TRAININGS

Hacking Extreme

You can achieve the greatest possible level of security only if you know the attackers, the methods they use and the way they proceed, and if you can understand both their way of thinking and their motives.

Training Content

Security mechanisms are often planned and developed only from the perspective of an admin or a network expert. In general, however, the way an attacker sees things greatly differs from this, which is one of the reasons why successful attacks on company networks happen repeatedly.

This intensive training will illustrate the way an attacker proceeds beyond web applications. Starting with information gathering, we will, in numerous steps, cover Linux servers, Windows clients and the domain. The training includes both well-known and lesser-known attacking techniques: from basic classics up to bypassing modern security mechanisms, from conceptual problems down to hardware processing. Numerous demonstrations will examine examples from real life.

In several laboratory exercises, you will get to put into practice what you have learned. For this purpose, each participant will be provided with numerous tools and exploits, which go far beyond usual scanners. In addition to several aha moments, participants will be able to evaluate and assess security-relevant questions realistically this way.

The trainers carry out security assessments on a regular basis, and they will pass on their practical experience and insider knowledge they have obtained in this field.

Topics covered:

Basics
- Motivation of attackers
- Terminology / definition of important terms
- Possible points of attack

Information gathering
- Sources of information
- DNS-based information gathering
- Host discovery
- Port scanning
- Fingerprinting (active, passive)
- Firewall/IDS evasion
- Information from log files
- Information disclosure by the browser

Software vulnerabilities / Binary exploitation in general
- Technical basics for reverse engineering
- Format-string vulnerabilities
- Buffer overflows
- Logical errors
- Shellcoding
- Applied countermeasures and bypassing, including
  - ASLR
  - DEP/NX/XD
  - SSP/Canaries/Cookies
  - SafeSEH
  - SEHOP
  - RELRO

Targeted privilege escalation
- Linux and Windows part
- Protection domains (user mode, kernel mode and even below)
- SUID/SGID
- Kernel exploitation
- Configuration errors
- Race conditions

Windows-specific attacks
- Client applications (Office, browser, …)
- LM, NTLM and NTLMv2 vulnerabilities
- Pass-the-hash attacks

Network-based attacks (in a switched environment)
- Sniffing
- Spoofing
- Man in the middle
  - SSH
  - TLS
  - RDP

Post exploitation
- Rootkits
- Backdoor technologies
- Defacement
- Host hopping

Other topics included
- Social engineering
- Tools and frameworks
- Attacks on SSL/TLS
- Downgrade attacks
- Side-channel attacks
- Attacks on passwords/password hashes

The topics covered will be explained using demonstrations and exercises.

Operating systems covered:
Linux/Unix environment and Windows

Target group:
Admins, network experts, security managers and employees on management level who are not afraid of viewing (in)security through the attacker’s eyes, diving deeply into a technical world.

Prerequisite:
Knowledge of the basic processes of using and administrating Windows and Linux systems. Knowledge of the TCP/IP stack and the functionality of common protocols would be of advantage.

Maximum number of participants: 15 people

Price: € 2,995

This training will be held in German.

You will receive CPE Points for participating in the Hacking Extreme training. The training takes 32 hours. You will get a certificate after having completed the training.

Dates:
June 3-6, 2025 in Frankfurt
November 11-14, 2025 in Ludwigsburg

Place:
The training course will take place in fine, selected hotels: