Several hands-on exercises are performed through CYBELS Cyber Range platform, virtualizing information systems and reflecting realistic network architectures.
Each student has a pentester computer and their own IT System at their disposal on CYBELS Cyber Range.
He is able to access numerous equipment (PCs, routers, probes, firewalls, servers, proxies …).
The course also embeds feedback from Thales experience on Cybersecurity tools, devices, projects and solutions.

After the course, the students know :

• The juridical aspects of cyberattacks
• Networks penetration methods
• Network scanning techniques
• Techniques to assess vulnerabilities
• Intrusion and attack methods
• Network exploitation techniques
• Password attack techniques
• Web and WiFi attack techniques
• Common hardening rules to apply

Risks and Threats

• Omani and/or International legislation
• Attack techniques

Vulnerability scanning and analysis

• Ethical hacking toolkit
• Information acquisition/ Reconnaissance (lab)
• Network architecture scanning (Nmap lab)
• OS and Software scanning (lab)
• Vulnerability scanning (Nessus lab)

IT and Network intrusion

• Vulnerability exploitation (Metasploit lab)
• Packet forging/ Fuzzing (Scapy lab)
• WiFi networks intrusion (WEP, WPA, WPA2 labs)
• Password and privilege escalation (brute force, dictionary attacks, Rainbow tables, MITM labs )
• Intrusion in Web applications (XSRF, XSS, SQL injection, command injection labs)

Hardening Best practices

• Audit
• Countermeasures
• Recommendations
• Exchanges and data security
• Architecture and operating system protection