CONFERENCE
MAY 15-16, 2014
FONTAINEBLEAU HOTEL
Miami Beach
Training Overview
For the past three years the training classes offered at INFILTRATE have sold out.
We anticipate the same for INFILTRATE 2014, so reserve your seat early. Please check
our registration page for pricing information.
Which class is right for you?
Prerequisite evaluation tests are available for all training classes. These tests
will help demonstrate your skill level. Please email
infiltrate@immunityinc.com for a
copy of the tests.
Unethical Hacking
Immunity's Unethical Hacking course focuses on teaching fundamentals of Windows x86 exploitation by having students write exploits! This class attempts to teach a strategic approach to attack and penetration that goes beyond "penetration testing" to model how a real attacker approaches targeting your company.
Security professionals familiar with x86 assembler, some reverse engineering, debugging, and Windows memory management will be best suited for this course.
Day 1: Intro
- Introduction to Assembly language
- Understanding stacks and memory layout
- Understanding calling conventions
- Introduction to buffer overflows
- Post-mortem analysis using Immunity Debugger
- Build your own exploits against entry-level targets using VisualSploit (challenge level: easy - medium)
Day 2: Exploit Writing
- Build your own exploits against real targets using VisualSploit (challenge level: easy - medium)
Day 3: Exploit Writing
- Build your own exploits against real targets using VisualSploit (challenge level: medium - high)
Day 4: Exploit Writing (Intro to DEP bypass)
- Build your own exploit that bypasses DEP protection against real targets using VisualSploit (challenge level: high).
Master Class
The Immunity Master Class focuses on modern exploit development and vulnerability discovery techniques.
Intermediate to advanced exploit development skills are recommended for students wishing to make the Master class.
INFILTRATE 2014 Master Class Syllabus is TBD. Please check back later for class details.
Web Hacking Language Review
Immunity's Web Hacking class requires students to have some proficiency with Python, JavaScript and SQL. The optional pre-course Web Hacking Language Introduction class devotes an entire day prior to the main Web Hacking class to using Python, JavaScript and SQL. Students unfamiliar with any of these languages are encouraged to sign up for the Web Hacking Language Introduction class.
Day 1
- Linux CLI
- Introduction to Python
- JavaScript
- MySQL
- HTTP Protocol Refresher
Web Hacking
Immunity's Web Hacking course focuses on understanding common web hacking techniques by having students exploit vulnerable systems. Security professionals with some hands on web hacking experience will get the most out of this course.
Day 1
- Cross-site Scripting
- Open Source Information Gathering
- SQL Injection
Day 2
- RFI/LFI
- CMDi
- Privilege Escalation
- Web Crypto
Day 3
- Web Crypto
- War Games
- Q&A
