0xploit.com

Cloud Security Firewall Evasion for InfoSec

HackingAssets

Member
Lucifer
Joined
Aug 12, 2022
Messages
163
Hellcoins
♆1,601
Username Style (Gradient Colours)
The course will cover techniques used by penetration testers and malicious actors as well as countermeasures for network defenders. In this course students will learn:

  • Firewall and IDS terminology and basic theory.
  • Firewall/IDS evasion and rule mapping techniques using various tools for ingress and firewall/IDS egress evasion.
Module 1 Firewall, IDS, and Networking Theory


Terminology:

  • Firewall
  • IDS
  • Networking Technology
Module 1 Exercises:

  • System setup

Module 2 Ingress Firewall Testing


Testing and Mapping Ingress Firewall Rules:

  • Nmap for firewall testing and evasion
  • Firewalk for firewall rule mapping
  • Network protocol usage for testing and evasion (TCP/IP, UDP, ICMP)
Module 2 exercises:

  • Nmap firewall testing
  • Firewalk rule testing

Module 3 Egress Firewall Testing


Evasion of egress firewall rules:

  • Egress firewall discussion
  • Protocol Tunneling
  • VPN Setup
Module 3 exercises:

  • Meterpreter
  • NetCat
  • Proxychains
  • Skullsec DNScat - bonus

Module 4 Packet Manipulation


  • Packet fragmentation for evasion
  • Packet manipulation for evasion
  • Packet delay for evasion
Module 4 exercises:

  • Nchop session splicing for ingress and egress
  • Python Client/Server for egress

Watch online on mega

 
Last edited by a moderator:
Top