Cyber Security Training

Hacking Fundamentals

Our Hacking Fundamentals training is designed for anyone who works in an environment that requires an initial understanding of how cyberattacks work, in order to better secure infrastructure and/or applications.

Challenges

Cybercriminals are continuously changing the techniques and attack vectors they use to infiltrate organisations. Learning how they hack will help organisations implement best practice security solutions. Knowing how hackers exploit vulnerabilities will help businesses to resolve issues before they become dangerous.

Service Capabilities

An introductory course to learn the tools, tactics and techniques of hacking.
This course presents the background information, technical skills and basic concepts required to those desiring a foundation in information security.
Teaches the differences between backdoors and trojans,
along with various countermeasures.
Introduces advanced hacking concepts – hacking mobile devices, writing malicious code, corporate espionage, exploit writing and reverse engineering.

Provides better knowledge of IDS, honeypots, firewalls and wireless hacking.
Covers the latest developments in mobile and web technologies, including Android OS 4.1, iOS 6, Blackberry 7 OS, Windows Phone 8 and HTML 5.
Provides expertise on innovative concepts, such as advanced network analysis, securing IIS & Apache Web Servers and Windows system administration, using PowerShell, Hacking SQL & Oracle databases.

Target

Why Exponential-e

We partner with fully-qualified instructors, to teach ethical hacking courses.
We are able to tailor the course to fit an organisation's specific requirements and progression.
We can offer support throughout training, as well as advice on what to do next.

Application Hacking

Get in touch

Applications are vital in today’s business landscape. This training provides insight on the latest application hacking techniques and how to defend against them.

Challenges

Cyber security defence requires a realistic and thorough understanding of the current security challenges facing web applications. When applications are not properly tested and secured, cybercriminals are able to access them, damaging business continuity and stealing privileged information and data. Unfortunately, many organisations are naïve in thinking that a web application security scanner alone will reliably discover any flaws in their applications.

Service Capabilities

Our Application Hacking course teaches a general approach to the methodologies of hacking web applications.
This course will teach the basic concepts of how vulnerabilities are introduced into the application development process, as well as the most prevalent security issues found within applications.
Using practical exercises and hands-on techniques to deliver the latest methods of application hacking and demonstrate modern offensive testing methods.

An input section overview will demonstrate the importance of data validation for web applications.
Our Application Hacking training follows both the OWASP (Open Web Application Security Project) Top 10 and the OWASP Application Security Verification Standard.
Application hacking training courses are aimed at software developers, penetration testers, system administrators and network architects.

Target

Why Exponential-e

We ensure participants leave the class with a deeper understanding of key web application flaws, how to discover and exploit them and how to present any findings with impact.
We offer support and advise on any questions or queries following the training.

Whitehat Infrastructure Training

Get in touch

Whitehat Infrastructure Training provides participants with an understanding of all the necessary components involved in infrastructure hacking. This training teaches multiple hacking techniques used to compromise the security of various operating systems and network devices.

Challenges

The methods and techniques cyber criminals use to infiltrate infrastructure change daily. Learning how to hack helps customers implement the strongest security practices. This course will enable organisations to be proactive in anticipating security vulnerabilities before they occur, which is as important as being able to find and fix the existing ones that a web application security scanner alone will reliably discover any flaws in their applications.

Service Capabilities

This training familiarises the attendees with various tools and techniques needed to breach the security of IT infrastructure.
Real-life case studies are used to demonstrate the true impact of vulnerabilities within infrastructure.
Whitehat Infrastructure Training teaches ethical hacking in a virtual VPN environment, meaning participants can get hands-on experience and practice the techniques they have learnt.
This course shows how corporate networks can be hacked and the correct methodologies for repeat hacking success.

It covers advanced penetration techniques to avoid exploitation, as well as a wide variety of offensive hacking techniques used on common operating systems.
This course teaches ‘whitehat’ hackers to evaluate the security of IT infrastructure, in order to identify potentially exploitable weaknesses’.
Whitehat Infrastructure training will educate security professionals on identifying and overcoming vulnerabilities, to then be able to recommend preventative measures.
Aimed at beginner penetration testers and individuals interested in learning the basic concepts of infrastructure compromise and how best to defend it.

Target

Why Exponential-e

We partner with fully-qualified instructors to fully prepare participants for ethical hacking.
We are able to collaborate with organisations to tailor the course specifically for their business requirements.
Our consultants are able to offer further advice following participation in the course.

Mobile Device Infiltration Training

Get in touch

Mobile Device Infiltration Training introduces the basic principles of mobile device security, mobile network architecture, mobile app development and mobile code analysis.

Challenges

The hacking of mobiles is an emerging threat that targets the end users of businesses. Cybercriminals are now attacking mobile devices, as they are able to take advantage of the various limitations of a mobile platform. Preparing for mobile hacking attempts requires more than secure infrastructure or a mobile security policy. Through this course, our customers will be trained in mobile device infiltration hacking, allowing for the best-practice implementation of a comprehensive mobile security plan.

