Hacker Mindset Workshop

... > Training Courses > Hacker Mindset Workshop

Hacker Mindset Workshop

If your organization uses applications, platforms or infrastructures, attackers will try to find ways to exploit them. Understanding how attackers think, what they look for, and what systems can be made to do, is an important step towards protecting your assets. In particular developers and IT staff should be aware of how hackers think.

During the Hacker Mindset workshop, a guided, hands-on, technical session will be held where participants will be attacking a vulnerable application. Part frustration, part exhilaration, as these are both key elements in what drives hackers and will help you understand why hackers do what they do. We start with a vulnerable web application, and end with total control over the web server by compounding small design mistakes, vulnerabilities, and misconfigurations.

Why should you attend?

  • Learn to spot small points of interest within applications that support compromising a system
  • Learn how to think like a hacker
  • Understand the difference between a black hat hacker and an ethical hacker

This is a very interactive workshop with lots of exercises, demonstrations and quizzes to support effective learning.

Who should attend?

This training is suitable for:

  • Developers
  • General IT staff
  • Security management staff
  • Non-technical staff with technical affinity

Required Skills & Expertise

This workshop is suitable for any skill level; some basic understanding of how typical websites are built up is useful. The workshop will be adjusted to the audience. Bring your own laptop to the workshop, the only ‘tool’ that we will use is a web browser. No specialized programs are needed.

Program

Time

Subject

Description

12:00

Preparation and registration

Trainers arrive 30 minutes in advance to prepare for the workshop.

12:30

Welcome and introduction

Introduction of the trainers (ethical hackers)

Review of the agenda.

12:45

Why do hackers exist?

Explaining the different types of hackers and why they are active.

13:00

Different attack surfaces attackers use

The various attack scenarios a hacker can employ are discussed here.

13:45

Tea / coffee break

14:00

Continued: Different attack surfaces attackers use

The various attack scenarios a hacker can employ are covered here. Trainers give a brief demo of an OSINT (public information) investigation.

14:15

Example of access to an internal network

Case study of an investigation conducted by Secura.

14:30

How does pentesting work?

Here we explain what is involved in a penetration test, using 2 key cases.


14:45

Defenders to the rescue

What can you do to raise security awareness?

15:00

Common vulnerabilities and how they can be exploited

The trainers show a number of common vulnerabilities found in (Web) applications and discuss multiple attacks and variations.

15:15

Tea / coffee break

15:30

From boot to root!
Supervised hacking and attacking of the training environment

Participants experience firsthand what it is like to hack; both the frustration and the excitement, as these are essential elements that drive hackers. Under guidance, participants hack a (vulnerable) environment developed specifically for the Hacker Mindset workshop.

16:30

It starts with you

Tips and tricks for determining risks.

17:00

Conclusion and wrap up

Interactive question round and wrap up.

Request a Tailored Workshop

If you are interested in hosting this interactive and tailored workshop at your company, please let us know via the contact form, by telephone +31 (0)88 888 31 00or email info@secura.com.

USP

ABOUT SECURA

Secura is a leading cybersecurity expert. Our customers range from government and healthcare to finance and industry worldwide. Secura offers technical services, such as vulnerability assessments, penetration testing and red teaming. We also provide certification for IoT and industrial environments, as well as audits, forensic services and awareness training. Our goal is to raise your cyber resilience.

Secura is a Bureau Veritas company. Bureau Veritas (BV) is a publicly listed company specialized in testing, inspection and certification. BV was founded in 1828, has over 80.000 employees and is active in 140 countries. Secura is the cornerstone of the cybersecurity strategy of Bureau Veritas.