Post Graduate Program in Cyber Security

In this module, learners will understand the fundamentals of cyber security programs, its importance, impact of cyber crime and more

• Introduction of PGP Cyber Security Program
• What is Cybersecurity?
• The Importance of Cybersecurity
• Why is Cybercrime Increasing?
• What is the Impact of Cybercrime?
• How to Protect your Organization Against Cybercrime?
• Examples of Damages to Companies Affected by Cyber Attacks and Data Breaches
• Is Your Business at Risk of a Data Breach?
• Quiz Module 1

In this module, learners will understand scheduling tasks, database connectivity, mounting a folder, linux networking and more

• Using GREP,SED,and AWK commands
• Mounting a file to the virtual box
• Mounting a folder
• SORT command and pipes to combine multiple commands
• Scheduling Tasks
• Advanced Shell Scripting
• Database Connectivity
• Linux Networking
• Information over open source projects
• Quiz Module 2

In this module, learn about Linux and Windows, basic commands, boot process, hardening, scripting and more.

• Difference Between Linux and Windows
• Root
• Basic commands
• Editors
• Schedulers
• User Administration (Software Installation In Linux)
• Linux Boot process
• LVM (Logical Volume Manager)
• TCP/IP Network Management.
• Driver/Module Installation and Removal.
• Log Monitoring and rotating (OpenSSH - The GNU/Linux Secure Shell)
• sudo and su - Giving users SuperUser Privileges (Linux Administration)
• Linux Hardening and Linux Scripting
• Conditional, Looping Statements and Functions

In this module, gain knowledge on Footprinting through Search Engines, advanced Google hacking techniques, Web Services, etc. Also gather information from different sources, monitor the target using alerts and more.

• Footprinting through Search Engines
• Foot print using advanced Google hacking techniques
• Information gathering using Google Advanced Search and Image Search
• Google Hacking Database
• VoIP and VPN Footprinting through Google Hacking Database
• Footprinting through Web Services
• Monitor in target using alerts
• Finding the geographical location of the target
• People Search on social networking sites and people search services
• Gathering information from LinkedIn
• Gather information from financial services
• Footprinting through job sites
• Information gathering using groups, forums, and blogs
• Determining the OS
• VoIP and VPN Footprinting through SHODAN
• Footprinting through Social Networking Sites
• Collecting information through social engineering on social networking sites
• Website Footprinting
• Mirroring the entire website
• Extracting website information
• Monitoring web pages for updates and changes
• Email Footprinting
• Tracking email communications
• Collecting information from the email header
• Email tracking tools
• Competitive Intelligence
• Whois Footprinting
• Whois Lookup
• Whois Lookup result analysis
• Whois Lookup tools
• Finding IP geolocation information
• DNS Footprinting
• Extracting DNS information
• DNS interrogation tools
• Network Footprinting
• Locate the network range
• Traceroute
• Traceroute analysis and tools
• Footprinting Through Social Engineering
• Shoulder surfing
• Dumpster diving
• Footprinting Tools
• Maltego
• Recon-ng
• FOCA
• Recon-Dog
• OSR Framework
• Additional Footprinting tools
• Footprinting Counter measures
• Footprinting PenTesting

In this module, the learner will understand the concepts of enumeration, its technique, tools, measures and more.

• Enumeration Concepts
• What is Enumeration?
• Techniques for Enumeration
• Services and port state Enumeration
• NetBIOS Enumeration
• NetBIOS Enumeration Tools
• Enumerating user accounts
• Enumerating shared resources using Net View
• SNMP (Simple Network Management Protocol) Enumeration
• Working of SNMP
• Management Information Base (MIB)
• SNMP Enumeration tools
• LDAP Enumeration
• LDAP Enumeration tools
• NTP Enumeration
• NTP Enumeration tools
• DNS Enumeration
• SMTP Enumeration
• SMTP Enumeration tools
• DNS Enumeration Using zone transfer
• Other Enumeration Techniques
• IPsec Enumeration
• VoIP Enumeration
• RPC Enumeration
• Unix/Linux User Enumeration
• Enumeration Counter measures
• Enumeration Pen Testing

In this module, learn about system hacking, its concept, goals, cracking password, recovery passwords, salting, escalating techniques, defending against privilege escalation and more

