

Wrap Up: Common Application Attacks

Modules Content

0% Complete 0/17 Steps

Intro: Common Access Attacks

Authentication and Access Attacks

DEMO: Password and Credential Attacks

MFA Fatigue

Credential Replay

Pass-the-Hash/Ticket/Token

Session Hijacking

Compromised Key Attack

Cross-Site Request Forgery (CSRF)

Confused Deputy

Server-Side Request Forgery (SSRF)

Physical Attack

Wrap Up: Access Attacks

Modules Content

0% Complete 0/12 Steps

Intro: Password Cracking

DEMO: Password Hashing

DEMO: Rainbow Tables

DEMO: Salting Passwords

DEMO: Brute-Force Password Cracking

DEMO: Password Cracking with hashcat

DEMO: Dictionary Attack

DEMO: Mask Attacks

DEMO: Using hydra to Hack an Account

DEMO: Password Spraying

DEMO: Credential Stuffing

Wrap Up: Password Cracking

Modules Content

0% Complete 0/13 Steps

Intro: Stealth Techniques

Traffic Fragmentation

Domain Generation Algorithms (DGA)

Wrap Up: Stealth Techniques

Modules Content

0% Complete 0/21 Steps

Intro: Indicators of Compromise (IoC)

Indicators of Compromise (IoC)

Screen Freezing or System Crashes

Resource Inaccessibility

Strange Communication

Concurrent Session Usage

Impossible Travel

Other Strange Behavior

Wrap Up: Indicators of Compromise (IoC)

Modules Content

0% Complete 0/2 Steps

Review

Course Wrap Up

Hacking Tactics, Techniques, and Procedures (TTPs)

Current Status

Price

Get Started

Course Content

More posts

Cryptography Explained

Stellar Leadership: A Technical Dive into Building Strong Leaders

Cybersecurity Fundamentals

The Operational Success Model