ISSA-LA Security Summit XII

Penetration testing (ethical hacking) is a critical skill to help assess the security of networks, applications, and more. In this workshop, participants will get a hands-on introduction to penetration testing following the Penetration Testing Execution Standard (PTES) developed by industry practitioners as a recognized standard for security assessments.
Participants will learn to discover a wide variety of security issues regularly found in actual enterprise security assessments. We will use industry-standard tools such as Metasploit and a variety of manual techniques to perform reconnaissance, vulnerability discovery, exploitation, and post-exploitation against critical enterprise targets such as web applications, servers, mobile devices, and workstations. In addition to learning to use industry-standard security assessment tools, students will learn the underlying concepts of security testing. For example, students will learn how to write exploits and custom penetration testing tools for enterprise assessments. Students will engage in real-world, hands-on security testing against a wide range of targets. This course will provide a solid foundation to help students engage in professional penetration testing.

Student Requirements: Basic knowledge of computer security concepts
Laptop Requirements: Any laptop with administrator access and Oracle VirtualBox installed. Virtual machine downloads will be made available 1 week before the start of the course.

Day 1: 
Introduction to penetration testing
Using automated exploitation tools
Active and passive information gathering
Vulnerability scanning and assessment
Threat modeling
Vulnerability exploitation
Password cracking
Post exploitation
Writing the pentest report
Client-side attacks
Social engineering attacks

Day 2:
Introduction to Web application testing
Wireless attacks
Mobile application testing
Mobile device testing
Internet of Things testing
Exploit development
Penetration tool development
Reverse engineering and vulnerability discovery