• System Hacking Concepts
• CEH Hacking Methodology (CHM)
• System hacking goals
• Password cracking
• Types of password attacks
• Password recovery tools
• Password salting
• Password cracking tools
• Escalating Privileges
• Privilege Escalation techniques
• How to defend against privilege escalation?
• Executing Applications
• Tools for executing applications
• Keylogger
• Spyware
• Hiding Files
• Rootkits
• NTFS Data Stream
• What is steganography?
• Covering Tracks
• Disabling auditing: Audit pol
• Clearing logs
• Clear online tracks
• Covering BASH shell tracks
• Covering tracks on the network and OS
• Covering tracks tools

In this module, learners will understand the sniffing concepts, types of sniffing, protocol analyzers, sniffing techniques, spoofing, tools, counter measures, sniffing penetration testing and more.

• Sniffing Concepts
• Network sniffing
• Types of sniffing
• Hardware protocol analyzers
• SPAN port
• Wiretapping
• Lawful interception
• Sniffing Technique
• MAC attacks
• DHCP attacks
• ARP poisoning
• Spoofing attacks
• DNS poisoning
• Sniffing Tools
• Wireshark
• Wireshark filters
• Packet sniffing tools for mobile
• Countermeasures
• How to Defend Against Sniffing
• Sniffing Detection Techniques
• How to detect sniffing
• Promiscuous detection tools
• Sniffing penetration testing

In this module, learners will understand the DoS/DDoS Concepts, attack techniques, categories, tools, attack tools for mobile, protection, counter measures, strategies and more

• DoS/DDoS Concepts
• What is aDenial-of-Service attack?
• What is a distributed Denial-of-Service attack?
• DoS/DDoS Attack Techniques
• Basic categories of DoS/DDoS attack vectors
• UDP, ICMP, and SYN flood attack
• Ping of death and smurf attack
• Fragmentation attack
• HTTP GET/POST and slow loris attacks
• Multi-vector attack
• Peer-to-peer attacks
• Permanent Denial-of-Service attack
• Distributed reflection Denial-of-Service (DRDoS)
• Botnets
• Organized cyber crime: Organizational chart
• Botnet Ecosystem
• Botnet Trojans
• DDoS Case Study
• DDoS attack
• Hackers Advertise Links To Download Botnet
• Use of mobile devices as botnets for launching DDoS attacks
• DDoS Case Study: Dyn DDoS Attack
• DoS/DDoS Attack Tools
• DoS and DDoS attack tool for mobile
• Countermeasures
• Detection techniques
• DoS/DDoS counter measure strategies
• DDoS Attack counter measures
• Techniques to defend against botnets
• DoS/DDoS protection at ISP Level
• DoS/DDoS Protection Tools
• Advanced DDoS protection appliances
• DoS/DDoS Penetration Testing

In this module, learners learn about IDS, Firewall and Honeypot Concepts, detecting, evading, defending against firewall evasion, Firewall/IDS Penetration Testing and more

• IDS, Firewall and Honeypot Concepts
• Intrusion Detection System (IDS)
• Firewall
• Honeypot
• IDS, Firewall and Honeypot Solutions
• Intrusion detection tool
• Firewalls and honeypot tools
• Evading IDS
• IDS/firewall evasion tools and techniques
• Packet Fragment Generator Tools
• Detecting Honeypots
• Detecting and defeating honeypots
• Honeypot detection tool: Send-Safe Honeypot Hunter
• IDS/Firewall Evasion Counter measures
• Firewall/IDS Penetration Testing

In this module, learners will learn hacking Web Techniques, concepts, vulnerability, threats, web hacking methodology, Defend against web application attacks, analysing, Web application attack counter measures and more.

