The training is intended for IT practitioners – especially developers and QA engineers, but also system administrators and managers who want to know how applications and organization get hacked today and how to prevent it.
Participant will gain comprehensive, practical knowledge about application and organization hacking methods as well as defense mechanism to prevent it, backed by multiple examples and exercises.
- Cyber attack lifecycle
- Cyber0Kill chain
- MITRE ATT&CK framework
- Attacks and threats (exploitation, defense, case studies)
- Ransomware
- Malware
- Denial of Service / Distributed Denial of Service
- Phishing
- Supply-chain attack
- Zero-days
- Web application vulnerabilities (SQL Injection, Cross-site Scripting)
- Data Leaks
- Mass account takeover
- Data manipulation
- Advanced Persistence Threat (Backdoor)
- Cyber hygiene
Participant will gain comprehensive, practical knowledge about application and organization hacking methods as well as defense mechanism to prevent it, backed by multiple examples and exercises.
- Training: English