OFFENSIVE MOBILE REVERSING AND EXPLOITATION

THE DEVSECOPS MASTERCLASS 

Managing comprehensive security for continuous delivery of applications across organizations continues to remain a serious bottleneck in the DevOps movement. The methodology involved in implementing effective security practices within delivery pipelines can be challenging. 

This training is designed to give a practical approach of implementing Security across Continuous Delivery Pipelines by leveraging the plethora of cloud offerings and is backed by a ton of hands-on labs, original research and real-world implementations of DevSecOps that work.

ATTACKING AND DEFENDING CONTAINERS, KUBERNETES AND SERVERLESS

With Organizations rapidly moving towards micro-service style architecture for their applications, container and serverless technology seem to be taking over at a rapid rate. Leading container technologies like Docker have risen in popularity and have been widely used because they have helped package and deploy consistent-state applications. Serverless and Orchestration technologies like Kubernetes help scale such deployments to a massive scale which can potentially increase the overall attack-surface to a massive extent, if security is not given the attention required

SECURE PROGRAMMING 101 

This is an intermediate hands-on course in which attendees will understand and experience the use of the OWASP Application Security Verification Standard. In this way, they will learn to develop strategies and understand the elements for secure programming, allowing to mitigate risks in personal or work-related projects.

FROM ZERO TO HERO: PENTESTING AND SECURING DOCKER, SWARM & KUBERNETES ENVIRONMENTS

ADVANCED ICS HACKING

    REVERSE ENGINEERING APPLIED TO
MALWARE ANALYSIS

This is an introductory course on reverse engineering and malware analysis. It is designed so that people with little or no experience on these topics can attain the tools to quickly understand how a threat works, by focusing on the more practical aspects of analysis.

  ADVANCED INVESTIGATIONS, PRIVACY & OPEN SOURCE INTELLIGENCE TECHNIQUES 

Este curso no solo abarca lo informático, sino que va más allá analizando lo humano, para generar un conocimiento más amplio al momento de realizar tareas en este ámbito.  La capacitación tiene como fin impartir los conocimientos necesarios en la obtención de información de usuarios y activos de una empresa, utilizando técnicas físicas y lógicas. Para ello se analizarán sitios convencionales y no convencionales, lo cual permitirá realizar una investigación más amplia y exhaustiva. 

  HACKING & HARDENING HUMAN OS

El objetivo de este training es el de capacitar a los asistentes en las  distintas técnicas y herramientas utilizadas dentro de la Ingeniería Social, con el fin de poder incluirlas dentro de sus Pentest como así también, habilitarlos a realizar distintas campañas de concientización que ayuden a  detectar este tipo de engaños y elevar así la seguridad de sus organizaciones
. 

  STEALING THE CROWN - RED TEAMING ACTIVE DIRECTORY ENVIRONMENTS 

In this training we will explain current Techniques, Tactics and Procedures for infiltrating networks, maintaining persistence and scaling until reaching the targets in Active Directory infrastructures.

For those who work on pentesting and want to get closer to network teaming, it will give a better understanding of the tactical techniques and procedures (TTPs) used by real attackers.

For those who work on defense, it will help understand how attacks work to devise and strengthen the defense of their infrastructure.

  INTRODUCCIÓN A LA EXPLOTACIÓN DE APLICACIONES EN ANDROID  

This training will allow students to learn application penetration testing techniques and methods of exploiting vulnerabilities in Android.

The focus is on practicing the techniques explained during the course, so that the student not only incorporates 
the theory, but also the experience in exploiting vulnerabilities. The course dynamic will be the theoretical presentation of each of the modules and a set of applications or situations in which that knowledge must be applied.

  CÓMO GANAR DINERO HACKEANDO GRANDES EMPRESAS CON PROGRAMAS 

DE BUGBOUNTY

  SAP Security in Depth: Attack & Secure SAP Systems - 2020 edition

Burp Suite Workshop