Visão Geral

Este curso apresenta os fundamentos de Ethical Hacking, cobrindo metodologia de avaliação de segurança, reconhecimento, identificação de vulnerabilidades, exploração controlada, análise de riscos e elaboração de relatórios.

Objetivo

Após realizar este curso, você será capaz de:

• Compreender metodologias de Ethical Hacking
• Realizar reconhecimento de ambientes
• Identificar vulnerabilidades
• Avaliar riscos de segurança
• Documentar resultados de testes

Publico Alvo

• Profissionais de Cybersecurity
• Analistas de segurança
• Iniciantes em Ethical Hacking
• Profissionais de infraestrutura

Pre-Requisitos

• Conhecimentos básicos de redes
• Familiaridade com Linux e Windows
• Noções de TCP/IP
• Conhecimentos básicos de sistemas operacionais
• Familiaridade com linha de comando é recomendada

Conteúdo Programatico

Module 1: Ethical Hacking Fundamentals

1. Ethical Hacking concepts
2. Cybersecurity assessment
3. Security testing methodologies
4. Rules of engagement
5. Scope definition
6. Authorization and legal considerations
7. Attack surface
8. Threat modeling
9. Risk assessment
10. Ethical hacking lifecycle

Module 2: Reconnaissance and Information Gathering

1. Passive reconnaissance
2. Active reconnaissance
3. Network discovery
4. Host identification
5. Service enumeration
6. DNS reconnaissance
7. Technology identification
8. Information correlation
9. Attack surface mapping
10. Reconnaissance documentation

Module 3: Vulnerability Assessment

1. Vulnerability concepts
2. Vulnerability identification
3. Automated scanning
4. Manual validation
5. Configuration weaknesses
6. Authentication weaknesses
7. Network vulnerabilities
8. Application vulnerabilities
9. False positive validation
10. Vulnerability prioritization

Module 4: Security Testing Techniques

1. Authentication testing
2. Authorization testing
3. Session security
4. Input validation
5. Configuration testing
6. Network security testing
7. Endpoint security testing
8. Identity security testing
9. Exploitation concepts
10. Controlled security validation

Module 5: Exploitation Fundamentals

1. Exploitation lifecycle
2. Vulnerability exploitation
3. Initial access concepts
4. Command execution
5. Privilege escalation concepts
6. Credential Access concepts
7. Lateral Movement concepts
8. Persistence concepts
9. Exploitation limitations
10. Safe exploitation practices

Module 6: Post-Exploitation Fundamentals

1. Post-exploitation concepts
2. System enumeration
3. Identity enumeration
4. Privilege assessment
5. Credential exposure assessment
6. Network discovery
7. Security control assessment
8. Persistence identification
9. Evidence collection
10. Post-exploitation reporting

Module 7: Defensive Perspective

1. Attack detection
2. Security monitoring
3. Windows Event Logs
4. Network monitoring
5. Endpoint detection
6. Vulnerability remediation
7. Security hardening
8. Incident response
9. Detection engineering
10. Defensive validation

Module 8: Practical Ethical Hacking Assessment

1. Assessment planning
2. Reconnaissance exercise
3. Enumeration exercise
4. Vulnerability assessment
5. Controlled exploitation
6. Security validation
7. Risk classification
8. Evidence documentation
9. Technical reporting
10. Ethical hacking assessment case study