Moscow, October 17-20th, 2005

[ Event Home ] [ Register Your Attendance ] [ Agenda ]

In order to secure a network against intrusion and misuse, an administrator needs to have fundamental knowledge of hacking techniques, the way hackers work, as you cannot defend yourself against something you do not know There are practical exercises for every topic discussed.

Language of the conference: English (simultaneous translation will be provided if needed)

Duration of workshops: 2 x 2 days
Trainer: Stefan Arbeiter
Workshop I:

• Passive gathering of information on the internet
• Active probing for information
• Preparing and executing attacks over the network:
• Buffer overflows
• One shot exploits
• Working with an exploit framework
• Basic resources for exploits
• Gathering information on the LAN:
• Various sniffing methods
• How to sniff signals instead of noise
• Bugging on the LAN: the system is hacked, now what?
• Step-by-step installation of a typical Trojan horse
• Taking a close look: what does it really do?
• Identifying the Trojan
• Practical local password security:
• Attacks on different password schemes
• Highly efficient password cracking
• Real life examples: which guideline stands up against which attack?
• Practical network password security
• Final exercise covering more than one topic

Workshop II:
In part two of the course we will discuss and practise the more sophisticated hacking techniques. The central topics are man-in-the-middle attacks and advanced Trojans/rootkits.

• Preparing for man-in-the-middle-attacks:
• Redirecting traffic
• Sniffing in a switched LAN (and defending against it)
• Conducting man-in-the-middle attacks against SSL (with Linux and Windows tools):
• step-by-step analyses
• Advanced port scanning techniques: scanning without being detected
• Traffic-based attacks
• Security scanners:
• How they work? (example: Nikto)
• Where they work? (Nessus)
• Where they fail?
• Tunneling
• Advanced Trojans:
• How to hide from detection on the network?
• How to hide from local detection?

Target group:

• System administrators
• Security specialists
• Firewall administrators

You're invited to use your own notebook in the course room network.

Required knowledge: Basic knowledge of operating systems and networking, linux/unix and TCP/IP.