Content:

- Reconnaissance
... - Concept of the Cyber Kill Chain
... - Overview of reconnaissance methods
... - Lab network exploration with network scan
... - Lab identification of vulnerable services
- Exploiting misconfigurations & vulnerabilities
... - Key terms in cyber security
... - Overview of common vulnerabilities and misconfigurations
... - Lab with manual exploit
... - Lab with Metasploit
... - Overview of other exploit techniques
- Showing the effects of unpatched systems
... - Presentation of Common Vulnerabilities and Exposures (CVE) & CIA Triad
... - Lab with known CVEs and their various implications
- Privilege escalation
... - Theory of privilege escalation
... - Lab privilege escalation
- Kernel vulnerabilities
... - Lab malicious kernel modules
... - Lab vulnerable kernel modules
... - Kernel security mechanisms
- SUID & SGID
... - Risks of SUID & SGID
... - Lab SUID & SGID
- Incorrect file permissions & Sudo misconfigurations
... - Lab risks of incorrect file permissions
... - Lab symlink attacks
... - Lab Sudo misconfigurations from GTFOBins to LD_PRELOAD
- Propagation through shared storage
... - Theory propagation through shared storage
... - Lab initial propagation using shared storage
... - Lab privilege escalation through no_root_squash
... - Lab exploitation of trust relationships through compromised authentication key
- Exploiting a vulnerability in a workload manager
... - Exploiting a vulnerability in the workload manager (SLURM)
... - Intended functionality and exploit sequence
... - Lab understanding and exploiting the vulnerability
... - Lab applying and verifying the security patch
... - Assessing the vulnerability
- Maintaining access
... - Overview of persistence methods
... - Lab SSH authorised keys
... - Lab hidden cron jobs
... - Lab shell configuration files
... - Lab web shells
... - Lab SUID binary backdoors
... - Lab shared library
... - Detection and prevention
... - Advanced persistence mechanisms
- Lateral movement
... - Lateral movement process
... - Common lateral movement techniques
... - Recognition and prevention
... - Lab from foothold to final target
- Data exfiltration
... - Overview of exfiltration methods
... - Exfiltration process
... - Lab using the example of data exfiltration with DNS tunnelling
... - Lab detection and prevention
- Centralised authentication / LDAP
... - Overview of LDAP vulnerabilities and attack vectors
... - Lab anonymous bind
... - Lab on unencrypted synchronisation and backdoor admin user
- Optional: Attack stories workshop
... - Attack stories workshop with various threat actors
... - Threat modelling results
- Summary and conclusion

Disclaimer: The actual course content may vary from the above, depending on the trainer, implementation, duration and constellation of participants.

Whether we call it training, course, workshop or seminar, we want to pick up participants at their point and equip them with the necessary practical knowledge so that they can apply the technology directly after the training and deepen it independently.