• WebApp Concepts
• Introduction to web applications
• Web application architecture
• Web2.0 applications
• Vulnerability stack
• WebApp Threats
• OWASP Top 10 Application Security Risks
• Web app hacking methodology
• Foot print web Infrastructure
• Analyze web applications
• Bypass client-side controls
• Attack authentication mechanism
• Attack authorization schemes
• Attack access controls
• Web application attack counter measures
• Perform injection/input validation attacks
• Attack application logic flaws
• Attack database connectivity
• Attack web app client
• Web App Hacking Tools
• Counter measures
• Web application fuzz testing
• Wireless Hacking Methodology
• Encoding schemes
• Defend against injection attacks
• Web application attack counter measures
• Defend against web application attacks
• Web App Security Testing Tools
• Web application security testing tools
• Web application firewall
• Web App Pen Testing
• Web application pen testing framework

In this module, learners will learn to hack wireless networks, authenticate, types of antennas and wireless encryption, GPS Mapping, threats,Bluetooth hacking tools, Wireless Security Tools, cracking tools, Wireless Penetration Testing and more.

• Wireless Concepts
• Wireless terminologies, networks, and standards
• Service Set Identifier (SSID)
• Wi-Fi Authentication modes
• Wi-Fi Authentication process using a centralized authentication server
• Types of wireless antennas
• Wireless Encryption
• Types of wireless encryption
• WEP vs.WPA vs.WPA2
• WEP issues
• Weak Initialization Vectors (IV)
• Wireless Threats
• Rogue access point attack
• Client mis-association
• Misconfigured access point attack
• Unauthorized association
• Ad-Hoc Connection Attack
• Honeypot access point attack
• APMAC spoofing
• Denial-of-Service attack
• Key Reinstallation Attack (KRACK)
• Jamming signal attack
• Wireless Hacking Methodology
• Wi-Fi Discovery
• GPS mapping
• Wireless traffic analysis
• Launch wireless attacks
• Crack Wi-Fi Encryption
• Wireless Hacking Tools
• WEP/WPA cracking tool for mobile
• Wi-Fi Sniffer
• Wifi Traffic Analyzer tools
• Other wireless hacking tools
• Bluetooth Hacking
• Bluetooth stack
• Bluetooth threats
• How to blueJack a victim
• Bluetooth hacking tools
• Counter measures
• Wireless security layers
• How to defend against WPA/WPA2 cracking, KRACK attacks, wireless attacks, and bluetooth hacking
• How to detect and block rogue AP
• Wireless Security Tools
• Wireless intrusion prevention systems
• Wireless IPS deployment
• Wi-Fi security auditing tools
• Wi-Fi predictive planning tools
• Wi-Fi vulnerability scanning tools
• Bluetooth security tools
• Wi-Fi security tools for mobile
• Wireless Penetration Testing
• Wireless Penetration Testing Framework

In this module, learners will understand about Iot, its concept, functioning, protocols, hacking, threat, vulnerability, scanning tools and more.

• IoT Concepts
• What is IoT?
• How does IoT work?
• IoT architecture
• IoT application and devices
• IoT technologies and protocols
• IoT communication models
• Challenges of IoT
• Threat vs opportunity
• IoT Attacks
• IoT security problems
• OWASP top 10 IoT vulnerabilities and obstacles
• IoT attack surface areas
• IoT threats
• Hacking IoT devices
• Case Study: Dyn Attack
• IoT Hacking Methodology
• What is IoT device hacking?
• IoT hacking tools
• Information gathering tools
• Sniffing Tools
• Vulnerability scanning tools
• Countermeasures for Defending Against IoT Hacking
• How to defend against IoT hacking
• General guidelines for IoT device manufacturing companies
• OWASP Top 10 IoT vulnerabilities solutions
• IoT framework security considerations
• IoT security tools
• IoT Penetration Testing

In this module, learn cryptography concepts, types, GAK, DES, AES, RSA, Certification authorities, Email Encryption, Digital signature, Secure Sockets Layer (SSL), Transport Layer Security (TLS), Cryptography toolkit, Code Breaking Methodologies and more.

