Basics of Penetration

Presented at Disobey 2020, Feb. 15, 2020, 11:45 a.m. (120 minutes)

The workshop is a short introduction to the very basics of penetration. It covers the anatomy of an attack: * Basic lifecycle (reconnaissance / enumeration, planning the attack, selecting or preparing tools, execution, persistence, post exploitation) * Terms and concepts (what vulnerabilities are and their categories, enumeration methods and tools, exploits and tools).

The workshop consists of a short lecture, followed by lab exercises led and assisted by the instructor. Lab materials include a virtual Kali Linux used as an attack machine, and a target VM prepared by the instructor, containing multiple vulnerable services. The lab exercises revolve around practicing enumeration, use of enumeration and attack tools, and post exploitation with an easy target. This will be a shorter version of the "Introduction to pwning" workshop i've done in Turkusec, Helsec, TreSec, and internally at my work.


Presenters:

  • Osku - Chief Security Engineer at Sanoma
    At work, Osku creates software and helps keeping everything secure. Outside of work, he hacks all the things and sits by a fire in the woods.

Links:

Similar Presentations: