Job-Guaranteed Program In Cyber Security

Basic of computer network

Explain network & types of network

Understand & compare Broad network categories

Understand and Explain OSI Model

Describe 7 layers of OSI

Explain PDU in OSI model

Explain types of networking media

Understand and explain coaxial cables, Twisted pair cables, Fiber optic cables

Understand straight cable & crossover cable

Structured Cabling

Understand networking devices and its use

Understand and Explain Topology and it need

Explain different types of physical topologies used in networking

Understand about ip address

Explain about IP Version 4 classes and Subnet Mask

Configuring and verifying IP Address

Understand and explain about TCP/IP

Compare OSI Model and TCP/IP Model

Explain Layer in TCP/IP Model

Understanding Ports and Protocol

Details of Subnetting

Router Configuration & Firewall Rules

What is VPN and How it's Work

Understanding Web Application Structure

Detailed in Html Request And Response

Linux Basic Commands

Introduction To Cloud Computing

Cloud Computing Models

Benefits Of Cloud Computing

Private Cloud

Hybrid Cloud

Software As A Service (SAAS)

Platform As A Service(PAAS)

Infrastructure As A Service (IAAS)

Introduction to Ethical Hacking

Lab Setup

Steps of Ethical Hacking

Google Hacking Using Dorks Demo

What is Nmap

Port and Service Scanning with Nmap

Nmap Various Command

Network Scanning using Nmap

Network Vulnerability Scanning using Nessus

Making Report After Successful Scan

What is Metasploit

Exploit using Metasploit

Windows 7 Hacking using Zero-Day

Windows 10 Hacking using msfvenom

Android Hacking using msfvenom

Wireshark

How to intercept Login details from network using Wireshark

Denial of Service Attack

Wifi Password Hacking using aircrack-ng

How to secure Wifi Network

Web Application Testing Methodology

OWASP Top 10 -2022

What is Sql Injection vulnerability

Types of Sql Injection

Sql-Injection Exploit using Sqlmap

Business impact of Sql Injection vulnerability

How to Resolve the issue from application

What is XSS vulnerability

Types of Cross-site Scripting vulnerability

Demonstration of XSS

How to Resolve the issue from application

Directory Listing Vulnerability

Demonstration of Directory Listing vulnerability

What is Data Tampering vulnerability

Demonstration of Data Tampering

File Upload Vulnerbility

What is web shell hacking

Demonstration of this vulnerability

Cross Site Request Forgery

Demonstration of this vulnerability

Insecure Direct Object Reference

Report Making in Web Application VAPT

Social Engineering Attack

SE toolkit Tutorial

RAT Tutorial

Mobile Device Architecture and common mobile threats

Android Architecture

Reverse Engineering and Static Application Analysis

Best practices and security guidelines for the mobile applications

Intro to PowerShell Scripting

Powershell commends for Pentester

PowerShell with Metasploit Meterpreter

Web Application Basics (Structure, Components)

OWASP Top 10 Vulnerability & Testing Methodology

Burp Suite Advance Usages by installing Plugins

Information Gathering/Recon

Information Gathering/ReconTools Covered- Gobuster, FFUF, WFUZZ, Feroxbuster, gau, Linkfinder, waybackurls, Assetfinder , Subfinder, Amass, httpx,httprobe

Manual Recon : Shodan, whois Lookup, Censys, Nuclei, Arjun Framework

SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

SQL injection vulnerability allowing login bypas

SQL injection UNION attack, determining the number of columns returned by the query

SQL injection UNION attack, finding a column containing text

SQL injection UNION attack, retrieving data from other tables

SQL injection attack, querying the database type and version on Oracle

SQL injection attack, listing the database contents on Oracle

Blind SQL injection with time delays and information retrieval

Blind SQL injection with out-of-band interaction

Reflected XSS into HTML context with nothing encoded

Stored XSS into HTML context with nothing encoded

Reflected XSS into attribute with angle brackets HTML-encoded

Reflected XSS into a JavaScript string with angle brackets HTML encoded

Reflected XSS with some SVG markup allowed

Exploiting XSS to perform CSRF

Reflected DOM XSS

Stored DOM XSS

Basic SSRF against the local server

Basic SSRF against another back-end system

Basic SSRF against the local server

Basic SSRF against another back-end system

SSRF with blacklist-based input filter

SSRF with filter bypass via open redirection vulnerability

Blind SSRF with out-of-band detection

SSRF with whitelist-based input filter

Blind SSRF with Shellshock exploitation

OS command injection, simple case.

Blind OS command injection with time delays

Blind OS command injection with output redirection

Blind OS command injection with out-of-band interaction

Blind OS command injection with out-of-band data exfiltration

File path traversal, traversal sequences blocked with absolute path bypass

File path traversal, traversal sequences stripped non-recursively

File path traversal, traversal sequences stripped with superfluous URL-decode

File path traversal, validation of start of path

File path traversal, validation of file extension with null byte bypass

Username enumeration via different responses

2FA simple bypass

Password reset broken logic

2FA broken logic/p>

Username enumeration via subtly different responses

Username enumeration via response timing

Broken brute-force protection, IP block

Remote code execution via web shell upload.

Web shell upload via Content-Type restriction bypass

Web shell upload via path traversal

Web shell upload via race condition

CORS vulnerability with basic origin reflection.

CORS vulnerability with trusted null origin

CSRF where token validation depends on request method.

CSRF where token validation depends on token being present

CSRF where token is not tied to user session

CSRF where token is duplicated in cookie

No-Rate Limiting

IDOR

Introduction

Mobile Application Testing set up

OWASP Top 10 of Mobile Application Penetration Testing

Apk File Structure

OSINT Framework

Port Exploitation

Privilege Escalation (Windows & Linux)

Persistence

Process Migrations

Latest CVEs Exploitation

Router Exploitation

Firewall Exploitation

AV Evasion

CTF : Kioptrix level 1-3, Magic

Cloud Penetration Testing Lab set up

OWASP Top 10 Vulnerability for Cloud Security

EC2 Configurations

IAM structure

S3 Bucket Structure

Acces Key Token

Secret Key Tokens

API Pentesting Lab Set up (vAPI & CrAPI)

OWASP Top 10 vulnerability for API

Basic Structure & Functionality of API

REST & SOAP based API

S3 Bucket Structure

Acces Key Token

Secret Key Tokens

Information Disclosure

Broken Object Level Authorization

Broken User Authentication

Excessive Data Exposure

Lack of Resources and Rate Limiting

Broken Function Level Authorization

Mass Assignment

Security Misconfigurations

Injections

Improper Assets Management

Business Logic Vulnerabilities

Recon

Endpoint Analysis

FUZZING

Automating Mass Assignment Attacks with Arjun and Burp Suite Intruder

Attacking GraphQL

Introduction of SOC

What is Enterprise network

what is Defense in Depth

What is Log Parsing

Deep Dive into SOC Environment

What are SIEM deployment options

SIEM Architecture

Splunk Introduction

How to upload data to splunk

what is Splunk Field

Understanding web logs

How to Create Splunk Reports and Dashboard

How to install Splunk Forwarder in windows