Ethical Hacking Training and Certification in Kuala Lumpur, Malaysia

This course provides a comprehensive introduction to ethical hacking, covering penetration testing methodologies, cybersecurity tools, attack vectors, and mitigation strategies. Participants will learn how hackers exploit vulnerabilities and how to defend against cyber threats using ethical hacking techniques. Hands-on labs and case studies will enhance practical skills.

Course Agenda

Introduction to Ethical Hacking

• Understanding Cybersecurity and Ethical Hacking

• Ethical hacking vs. malicious hacking

• Legal and ethical considerations in penetration testing

• Overview of the penetration testing methodology

Footprinting and Reconnaissance

• Passive vs. active reconnaissance

• OSINT (Open-Source Intelligence) techniques

• WHOIS, Shodan, Google Dorking, and social engineering

• Scanning for open ports and services using Nmap

Scanning and Enumeration

• Network scanning with Nmap, Netcat, and Masscan

• Identifying live hosts, OS fingerprinting, and service enumeration

• Enumerating SMB, SNMP, FTP, and Web Servers

• Identifying vulnerable applications and services

Gaining Access – Exploitation Techniques

• Brute force and dictionary attacks

• Exploiting vulnerabilities in applications and operating systems

• Introduction to Metasploit Framework

• Exploiting misconfigurations, weak passwords, and default settings

Web Application Hacking

• Understanding OWASP Top 10 vulnerabilities

• Exploiting SQL Injection, XSS, CSRF, and IDOR

• Bypassing authentication mechanisms

• Testing API security flaws

Wireless Network Hacking

• Understanding WPA2/WPA3 security and cracking techniques

• Capturing and decrypting Wi-Fi traffic with Aircrack-ng

• Exploiting rogue access points and Evil Twin attacks

• Defending against wireless hacking threats

Privilege Escalation and Post-Exploitation

• Privilege escalation on Windows and Linux

• Maintaining access with rootkits, Trojans, and persistence techniques

• Extracting sensitive data from compromised systems

• Covering tracks and log manipulation techniques

Social Engineering Attacks

• Understanding phishing, vishing, and baiting attacks

• Creating custom phishing campaigns

• Performing email spoofing and credential harvesting

• Defending against social engineering attacks

Denial of Service (DoS) and Distributed DoS Attacks

• Understanding DoS/DDoS attack techniques

• Using LOIC, HOIC, and botnets for DoS simulation

• Defending against DoS attacks with firewalls and traffic filtering

Penetration Testing Frameworks and Reporting

• Understanding PTES and OWASP Testing Guide

• Conducting penetration testing assessments

• Documenting vulnerabilities and remediation strategies

• Generating professional penetration test reports