Ethical Hacking Post Exploitation

The Ethical Hacking Post Exploitation (EHPX) course presents offensive post-exploitation techniques, analyzing the stages of an attack and their main characteristics, using well-established frameworks and methodologies such as MITRE ATT&CK and the Cyber Kill Chain as a basis.

Cyber threats are increasingly advanced to the point that large enterprises and nations are constant victims of more sophisticated attacks. This leads us to the harsh reality that, sooner or later, your organization will be attacked and compromised to some extent.

Once an attacker exploits a vulnerability and gains access to a network, what happens next? How do they establish themselves? How do they escalate privileges? How do they gather information without being noticed? How do they communicate with their Command and Control server? How do they exfiltrate relevant data? How do they cover their tracks? These and other questions will be answered in this training, which has a 100% hands-on approach, driven by a series of exercises and labs.

The course covers current post-exploitation techniques in an environment composed of real applications and modern operating systems (Windows and Linux). Techniques, tactics, and procedures (TTPs) of attacks will be presented, from the simplest to the most advanced (APT), which are fundamental both for offensive activities (Pentesters, Red Team) and for defense activities (Blue Team, Threat Hunting, CSIRT, SOC).

Various topics will be addressed, such as: Information Gathering (Pillaging), Privilege Escalation, Maintaining Access (Backdoor), Persistence, Internal Network Mapping, Pivoting, Credential Capture, Password Cracking, Pass-The-Hash, Offensive PowerShell, Attacks on Active Directory Infrastructure, Exploitation of the Kerberos Protocol, Lateral Movement, Command and Control Channel (C2/C&C), Data Exfiltration, among others.