SEC560: Enterprise Penetration Testing
About This Course
SEC560 prepares you to conduct successful penetration testing for a modern enterprise, including on-premise systems, Azure, and Azure AD. You will learn the methodology and techniques used by real-world penetration testers in large organizations to identify and exploit vulnerabilities at scale and show real business risk to your organization. The course material is complemented with more than 30 practical lab exercises concluding with an intensive, hands-on Capture-the-Flag exercise in which you will conduct a penetration test against a sample target organization and demonstrate the knowledge you have mastered.
What You'll Learn
• Properly plan and prepare for an enterprise penetration test
• Perform detailed reconnaissance to aid in social engineering, phishing, and making well-informed attack decisions
• Scan target networks using best-of-breed tools to identify systems and targets that other tools and techniques may have missed
• Perform safe and effective password guessing to gain initial access to the target environment, or to move deeper into the network
• Exploit target systems in multiple ways to gain access and measure real business risk
• Execute extensive post-exploitation to move further into the network
• Use privilege escalation techniques to elevate access on Windows or Linux systems, or the Microsoft Windows domain
• Perform internal reconnaissance and situational awareness tasks to identify additional targets and attack paths
• Execute lateral movement and pivoting to further extend access to the organization and identify risks missed by surface scans
• Crack passwords using modern tools and techniques to extend or escalate access
• Use multiple Command and Control (C2, C&C) frameworks to manage and pillage compromised hosts
• Attack the Microsoft Windows domain used by most organizations
• Execute multiple Kerberos attacks, including Kerberoasting, Golden Ticket, and Silver Ticket attacks
• Conduct Azure reconnaissance
• Execute Azure Active Directory (AD) password spray attacks
• Execute commands in Azure using compromised credentials
• Develop and deliver high-quality reports
Entry Requirements
SEC560 is the flagship penetration test course offered by the SANS Institute. Attendees are expected to have a working knowledge of TCP/IP and a basic knowledge of the Windows and Linux command lines before they come to class. While SEC560 is technically in-depth, it is important to note that programming knowledge is NOT required for the course.
Courses that lead in to SEC560:
SEC504: Hacker Tools, Techniques, Exploits, and Incident Handling
SEC542: Web App Penetration Testing and Ethical Hacking
Participants should be proficient in written and spoken English. There are no minimum entry requirements for years of experience in the domain, education level or age group; but participants should possess the relevant prerequisite skills mentioned above.