Ethical Hacking Command and Control
This mini-course describes current post-exploitation techniques in a controlled environment consisting of real applications and modern operating systems (Windows and Linux), focusing on Command and Control (C2) infrastructure.
About the Course
Cyber threats are becoming increasingly sophisticated to the point that large companies and nations are constant victims of more elaborate attacks. This leads us to the harsh reality that, sooner or later, your organization will be attacked and compromised to some degree.
This mini-course describes current post-exploitation techniques in a controlled environment consisting of real applications and modern operating systems (Windows and Linux), with a focus on Command and Control (C2) infrastructure. It is a small part of our more comprehensive course, Ethical Hacking Post Exploitation – EHPX.
In a 100% hands-on manner, we will cover how C2 systems work, which communication protocols are most commonly used, what techniques are employed to camouflage traffic between the victim (target/agent) and the attacker (C2 server), which tools can be used and customized, the advantages and disadvantages of the available frameworks (open-source and free), and what can be done to detect these activities.
Course Content
- 1.Overview of Penetration Testing (Pentesting), Exploitation, Post-Exploitation, and Red Team Operations
- 2.Analysis of models and frameworks such as the Cyber Kill Chain and MITRE ATT&CK
- 3.Command and Control (C2) Frameworks
- 4.PowerShell Empire
- 5.Covenant
- 6.SilentTrinity
- 7.Merlin
- 8.Sliver