Corso Ethical Hacker CEH:
agisci come un attaccante per proteggere le aziende

Durata: 3 giorni

Live Online

In presenza

Formazione Ethical Hacking

Il Corso Certified Ethical Hacker (CEH) offre una formazione avanzata sulle tecniche di hacking da una prospettiva offensiva, fornendo competenze aggiornate per affrontare le sfide della sicurezza informatica. Il programma è costantemente aggiornato per includere le più recenti tecniche di attacco, exploit, strumenti automatizzati e le migliori contromisure difensive, secondo le linee guida degli esperti del settore.

Cosa imparerai

Raccogliere informazioni di Intelligence OSINT
Scansionare reti e computer
Sfruttare vulnerabilità software e web application
Utilizzare tecniche di evasione dei firewall
Usare tecniche di evasione degli antivirus
Effettuare attacchi su reti wireless
Analizzare la non-sicurezza nel mondo IoT
Sviluppare le security policy aziendali

Programma del Corso Ethical Hacking

Module 1: Introduction to Ethical Hacking

Information Security Overview
Cyber Kill Chain Concepts
Hacking Concepts
Ethical Hacking Concepts
Information Security Controls
Information Security Laws and Standards

Module 2: Footprinting and Reconnaissance

Footprinting Concepts
Footprinting through Search Engines
Footprinting through Web Services
Footprinting through Social Networking Sites
Website Footprinting
Email Footprinting
Whois Footprinting
DNS Footprinting
Network Footprinting
Footprinting through Social Engineering
Footprinting Tools
Footprinting Countermeasures

Module 3: Scanning Networks

Network Scanning Concepts
Scanning Tools
Host Discovery
Port and Service Discovery
OS Discovery (Banner Grabbing/OS Fingerprinting)
Scanning Beyond IDS and Firewall
Draw Network Diagrams

Module 4: Enumeration

Enumeration Concepts
NetBIOS Enumeration
SNMP Enumeration
LDAP Enumeration
NTP and NFS Enumeration
SMTP and DNS Enumeration
Other Enumeration Techniques
Enumeration Countermeasures

Module 5: Vulnerability Analysis

Vulnerability Assessment Concepts
Vulnerability Classification and Assessment Types
Vulnerability Assessment Solutions and Tools
Vulnerability Assessment Reports

Module 6: System Hacking

System Hacking Concepts
Gaining Access
Escalating Privileges
Maintaining Access
Clearing Logs

Module 7: Malware Threats

Malware Concepts
APT Concepts
Trojan Concepts
Virus and Worm Concepts
Fileless Malware Concepts
Malware Analysis
Countermeasures
Anti-Malware Software

Module 8: Sniffing

Sniffing Concepts
Sniffing Technique: MAC Attacks
Sniffing Technique: DHCP Attacks
Sniffing Technique: ARP Poisoning
Sniffing Technique: Spoofing Attacks
Sniffing Technique: DNS Poisoning
Sniffing Tools Countermeasures
Sniffing Detection Techniques

Module 9: Social Engineering

Social Engineering Concepts
Social Engineering Techniques
Insider Threats
Impersonation on Social Networking Sites
Identity Theft
Countermeasures

Module 10: Denial-of-Service

DoS/DDoS Concepts
DoS/DDoS Attack Techniques
Botnets
DDoS Case Study
DoS/DDoS Attack Tools
Countermeasures
DoS/DDoS Protection Tools

Module 11: Session Hijacking

Session Hijacking Concepts Application Level Session Hijacking
Network Level Session Hijacking
Session Hijacking Tools
Countermeasures

Module 12: Evading IDS, Firewalls, and Honeypots

IDS, IPS, Firewall, and Honeypot Concepts
IDS, IPS, Firewall, and Honeypot Solutions
Evading IDS
Evading Firewalls
IDS/Firewall Evading Tools
Detecting Honeypots
IDS/Firewall Evasion Countermeasures

Module 13: Hacking Web Servers

Web Server Concepts
Web Server Attacks
Web Server Attack Methodology
Web Server Attack Tools
Countermeasures
Patch Management
Web Server Security Tools

Module 14: Hacking Web Applications

Web Application Concepts
Web Application Threats
Web Application Hacking Methodology
Web API, Webhooks, and Web Shell
Web Application Security

Module 15: SQL Injection

SQL Injection Concepts
Types of SQL Injection
SQL Injection Methodology
SQL Injection Tools
Evasion Techniques
Countermeasures

Module 16: Hacking Wireless Networks

Wireless Concepts
Wireless Encryption
Wireless Threats
Wireless Hacking Methodology
Wireless Hacking Tools
Bluetooth Hacking
Countermeasures
Wireless Security Tools

Module 17: Hacking Mobile Platforms

Mobile Platform Attack Vectors
Hacking Android OS
Hacking iOS
Mobile Device Management
Mobile Security Guidelines and Tools

Module 18: IoT and OT Hacking

IoT Hacking
IoT Concepts
IoT Attacks
IoT Hacking Methodology
IoT Hacking Tools
Countermeasures
OT Hacking
OT Concepts
OT Attacks
OT Hacking Methodology
OT Hacking Tools
Countermeasures

Module 19: Cloud Computing

Cloud Computing Concepts
Container Technology
Serverless Computing
Cloud Computing Threats
Cloud Hacking
Cloud Security

Module 20: Cryptography

Cryptography Concepts
Encryption Algorithms
Cryptography Tools
Public Key Infrastructure (PKI)
Email Encryption
Disk Encryption
Cryptanalysis
Countermeasures

Scarica il programma

Requisiti

Non sono richiesti prerequisiti specifici. Per la partecipazione sono consigliate conoscenze di base dei sistemi operativi e sui concetti di networking e security.

Perché scegliere il corso

Il corso di Formazione Ethical Hacking rappresenta uno strumento essenziale per implementare misure di sicurezza informatica sempre più pertinenti con l’attività aziendale. Formare figure interne specializzate diventa quindi un metodo necessario e proattivo per affrontare le minacce informatiche in modo efficace e pertinente con le richieste di cybersecurity. A differenza dei tradizionali corsi di sicurezza informatica, che si concentrano principalmente su configurazioni, firewall e misure preventive, il corso CEH adotta un approccio innovativo: l’analisi della sicurezza attraverso la simulazione di attacchi reali. Questa metodologia permette ai partecipanti di comprendere le vulnerabilità dei sistemi, sperimentando in prima persona le tecniche usate dagli hacker e imparando a sviluppare strategie di difesa efficaci.

€ 1300 + IVA a partecipante

Quotazione garantita per formazione online
con minimo 3 iscritti della stessa azienda

Prenota il corso