The Hacker Mindset Workshop
"Know your enemy, know his sword." - Miyamoto Musashi, Book of five rings
If your organization uses applications, platforms or infrastructures, attackers will try to find ways to exploit them. Understanding how attackers think, what they look for, and what systems can be made to do, is an important step towards protecting your assets. In particular developers and IT staff should be aware of how hackers think. Secura offers insight into this, through the workshop "Hacker Mindset".
During the Hacker Mindset workshop, a guided, hands-on, technical session will be held where participants will be attacking a vulnerable application. Part frustration, part exhilaration, as these are both key elements in what drives hackers and will help you understand why hackers do what they do. We start with a vulnerable web application, and end with total control over the web server by compounding small design mistakes, vulnerabilities, and misconfigurations.
Interesting topic and good workshop material. It peaked my interest to develop some skills in this field.
Join this interactive workshop to better understand the approach of an attacker and gain knowledge about technical vulnerabilities.
The hands-on hack is very challenging; you push yourself to the limits, to show yourself what you can do.
The upcoming hacker mindset workshop is planned for Friday 9 October 2019 and open to join.
This training is suitable for:
- General IT staff
- Security management staff
Required skills and expertise
This course is designed to benefit general staff that works with web applications and infrastructure within their respected company. Basic understanding of common computing & networking technologies is required. Furthermore, familiarity with Linux is recommended. Almost the entire workshop can be performed using a webbrowser on a Windows system, any additional tools can be obtained during the workshop as needed.
The course is designed to be given in a three hour session. The course is designed to be a purely practical and the theoretical parts will be given during the session itself, by the trainers and a handout which can be followed to progress through the investigation.
The program will include:
- The Attacker versus Defender perspective
- What is interesting for an attacker
- Common vulnerabilities
- Exploiting injection vulnerabilities
- A demo on why minor issues matter
- Combining minor issues
- Resources to learn from
- Hands-on session
- Learn basic tools that are used by pen testers for investigations
- Learn how to think like a hacker
- Understand the difference between a black hat hacker and an ethical hacker
- Get tips on where to learn more skills and practice hacking