1.1.1 - Principles of Social Engineering
1.1.2 - Phishing and Spam
Case Study - Salesforce Phishing
1.1.3 - Dumpster Diving
1.1.4 - Shoulder Surfing
1.1.5 - Tailgating and Impersonation
1.1.6 - Prepending
1.1.7 - Identity Fraud
1.1.8 - Credential Harvesting
1.1.9 - Reconnaissance
1.1.10 - Hoaxes
1.1.11 - Watering Hole Attacks
1.1.12 - Client Hijacking Attacks
1.1.13 - Pretexting
1.1.14 - Influence Campaigns
Case Study - IT Army of Ukraine
Case Study - Influence Campaigns
1.2.1 - Malware
1.2.2 - Ransomware and Cryptomalware
Case Study - FBI Response to REvil Ransomware
1.2.3 - Trojans, Backdoors, and RATs
Case Study - TeaBot Malware Goes Global
1.2.4 - Viruses and Worms
1.2.5 - PUPs and Fileless Viruses
1.2.6 - Bots and Botnets
1.2.7 - Logic Bombs
1.2.8 - Adware and Spyware
1.2.9 - Keyloggers
1.2.10 - Rootkits
1.2.11 - Password Attacks
1.2.12 - Physical Attacks
1.2.13 - Adversarial AI
1.2.14 - Supply-Chain Attacks
1.2.15 - Cloud-Based vs. On-Premises Attacks
1.2.16 - Cryptographic Attacks
1.3.1 - Privilege Escalation
1.3.2 - Cross-site Scripting
1.3.3 - Data Injection
Lab - SQL Injection Juice Shop
1.3.4 - Dereferencing and Directory Traversal
1.3.5 - Buffer Overflows and Race Conditions
Case Study - iPhone Integer Overflow
1.3.6 - Error and Improper Input Handling
Case Study - Chrome Crash Catastrophe
1.3.7 - Replay Attacks and Pass the Hash
1.3.8 - Request Forgery Attacks
1.3.9 - API and Resource Exhaustion Attacks
1.3.10 - Memory Leaks and SSL Stripping
1.3.11 - Driver Manipulation Attacks
1.4.1 - Rogue Access Points and Evil Twins
1.4.2 - Bluetooth Attacks
1.4.3 - Wireless Disassociation Attacks
Case Study - Wireless Disassociation
1.4.4 - Wireless Jamming
1.4.5 - RFID and NFC Attacks
1.4.6 - Initialization Vector Attacks
1.4.7 - On-Path Attack
1.4.8 - Layer 2 Attacks
1.4.9 - DNS Attacks
1.4.10 - DoS and DDoS Attacks
1.4.11 - Malicious Code or Script Executions
1.5.1 - Threat Actors
1.5.2 - Threat Vectors
1.5.3 - Threat Intelligence Sources
1.6.1 - Vulnerability Types
1.6.2 - Vulnerability Impacts
1.7.1 - Threat Hunting
1.7.2 - Vulnerability Scans
1.7.3 - SIEM and SOAR
1.8.1 - Pentesting
1.8.2 - Pentest Exercise Types