• Cryptography Concepts
• Cryptography
• Types of cryptography
• Government Access to Keys (GAK)
• Encryption Algorithms
• Ciphers
• Data Encryption Standard (DES)
• Advanced Encryption Standard (AES)
• RC4, RC5, and RC6 algorithms
• Twofish
• The DSA and related signature schemes
• Rivest Shamir Adleman (RSA)
• Diffie-Hellman
• Message digest (One-WayHash) functions
• MD5 hash calculators
• Cryptography tools
• Cryptography tools for mobile
• Public Key Infrastructure (PKI)
• Certification authorities
• Signed certificate (CA) vs. self-signed certificate
• Email Encryption
• Digital signature
• Secure Sockets Layer (SSL)
• Transport Layer Security (TLS)
• Cryptography toolkit
• Pretty Good Privacy (PGP)
• Disk Encryption
• Disk encryption tools
• Cryptanalysis
• Cryptanalysis methods
• Code Breaking Methodologies
• Cryptography attacks
• Online MD5 decryption tools
• Counter measures: How to Defend Against Cryptographic Attacks

In this module, learners will understand ethical hacking, its concept, Motives, goals, and objectives of information security attacks, Types of attacks on a system, SIEM, Data Leakage,backup, and recovery, Vulnerability Assessment, Cyber law in different countries and more.

• Information Security Threats and Attack Vectors
• Motives, goals, and objectives of information security attacks
• Information security threat categories
• Types of attacks on a system
• Information Warfare
• Hacking Concepts
• What is hacking?
• Who is a hacker?
• Hacker classes
• Hacking phases
• Ethical Hacking Concepts
• What is Ethical Hacking?
• Why is Ethical Hacking necessary?
• Scope and limitations of Ethical Hacking
• Skills of an Ethical Hacker
• Information Security Controls
• Information Assurance (IA)
• Information Security Management System
• Enterprise Information Security Architecture (EISA)
• Network security zoning
• Defense-in-Depth
• Information security policies
• Physical Security
• What is risk?
• Threat modeling
• Incident management
• Security Information and Event Management (SIEM)
• User Behaviour Analytics (UBA)
• Network security controls
• Identity and Access Management (IAM)
• Data Leakage, backup, and recovery
• The role of AI/ML in Cyber Security
• Penetration Testing Concepts
• Why penetration testing?
• Security audit
• Vulnerability Assessment
• Blue Teaming/Red Teaming
• Types and phases of penetration testing
• Security Testing Methodology
• Information Security Laws and Standards
• Payment Card Industry Data Security Standard (PCI-DSS)
• ISO/IEC27001:2013
• Health Insurance Portability and Accountability Act(HIPAA)
• Sarbanes Oxley Act (SOX)
• The Digital Millennium Copyright Act(DMCA)
• Federal Information Security Management Act(FISMA)
• Cyber law in different countries

In this module, learners will gain knowledge on network scanning, scanning tools, techniques, packet fragmentation, source routing, banner grabbing, being able to identify target system OS and more

• Scanning tools: Nmap, Hping2/Hping3, and Hping commands
• Introduction to Network Scanning
• Scanning Techniques
• ICMP scanning
• Ping sweep
• ICMP echo scanning
• TCP connect/full-open scan
• Stealth Scan/ half-open scan
• Inverse TCP flag scanning
• Xmas scan
• ACK flag probe scanning
• IDLE/IPID header Ssan
• UDP scanning
• SSDP and list scanning
• Port scanning counter measures
• Scanning Beyond IDS and Firewall
• IDS/Firewall Evasion Techniques
• Packet fragmentation
• Source routing
• IP address decoy
• IP address spoofing
• Proxy servers
• Anonymizers
• Banner Grabbing
• How to identify target system OS
• Banner grabbing counter measures
• Draw Network Diagrams
• Drawing network diagrams
• Network discovery and mapping tools
• Network discovery tools for mobile
• Scanning Pen Testing

In this module, learners will learn to access vulnerability, Types of vulnerability assessment tools, Choosing a vulnerability assessment tool, Resources for Vulnerability Research, Vulnerability Assessment Reports and more.

• Vulnerability Assessment Concepts
• What is vulnerability assessment?
• Vulnerability classification and research
• Vulnerability-Management Life Cycle
• Vulnerability Assessment Solutions
• Vulnerability scanning solutions
• Types of vulnerability assessment tools
• Choosing a vulnerability assessment tool
• Vulnerability Scoring Systems
• Common Vulnerability Scoring System (CVSS)
• Common Vulnerabilities and Exposures (CVE)
• National Vulnerability Database (NVD)
• Resources for Vulnerability Research
• Vulnerability Assessment Reports
• Analysing vulnerability scanning report

In this module, learners will know about malware threat, its concept, components, Trojan concepts, evading antivirus techniques, about viruses, worms, Anti-virus sensor systems, Malware analysis procedure, Counter measures and more.

