Certified PowerShell Hacker Training (CPSH)
Commitment | 4 Days, 7-8 hours a day. |
Language | English |
User Ratings | Average User Rating 4.8 See what learners said |
Price | REQUEST |
Delivery Options | Instructor-Led Onsite, Online, and Classroom Live |
COURSE OVERVIEW
This Certified PowerShell Hacker Training (CPSH) Workshop is an intense 4-day training course covering the keys to hacking with PowerShell. We know that most companies have an Active Directory infrastructure that manages authentication and authorization to most devices and objects within the organization.
Many use PowerShell to speed up and simplify management, which only makes sense. Did you know that a large percentage of hacks over the last year included PowerShell-based attacks? Well, they did, which is why we spend 4 days learning how to hack like the pros using nothing but what is already available to us in Windows or now in open-source code on Mac and Linux!
The Certified Powershell Hacker (CPSH) Training Workshop course is based on real-world implementations of a windows infrastructure along with real-world penetration testing techniques. You will leave with a really strong skill set to help test your windows environment like never before. An attendee will also walk away with a strong skill set on how to help prevent these attacks from happening in the first place!
EXAM INFORMATION:
The Certified Powershell Hacker (CPSH) exam is taken online through our Assessment and Certification System (“MACS”), which is accessible on your mile2 account. The exam will take 2 hours and consist of 100 multiple-choice questions. The cost is $500 USD and must be purchased from ENO Institute
WHAT'S INCLUDED?
- 4 Days of Certified PowerShell Hacker Training (CPSH) from an Authorized Instructor
- Official Student Courseware (Electronic Version)
- Student Lab guide
- Exam Prep Guide
- Certificate of Completion
- 100% Satisfaction Guarantee
- CPEs: 32
RESOURCES
- Certified PowerShell Hacker (CPSH) – https://www.wiley.com/
- Certified PowerShell Hacker (CPSH) – https://www.packtpub.com/
- Certified PowerShell Hacker (CPSH) – https://store.logicaloperations.com/
- Certified PowerShell Hacker (CPSH) – https://us.artechhouse.com/
- Certified PowerShell Hacker Training (CPSH) – https://www.amazon.com/
RELATED COURSES
- Certified Disaster Recovery Engineer Training (CDRE)
- Certified Incident Handling Engineer Training (CIHE)
- Certified Cloud Security Officer Training (CCSO)
- Certified Professional Ethical Hacker Training (CPEH)
- Certified Penetration Testing Engineer Training (CPTE)
- Certified Digital Forensics Examiner Training (CDFE)
- Certified Information Systems Security Officer Training (CISSO)
- Certified Network Forensics Examiner Training (CNFE)
- Certified Secure Web Application Engineer Training (CSWAE)
ADDITIONAL INFORMATION
COURSE OBJECTIVES
Upon completion of the Certified Powershell Hacker (CPSH) Training course, students will be able to:
- The candidate will be able to competently take the CPEH exam.
Here are just a few things you will take away from this course
- Detailed Lab Manual
- VMs for performing labs on your own
- New ideas on testing your own AD infrastructure
- Attacks you can use immediately
- How to secure against PowerShell attacks
CUSTOMIZE IT
- We can adapt this Certified Powershell Hacker Training (CPSH) course to your group’s background and work requirements at little to no added cost.
- If you are familiar with some aspects of this CPSH Certification Training course, we can omit or shorten their discussion.
- We can adjust the emphasis placed on the various topics or build the CPSH Certification Training course around the mix of technologies of interest to you (including technologies other than those included in this outline).
- If your background is nontechnical, we can exclude the more technical topics, include the topics that may be of special interest to you (e.g., as a manager or policy-maker), and present the CPSH Training course in a manner understandable to lay audiences.
AUDIENCE/TARGET GROUP
The target audience for this Certified PowerShell Hacker Training (CPSH) Workshop course:
- Penetration Testers
- Microsoft Administrators
- Security Administrators
- Active Directory Administrators
- Anyone looking to learn more about security
CLASS PREREQUISITES
The knowledge and skills that a learner must have before attending this Certified Powershell Hacker Training (CPSH) are:
- General Understanding of Pen Testing
- General Understanding of Active Directory
- General Understanding of scripting and programming
COURSE SYLLABUS
Module 1 Introduction to PowerShell
- Different Tool Options
- Installing everything needed
- Language Basics
- Using the Windows API and WM
- Interacting with the Registry
- Managing Objects and COM Objects
Module 2 –Introduction to Active Directory and Kerberos
- Overview of Kerberos
- The three-headed monster
- Key Distribution Center
- Kerberos in Detail
- Why we care about Kerberos as a Hacker
- Overview of Active Directory
- Understanding AD concepts
- AD Objects and Attributes
Module 3 –Pen Testing Methodology Revisited
- Introduction to the methodology
- The Plan!!
- Vulnerability Identification
- Client-side attacks with and without PowerShell
- Certified Powershell Hacker (CPSH) Training
Module 4 –Information Gathering and Enumeration
- What can a domain user see?
- Domain Enumeration
- Trust and Privileges Mapping
- After the client exploit
Module 5 –Privilege Escalation
- Local Privilege Escalation
- Credential Replay Attacks
- Domain Privilege Escalation
- Dumping System and Domain Secrets
- PowerShell with Human Interface Devices
Module 6 –Lateral Movements and Abusing Trust
- Kerberos attacks (Golden, Silver Tickets and more)
- Delegation Issues
- Attacks across Domain Trusts
- Abusing Forest Trusts
- Abusing SQL Server Trusts
- Pivoting to other machines
Module 7–Persistence and Bypassing Defenses
- Abusing Active Directory ACLs
- Maintaining Persistence
- Bypassing Defenses
- Attacking Azure Active Directory
Module 8–Defending Against PowerShell Attacks
- Defending an Active Directory Infrastructure
- Detecting Attacks
- Logging
- Transcripts
- Using Certificates
- Using Bastion Hosts
- Using AppLocker