Learn about common security terms and updated reports.

Vulnerability - Weakness that may allow attackers to gain access to the system or info.
Attack - A malicious activity that attempts to violate the security properties of the system .
Intrusion - An attack that successfully exploited a vulnerability.

Overview of the most common terms regarding malware

Learn about Security Properties, the CIA triad and the three kinds of attack surfaces. 

Risk assessment, assessing what the risks are.
Security plan, identifies and organizes the security activities for a computing system
and also about threat modeling and legal aspects of IT applications

Apply the previously learned theory to a real live situation

Final review and conclusion of a risk management report

Introduction to cryptography and differences between good and bad security solutions.

Since the onset of civilisation cryptography has played a significant role to keep our data private, find out how and why. 

Learn the cryptographic principles such as:
Kerckhoffs’ principle
Mathematics
Randomness
Bits of key strength

• Authentication (Symmetric-Key Encryption)
• Public key encryption
• Digital signatures

Find out what kind of attacks can be performed on cryptographic algorithms.

We'll use the theory to see how the tools work. 

Safe browsing from the browser to the mac address on a virtual environment 

Please install the following software for this chapter:
VirtualBox, Nmap, Netcat, Metasploit

It's all great and Open Source software.

Use Nmap and Netcat tools to find out more about a remote system 

Using the discovered information we can know exploit the vulnerable services

Locally benchmark security to understand how the machine can be secured.

Best practices to easily secure a machine that should be applied everywhere.

A scouting procedure shares a lot of similarities with the preliminary steps for a pentesting session, despite the obvious differences, especially in terms of the objective.

- We must plan before executing
- Gather as much intelligence as possible from out of-band sources
- Try to be invisible. 

It is recommended for you to use a separate network interface for pentesting tasks.
(That’s why we are using Kali linux on a VM)

The quieter you become the more you can listen.

Run an ARP-scan under the radar

We'll write a simple formulary that retrieves the user text and save it on the database. 
However this data is not sanitized and Cross Site Scripting (XSS) attacks are quite easy to execute. 

Jquery CDN link: http://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js

Internet is a great technology however it became a major requirement rather than an asset as it used to be. Some time has passed were we only used the Internet to check some information or news, today even our coffee grinder is connected to the Internet with IoT  now this whole spread is putting almost every device on the Internet however the major issue is that we are deploying not only online devices but potential zombies that can be used by third parties to perform a Denial of Service attack. 

Learn how this type of attack operates and what DoS, 

DDos and DrDOS stand for. 

CentOS virtualboxes: https://www.osboxes.org/centos/
More DoS iptable rules: https://www.thegeekstuff.com/2011/06/iptables-rules-examples/?utm_source=feedburner

Get to know FreeNAS and how it can make your life easier with backups, virtual machines, media center, etc...

Get your private server running with FreeNAS

Run TimeMachine on your FreeNAS server to backup your MacOS data without the need of expensive hardware.

Grab your CentOS VM image here: https://www.osboxes.org/centos/
Password: osboxes.org