• Malware Concepts
• Introduction to malware
• Components of malware
• Trojan Concepts
• What is a trojan and its types?
• Trojan horse construction kit
• Wrappers
• Crypters
• Evading Anti-virus techniques
• Virus and Worm Concepts
• Introduction to viruses
• Stages of virus life
• Different types of viruses
• Virus hoaxes
• Fake antiviruses
• Ransomware
• Creating virus
• Computer worms
• Worm makers
• Malware Analysis
• Introduction to malware analysis
• What is a Sheep Dip Computer?
• Anti-virus sensor systems
• Malware analysis procedure
• Counter measures
• Trojan counter measures
• Backdoor counter measures
• Virus And worms counter measures
• Anti-Malware Software
• Anti-trojan software
• Antivirus software
• Malware Penetration Testing

In this module, learners will understand Social Engineering Concepts, phases of attack, types, insider threats/ attacks, identity theft, counter measures, detect phishing mails, anti phishing toolbars and more

• Social Engineering Concepts
• What is Social Engineering?
• Phases of Social Engineering attack
• Social Engineering Techniques
• Types of Social Engineering
• Human-based Social Engineering
• Computer-based Social Engineering
• Mobile-based Social Engineering
• Insider threat/insider attack
• Types of insider threats
• Social Engineering through impersonation on social networking sites
• Social networking threats to corporate networks
• Identity Theft
• Social Engineering countermeasures
• Insider threats countermeasures
• Identity theft countermeasures
• Detect phishing emails
• Anti-phishing toolbar
• Common Social Engineering targets and defense strategies
• Social Engineering Pen Testing
• Social Engineering pen testing tools

In this module, learners will understand the concepts of session hijacking, types, Application Level Session Hijacking, Compromising session IDs, RST Hijacking, Blind Hijacking, UDP Hijacking, CRIME attack, Session Hijacking Tools for mobile, Session Hijacking Detection methods, Protection against session Hijacking and more.

• Session Hijacking Concepts
• What is session Hijacking?
• Session Hijacking Process
• Types of Session Hijacking
• Packet analysis of a local session hijack
• Session Hijacking in OSI Model
• Spoofing vs. Hijacking
• Application Level Session Hijacking
• Compromising session IDs using sniffing and by predicting session token
• Man-in-the-Middle attack
• Man-in-the-Browser attack
• Client-side attacks
• Cross-site script attack
• Compromising session IDs
• Session fixation
• Session Hijacking using proxy servers
• CRIME attack
• Forbidden attack
• Network Level Session Hijacking
• TCP/IP Hijacking
• IP spoofing: source routed packets
• RST Hijacking
• Blind Hijacking
• UDP Hijacking
• MiTM attack using forged ICMP and ARP spoofing
• Session Hijacking Tools
• Session Hijacking Tools for mobile
• Counter measures
• Session Hijacking Detection methods
• Protection against session Hijacking
• Session Hijacking Detection and prevention tools
• IPSec
• Penetration Testing

In this module, learners will learn to hack Web Servers, Web server security issues, Website defacement, Web Server misconfiguration, Web cache poisoning attack, Web server password cracking, Detecting web server hacking attempts, Patch Management, Web server security tools and more.

• Web Server Concepts
• Web server operations
• Open source web server architecture
• IIS web server architecture
• Web server security issue
• Web Server Attacks
• DoS/DDoS attacks
• DNS server Hijacking
• DNS amplification attack
• Directory traversal attacks
• Man-in-the-Middle/sniffing attack
• Phishing attacks
• Website defacement
• Web Server misconfiguration
• HTTP response splitting attack
• Web cache poisoning attack
• SSH brute force attack
• Web server password cracking
• Web Server Attack Methodology
• Information gathering
• Web server Footprinting/banner grabbing
• Website mirroring
• Vulnerability scanning
• Session Hijacking
• Web server passwords hacking
• Web Server Attack Tools
• Metasploit
• Counter measures
• Web servers in separate secure server security segment
• Detecting web server hacking attempts
• HTTP response splitting
• Web cache poisoning
• DNS Hijacking
• Patch Management
• Patches And Hotfixes
• Installation Of Patch
• Patch management tools
• Web application security scanners
• Web server security scanners
• Web server security tools
• Web Server Pen Testing
• Web server pentesting tools

In this module, learners will understand concepts of SQL Injection, HTTP POST Request, Code Analysis, The mole and SQL injection, Evasion Techniques, Types of signature evasion techniques, URL encoding, Defend against SQL injection attacks, SQL injection detection tools and more.

