Master in Cybersecurity & Ethical Hacking

• High school diploma with experience in the IT sector

Preferred requirements:

• Bachelor's degree (Computer Science; Computer Engineering or Electronics; Computer Security; and related fields)

• Knowledge of: Operating systems (Windows, Linux); Programming (Python, C/C++, Java, Bash); Computer security fundamentals (vulnerabilities, encryption, malware)

• Private certificate of attendance issued by our Institute, which enjoys ISO 9001 Quality Certification;
• CompTIA Security+ certification

INTRODUCTION - CYBERSECURITY (Duration: 8 HOURS)

• What is cybersecurity and why is it important
• The life cycle of a cyber attack
• Introduction to Ethical Hacking
• The concept of Penetration Testing
• Cybersecurity laws and regulations (GDPR, Privacy)

Topic 1 - Reconnaissance (Duration: 10 hours)

• What is reconnaissance and its importance
• Types of reconnaissance: active and passive
• Passive reconnaissance tools
• WHOIS, DNS, social media, and other public sources
• Active reconnaissance tools
• Nmap, Netcat, traceroute, and network analysis
• Information gathering techniques
• Identifying the network infrastructure
• Discovering IP addresses and determining vulnerabilities
• Analysis of collected data
• Interpreting information to determine the entry point

Topic 2 - System Scanning (Duration: 7 hours)

• What is scanning and its application in penetration testing
• Scanning ports and services
• Using tools such as Nmap to scan ports
• Service version scanning and detection of vulnerable services
• Vulnerability scanning
• Vulnerability scanning with tools such as OpenVAS and Nessus
• Identification of operating systems (OS Fingerprinting)
• OS identification techniques through Nmap
• Evasion techniques to avoid detection during scanning

Topic 3 - Gaining Access to Systems (Duration: 12 hours)

• What is Gaining Access and how a vulnerability is exploited
• Exploit techniques
• Exploits of known vulnerabilities in systems
• Using Metasploit Framework
• Password attacks
• Brute force, dictionary and hybrid attacks
• Using tools such as Hydra, John the Ripper, or Hashcat
• Execution of malware to compromise a system
• Backdoors and rootkits
• Privilege escalation techniques
• Exploit local vulnerabilities to obtain elevated privileges (root, admin)

Topic 4 - Maintaining Access (Duration: 10 hours)

• What is access maintenance and its importance
• Backdoors and rootkits
• Creating backdoors for persistent access
• Using rootkits to evade detection
• Remote control techniques
• Use of tools such as Netcat, Reverse Shell, or Cobalt Strike
• Creating a secure communication channel
• Communication encryption to avoid detection
• Log cleaning techniques
• How to avoid hacking activities being tracked

Topic 5 - Clearing Tracks (Duration: 10 hours)

Trace deletion techniques

• Log cleaning:
• Evasion of monitoring technologies:
• Tunneling techniques“
• Use of Rootkits
• Methods of erasing data on hard disks
• Alteration of timestamps
• Evasion of firewalls and intrusion detection systems
• Windows: Specific techniques for removing traces on a Windows system (cleaning event logs, removing PowerShell command history, removing traces in system logs)
• Linux/Unix: Commands such as history -c, changes in system logs and temporary files (/tmp, /var/log)
• MacOS: Deleting navigation tracks and system logs in the Apple environment
• Database: Deleting Query Logs and Access Traces

A cybersecurity expert and a ethical hacker are professionals specialised in protecting computer systems and preventing cyber attacks.

Specifically, a cybersecurity expert is a professional figure who is responsible for protecting an organisation's technological infrastructure from external and internal threats, such as viruses, malware, cyber attacks and hacking attempts. His or her main responsibilities include:

• Threat Assessment: Analysing and identifying vulnerabilities in computer systems.
• Development of security policies: Creating strategies and guidelines to protect corporate information and sensitive data.
• Continuous monitoring: Constantly monitor systems for suspicious activity.
• Incident Management: Intervene promptly in the event of attacks or security breaches, implementing solutions to mitigate the damage.
• Training and awareness: Educate employees on how to recognise and avoid threats, such as phishing or other social engineering techniques.
• Compliance and RegulationsEnsure that security policies comply with national and international regulations (such as GDPR)A ethical hacker is a professional who specialises in conducting penetration tests (pen testing) and simulating cyber attacks with the consent of an organisation, to identify vulnerabilities before they can be exploited by malicious attackers. His main activities include:

• Penetration tests: Simulate cyber attacks to identify flaws in systems, applications and corporate networks.
• Vulnerability assessment: In-depth examination of computer systems to uncover security weaknesses.
• Post-attack analysisAfter identifying vulnerabilities, the ethical hacker provides a detailed report with suggestions on how to correct the vulnerabilities.
• Application Security: Testing application code to find errors that could be exploited by hackers.
• Simulation of attacksUse advanced tools and techniques to replicate real attacks in a controlled manner.
• Collaboration with the IT team: Working together with the cybersecurity team to improve defence against concrete threats.

• IT consultancy company
• Corporate IT departments
• Public entities
• Banks and financial institutions
• Telecommunications companies
• Computer security company
• Security software providers
• Freelancers or independent consultants