Assessing and Exploiting Web Applications with Samurai-WTF
Justin Searle
|
Overview:
Come take the official Samurai-WTF training course given by the two founders and lead developers of the project! You will learn the latest Samurai-WTF open source tools and as well as the latest techniques to perform web application penetration tests. After a quick overview of pen testing methodology, the instructors will lead you through the penetration and exploitation of various web applications, including client side attacks using flaws within the application. Different sets of open source tools will be used on each web application, allowing you to learn first hand the pros and cons of each tool. After you have gained experience with the Samurai-WTF tools, you will be challenged with a capture the flag event. This final challenge will give you time to practice your new skills at your own pace and experiment with your favorite new tools. This experience will help you gain the confidence and knowledge necessary to perform web application assessments and expose you to the wealth of freely available, open source tools.
Teaching Methods:
This course will be very lab intensive with limited lecture and demonstration of the features and use of each tool.
Who Should Attend:
Individuals with a basic understanding of web application vulnerabilities and attacks. This course will focus on use of the tools, not the theories behind the attacks.
Student Requirements:
- Laptop with VMware Player
- 4 GB of hard drive space for vir3
- 2 GB of RAM
What you get:
- Digital copy of the slides
- Two virtual machines (each less then 2GB in size)
Trainers:
Justin Searle is a Managing Partner of UtiliSec and specializes in Smart Grid security architecture design and penetration testing. Justin led the Smart Grid Security Architecture group in the creation of NIST Interagency Report 7628 and currently plays key roles in the Advanced Security Acceleration Project for the Smart Grid (ASAP-SG), National Electric Sector Cybersecurity Organization Resources (NESCOR), and Smart Grid Interoperability Panel (SGIP). Justin has taught courses in hacking techniques, forensics, networking, and intrusion detection for multiple universities, corporations, and security conferences, and is currently an instructor for the SANS Institute. In addition to electric power industry conferences, Justin frequently presents at top security conferences such as Black Hat, DEFCON, OWASP, and AusCERT. Justin co-leads prominent open source projects including the Samurai Web Testing Framework, Middler, Yokoso!, and Laudanum. Justin has an MBA in International Technology and is a CISSP and SANS GIAC certified Incident Handler (GCIH), Intrusion Analyst (GCIA), and Web Application Penetration Tester (GWAPT).
|
Early: Ends August 15 |
Regular: Ends October 17 |
Late: Ends December 12 |
|
$2000 |
$2200 |
$2400 |