Advanced Security

Description

Objectives: Discover advanced notions of hacking, enumeration and elevation of privileges. Content: • Command injection • SQL injection • SSTI (Server Side Template Injection) operation • SUID vulnerability exploitation • Exploiting vulnerabilities Capabilities • Exploitation of CVEs (Common Vulnerabilities Exposures) • Exploiting vulnerabilities with SSH Tunneling • Exploiting vulnerabilities using reverse port forwarding Teaching methods and/or Attack on vulnerable virtual machines made available resources to students by the school, each focusing on different types of vulnerability. Duration: Course : 1 TP/TD : 4 Project : 70