HSVM-YN: Hacking and Security Vulnerability Management

In today's digital landscape, organizations face a growing number of cyber threats that exploit vulnerabilities in systems and applications. This 3-day training program equips IT personnel with foundational knowledge and practical skills in ethical hacking techniques and security vulnerability management. Participants will gain a hands-on understanding of how attackers identify and exploit system weaknesses—and more importantly—how to proactively defend and mitigate these threats.

• Understand key concepts of information security and vulnerability management.
• Identify security risks in networks, web applications, and mobile systems.
• Perform basic vulnerabilities assessments using industry-standard tools.
• Apply best practices to secure IT infrastructure against common attacks.

Day 1: Foundations of Security & Web Application Vulnerabilities

Module 1: Web Application Security Basic

• Http / Https Fundamentals.
  • Why there is differences.
  • What is more secure
  • What will happen if my applications using HTTP instead HTTPS
  • Bonus: - What is SHTTP.
• OWASP Top 10 vulnerabilities overview examples (XSS, SQLi, CSRF)

Module 2: Hands-on Web Attacks & Defense

• Demo: SQL Injection & Demo: Cross-Site Scripting (XSS)
  • What does these attacks can do.
  • These attacks are common example you can do this as bug bounty whichever application offers bug bounty exercises.
• Mitigation Techniques

Module 3: Network Security Fundamentals

• Common Network threats (MITM, Sniffing)
  • Examples of these attacks
  • Real-world example – Equifax data breach
  • 2013 Facebook MITM attack
• Basic firewalls & IDS also IPS concepts
  • Explain the firewall types of firewalls
  • What are the differences

Module 4: Vulnerability Scanning Basic

• Introduction to Nmap (port scanning)
  • Getting started with Nmap
• Using Nessus for basic scans
  • Exposing on scanning and reporting

 

Day 2: Network Security & Penetration Testing Basics

Module 5: Password Security & Cracking

• Common password vulnerabilities
  • Learn apply best password
• Demo: Hash cracking with John Ripper

Module 6: Hands-on Network Penetration Testing

• Basic Metasploit Usage
  • Intro of this framework
  • Functions of Metasploit
• Exploiting weak services

Module 7: Wireless Security Risks

• Wi-Fi hacking demo (WPA2 cracking)
  • How it works
  • How to stay secure
• Best practices for Wi-Fi secure

Module 8: Defensive Security & Patching

• Patch management best practice
• Securing Windows / Linux system

 

Day 3: Mobile Security & Real-World Remediation

Module 9: Mobile security overview

• Android/iOS security models
• Common app vulnerabilities

Module 10: Hands-on Mobile app testing

• Using DROZER for Android assessment
• iOS app security checks

Module 11: Security Best Practices

• Secure Coding basics
• Incident response steps

Module 12 (Final Exercise)

• Trial test on MobSF (Mobile Security Framework)