ECSA/LPT is a security class like no other! Providing real world hands on experience, it is the only in-depth Advanced Hacking and Penetration Testing class available that covers testing in all modern infrastructures, operating systems and application environments.

EC-Council’s Certified Security Analyst/LPT program is a highly interactive 5-day security class designed to teach Security Professionals the advanced uses of the LPT methodologies, tools and techniques required to perform comprehensive information security tests. Students will learn how to design, secure and test networks to protect your organization from the threats hackers and crackers pose. By teaching the tools and ground breaking techniques for security and penetration testing, this class will help you perform the intensive assessments required to effectively identify and mitigate risks to the security of your infrastructure. As students learn to identify security problems, they also learn how to avoid and eliminate them, with the class providing complete coverage of analysis and network security-testing topics.

Course Outline v4

Module 1: The Need for Security Analysis

Module 2: Advanced Googling

• Site Operator

• intitle:index.of

• error | warning

• login | logon

• username | userid | employee.ID | “your username is”

• password | passcode | “your password is”

• admin | administrator

• admin login

• –ext:html –ext:htm –ext:shtml –ext:asp –ext:php

• inurl:temp | inurl:tmp | inurl:backup | inurl:bak

• intranet | help.desk

• Locating Public Exploit Sites

• Locating Exploits Via Common Code Strings

• Searching for Exploit Code with Nonstandard Extensions

• Locating Source Code with Common Strings

• Locating Vulnerable Targets

• Locating Targets Via Demonstration Pages

• “Powered by” Tags Are Common Query Fodder for Finding Web Applications

• Locating Targets Via Source Code

• Vulnerable Web Application Examples

• Locating Targets Via CGI Scanning

• A Single CGI Scan-Style Query

• Directory Listings

• Finding IIS 5.0 Servers

• Web Server Software Error Messages

• IIS HTTP/1.1 Error Page Titles

• “Object Not Found” Error Message Used to Find IIS 5.0

• Apache Web Server

• Apache 2.0 Error Pages

• Application Software Error Messages

• ASP Dumps Provide Dangerous Details

• Many Errors Reveal Pathnames and Filenames

• CGI Environment Listings Reveal Lots of Information

• Default Pages

• A Typical Apache Default Web Page

• Locating Default Installations of IIS 4.0 on Windows NT 4.0/OP

• Default Pages Query for Web Server

• Outlook Web Access Default Portal

• Searching for Passwords

• Windows Registry Entries Can Reveal Passwords

• Usernames, Cleartext Passwords, and Hostnames!

For complete course outline please click here