• SQL Injection Concepts
• What is SQL injection?
• SQL injection and server-side technologies
• HTTP POST Request
• Normal SQL Query
• SQL Injection Query
• Code Analysis
• Types of SQL Injection
• SQL Injection Methodology
• SQL Injection Tools
• SQL power injector and SQL map
• The mole and SQL injection
• SQL injection tools for mobile
• Evasion Techniques
• Evading IDS
• Types of signature evasion techniques
• In-line comment
• Character encoding
• String concatenation
• Obfuscated codes
• Manipulating white spaces
• Hex encoding
• Sophisticated matches
• URL encoding
• Null Byte
• Case variation
• Declare variable
• IP fragmentation
• Counter measures
• Defend against SQL injection attacks
• SQL injection detection tools

In this module, learners will learn to hack mobile platforms, vulnerabilities in mobile business environments, Anatomy of a mobile attack, Security issues arising from App Stores, Hacking Android OS, Mobile Device Management (MDM), Mobile Spyware and more.

• Mobile Platform Attack Vectors
• Vulnerabilities in mobile business environment
• OWASP top 10 mobile risks
• Anatomy of a mobile attack
• Mobile attack vectors
• Mobile platform vulnerabilities
• Security issues arising from App Stores
• Apps and boxing issues
• Mobile spam
• SMS Phishing Attack (SMiShing)
• Hacking Android OS
• Android OS and rooting
• Blocking Wi-Fi access using Net Cut
• Hacking with z ANTI
• Hacking network using Network Spoofer
• Launching DdoS attack using Low Orbit Ion Cannon (LOIC)
• Performing session Hijacking using DroidSheep
• Hacking with Orbot Proxy
• Android-based sniffer
• Android trojans
• Securing android devices
• Android security tools
• Android device tracking tools
• Hacking iOS
• Apple iOS
• Jailbreaking iOS
• iOS trojans
• Guidelines for securing iOS devices
• iOS device security and tracking tools
• Mobile Spyware
• mSpy
• Mobile Device Management (MDM)
• MDM solutions
• Bring Your Own Device (BYOD)
• Mobile Security Guidelines and Tools
• General guidelines for mobile platform security
• Mobile device security guidelines for Administrator
• SMS phishing counter measures
• Mobile protection tools
• Mobile anti-spyware
• Mobile Pen Testing
• Android Phone Pen Testing
• iPhone Pen Testing
• Mobile Pentesting Toolkit: Hackode

In this module, learners will understand the concepts of cloud computing, Separation of responsibilities in cloud, Cloud deployment models, Cloud Security, Cloud security control layers, Cloud computing security considerations, Cloud Security Tools, Cloud Penetration Testing and more.

• Cloud Computing Concepts
• Introduction to cloud computing
• Separation of responsibilities in cloud
• Cloud deployment models
• NIST cloud deployment reference architecture
• Cloud computing benefits
• Virtualization
• Cloud Computing Threats
• Cloud Computing Attacks
• Service Hijacking and Social Engineering attacks
• Service Hijacking and network sniffing
• Session Hijacking and XSS attack
• Session Hijacking and session riding
• Domain Name System (DNS) attacks
• Side channel attacks cross-guest VM breach
• SQL Injection attacks
• Cryptanalysis attacks
• Wrapping attack
• DoS and DDoS attacks
• Man-in-the-Cloud attack
• Cloud Security
• Cloud security control layers
• Cloud computing security considerations
• Placement Of Security Controls in the cloud
• Best practices for securing cloud
• NIST recommendations for cloud security
• Organization/Provider cloud security compliance checklist
• Cloud Security Tools
• Cloud Penetration Testing
• Key considerations for pen testing in the cloud
• Recommendations for Cloud Testing

• Business Communication
• Preparation for the Interview
• Presentation Skills

• Resume Writing