Penetration Testing for Systems and Network Admins

The objective of this Capture-the-Flag style class is to take students with existing networks or systems administration experience and teach them how to:

1. Perform a comprehensive penetration test against Active Directory environments.

2. Spot a bad penetration test.

We understand that not everyone taking a pen test class will want to be a penetration tester. Hence, we have organized this class to be a well-rounded experience, allowing both aspiring red teamers and blue teamers to get the most out of it. This class will provide students with hands-on experience with all phases of a penetration test, from information gathering to reporting.

An introductory penetration testing class like this will only be beneficial to students who intimately know computer networking and have Windows administration experience. Existing experience with Windows command line, Linux administration, and Active Directory is highly recommended. For example, students should know how a packet traverses from point A to point B on the OSI model, how to manage users in Active Directory, and what HTTP GET and POST requests look like. Students should be comfortable with the Linux command line as our primary attack host will be Linux-based.

Students should bring there own laptop capable of running a Kali Linux VM and connecting to a wireless network. A VirtualBox image of customized Kali Linux will be provided. Instructors will not provide support for VMWare, Parallels, Hyper-V, or other virtualization platforms.

Lab connectivity guide and Kali Linux image will be provided to students a week before the class.

Penetration Testing for Systems and Network Admins

Speaker:

Qasim Ijaz