Service Capabilities

This training can be tailored to an organisation's BYOD policy, existing security solutions and perceived threats.
The methodology taught covers basic and advanced concepts of mobile hacking, mobile vulnerabilities, exploits and security.
Real-life examples and case studies are used to illustrate the importance of securing mobile devices.

Our training focuses on new emerging threats, zero-day vulnerabilities, mobile forensics and new hacking techniques.
Mobile Device Infiltration Training will effectively help to mitigate mobile security risks, in order to protect business reputation and personal information in a mobile environment.
Through education, this training will help to reduce technology-related costs by lowering the frequency and impact of incidents.

Target

Why Exponential-e

We partner with qualified instructors to ensure the training delivered is of the highest quality.
We are able to tailor the course to fit any businesses requirements.
We offer support following the completion of the training and can provide further recommendations on the next steps to take, to improve the mobile devices’ security stance of an organisation.

Coding and Development Training

Get in touch

We can help developers code more securely in order to deliver secure code on time, first time. Our courses are designed to target real business requirements, focusing on issues we have encountered during testing engagements with our customers.

Challenges

Vulnerabilities frequently occur through miswritten code. Often in order to meet tight deadlines, shortcuts are taken when writing code, increasing the risk of consequential mistakes and exposing the business to significant damage and loss of reputation.

Service Capabilities

Our courses are made up of a series of practical sessions, offering hands-on experience from start to finish.
We provide live hacking demonstrations throughout the training to show the varying effects of good and bad code on the security of an application.
We teach the key concepts of coding within the huge range of languages and frameworks. These include; secure misconfiguration, local web proxies, data validation (SQL injections), cross-site scripting, authentication and access controls, sensitive data exposure, logging & error handling and session management.

Our Coding and Development Training can help organisations reduce the vulnerabilities that may be present in their existing code for public-facing websites or applications.
Learning to code offers a new perspective to problem-solving and teaches developers to be persistent.
Learning the fundamentals of coding can also provide great career prospects, especially with the increased demand for coding-related careers in the market.

Target

Why Exponential-e

We can tailor the training to an organisation's specific requirements.
We offer follow up advice upon completion of the training, as well as recommendations for further training and additional security measures.
We can offer a Code Review service to test any coding developed after completing this training.

Wireless Security Training

Get in touch

This course is designed around wireless hacking and how to prevent wireless attacks. When the techniques of wireless hacking are understood, it is better to ensure best-practice security measures are implemented to reduce the risk of malicious compromise.

Challenges

As businesses expect code to be produced more frequently, there has been an increased rate of vulnerabilities in operating systems. SecOps has shown an immense value to businesses, as it is integral to the security of an organisation, whilst improving productivity, reducing risk and optimising cost.

Service Capabilities

Software applications are complicated and can easily become vulnerable to a range of malicious infiltration techniques.
This training is designed for IT teams that should consider the security implications of the projects they are working on.
Building applications under short deadlines often results in a variety of vulnerabilities.
This training teaches practical steps on the integration of security programs into DevOps practices, whilst also highlighting the use of data and security science as fundamental concepts in protecting businesses.

Real-life case studies are integrated into the teaching material.
Our training demonstrates how to incorporate best-practice security into the development and deployment of workflows.
Learn the basic principles of SecOps, including
the security risks & challenges.
This training can improve the speed and agility of an organisation’s security team, improving their ability to develop more secure applications and software.
Learn to identify the vulnerabilities in code early on, reduces the security risks after development.

Target

Why Exponential-e

Our Security Operations Training merges security, development and operations to achieve a common goal.
We can help introduce best security practices into organisations to safeguard any important software.
This training can be tailored for an organisations’ developers, so they are able to easily understand and implement effective security practices.

Security Operations Training

Get in touch

Learn the foundation of SecOps principles, practices and tools, focusing on their capacity to improve the reliability and integrity of security systems.

Challenges

Unsecure and badly configured wireless networks are a common target for cyber criminals. Training to understand their infiltration techniques is key to prevent being attacked and reduce the business exposure.

Service Capabilities

This training provides a basic understanding of wireless hacking technology and how to utilise this information to provide better security solutions for businesses.
Topics covered include advanced wireless security, Wi-Fi Pineapples, Bluetooth scanning and more.
Upon completion, participants will have a firm grasp on the tools and techniques related to hacking and penetration testing of wireless networks.

Real-life case studies will be integrated with the training material, to demonstrate examples of severe damage to businesses and the importance of this training.
Our wireless hacking training will provide invaluable knowledge on how to plan for and address these types of cyberattacks.

Target

Why Exponential-e

We partner with fully qualified instructors to deliver our Security Operations training.
Our courses can be tailored for any organisation's requirements.
We are able to provide extensive support during and on completion of the training, as well as recommendations on the next steps to securing an organisation.