Network Security Training

Educational Content

Basic TCP / IP information for Network Security

• OSI Layers and Functions
• TCP / IP Protocol Family
• TCP / IP and OSI Comparison
• TCP / IP Network in Data Formats
• Basic Networking Equipment and Duties
• Binary and decimal IP Addresses Online
• Nibble Concept
• Mac Address and tasks in an Ethernet network
• IP Addresses Basic Information
• The concept of port and TCP / UDP Ports
• Commonly Used Ports and Functions
• The Life Cycle of a Package

Hping, Netcat Use Examples - Practical 
TCP / IP Protocols and Security Weaknesses 
ARP Protocol and Security Weaknesses

• Address Resolution Protocol
• New Generation -NDP ARP Protocol (IPv6)
• ARP Protocol Title Information
• ARP Operation Logic
• ARP Packet Types
• Arp Request, Reply, RARP Request, RARP Reply
• Gratious ARP packet and Uses
• Proxy ARP Concept
• The importance of safety in terms of the harp
• L2 Attacks Based on ARP Protocol
• ARP and Structure Study in Wireless Networks
• ARP Attacks
• ARP Cahce Poisoning
• ARP Spoofing
• ARP Poison Routing
• Logic Attacks
• Tools Used to Attack (Windows / Linux)
• Arpspoof, Nemesis, Ettercap, Cain&Abel
• Arp Spoofer performed after attacks
• Using ARP DoS Implementation of Local Area Network
• Nemesis Using ARP DoS Attack
• Flooding and Purpose of the Mac Attack
• Methods of ARP Attack Protection
• Static Solutions, Dynamic Solutions
• Entering static ARP entry to a computer
• Overcoming the static ARP entries Protection
• Startup Switch in the Port Security Feature
• Switchlerde DHCP Snooping Devreye Alma
• Using 802.1x
• IDS / IPS systems and ARP Attacks
• ARPWatch, Harpoon Yazılımıları
• Snort and ARP Attacks

Internet Protocol and Security Weaknesses

• Internet Protocol v4
• TCP / IP protocol in the IP's Role and Importance of Family
• IP Header Info
• Differences with IPv6
• Addressing Methods in IP Layer
• IP Adresi
• Today NAT Concept and Implementation
• Finding the IP Address of Owner
• Country, City and IP Address by Company Ownership
• Country IP Blocks What Does It Work?
• Finding Ways Internet
• Traceroute and L4 Tracerpout Studies
• Traceroute discovery of Labour firewall / IPS from the Block
• IP Spoofing
• What it is, used for?
• Using IP Spoofing Hping Samples
• Private IP Spoofing Protocol Methods
• TCP Tabanlı Protokollerde(SMTP, HTTP, FTP) IP Spoofing
• UDP-based protocols and IP Spoofing
• The concept of TCP ISN
• Used in Environment NAT IP Spoofing
• URPF use of IP Spoofing Prevention
• Kevin Mitnick IP Spoofing Örneği
• ISN Forecast
• Purpose Proxy Using IP Storage
• IP Fragmentation (Fagmentatio's)
• What it is, used for?
• Offset Value
• Fragmented Packet Use the Port Scan
• Realized Using IP Fragmentation Attacks
• Using IP fragmentation L7 firewall bypass
• Using IP Fragmentation bypass IDS
• Enhanced Solutions and IPS Threat Against IP Fragmentation

ICMP and Security Weaknesses

• ICMP Purpose of Use
• ICMP/ TCP-UDP Farkları
• ICMP Type and Code Fields
• ICMP Uses
• Network Exploration Work-Traceroute
• Path MTU Discovery
• Create ICMP packets with Hping
• Malicious ICMP Uses
• ICMP Smurf DoS Saldırısı
• Today Smurf Attacks Why not work?
• MITM attack with the ICMP Redirect
• Circumvention ICMP Tunneling Security Systems
• ICMP via SSH / Telnet-like Systems Management

TCP / UDP Protocols and Security Weaknesses

• TCP / IP protocol family and UDP
• UDP Overview
• UDP Review Title
• UDP, TCP Differences Between
• UDP Port Tarama
• Optionally create a UDP packet
• UDP Protokolünde IP Spoofing
• UDP Flood DoS/DDoS Saldırısı
• UDP Flood Attack and Firewalls
• TCP Overview
• TCP Header Information Review
• Using TCP Applications
• TCP’de IP Spoofing
• ISN to use IP Spoofing Protection
• ISN Prediction Studies
• Flag Mechanism in TCP (TCP Flags)
• SYN, ACK, FIN, PUSH, RST, URG Paketleri
• Other frequently unused TCP flags
• Contact the Beginning and Ending Flags Stages
• TCP State Diagram
• TCP in Session Concept
• Firewall and TCP
• Over TCP Port Scan
• IDS / IPS capture of the TCP scan
• Traceroute Discovery Using TCP Prookol Study
• TCP Flood DDoS Saldırıları
• SYN Flood
• ACK Flood
• For Flood attack and Working Logic
• The TCP Flood Attack Prevention Methods
• SYN cookie, Syn Proxy, Syn cache yöntemleri

DHCP and Security Weaknesses

• DHCP and Uses
• DHCP Title Information Analysis
• DHCP How does it work?
• Port used for DHCP
• DHCP Discover, Offer, Request ve ACK Adımları
• DHCP Relay Agent Logic Concepts and Studies
• Attacks performed via DHCP
• Resource Depletion attack - DHCP Resource Starvation
• Using fake DHCP Server Rogue DHCP Server Deployment
• DHCP Spoofing
• DHCP Attack Tools
• DHCP Attack Prevention Methods

DNS and Security Weaknesses

• What is DNS?
• DNS History
• DNS Protocol Title Information Analysis
• DNS and UDP Relations
• DNS, and TCP Relations
• When TCP Uses DNS
• DNS How does it work?
• DNS Root Servers and Roles
• DNS Sorgulamalar and Types
• DNS Server Types
• DNS Cache Structure
• Dig for DNS Query of Use
• Attacks on DNS
• Performed Using DNS Attacks
• DNS Abuse
• Specifying the DNS Server Version Information
• Transfer Zone Experiment
• DNS Spoofing
• DNS Cache Snooping
• DNS Rebindinhüg
• DNS Tunneling
• DNS DoS / DDoS Attacks
• DNS Flood Attacks
• Amplified DNS Dos Saldırısı
• Security Features and bring it DNSSEC

TCP / IP Network in Packet Sniffer Analysis and Use

• Tcpdump Traffic Analysis
• Tcpdump as Sniffer
• Basic Tcpdump Use
• Recording Packages
• Reading from the disc recorded Packages
• Traffic Analysis Filters
• Only specific Host / Port to Traffic Capture
• GMP
• Advanced Tcpdump Use
• Using Tcpdump Capture the Nmap scan
• Tcpdump Use of DDoS Attacks
• Wireshark / Tshark Using Packet Analysis
• Basic Wireshark Use
• Using Wireshark filters
• Display Filter
• Capture Filter Properties
• Advanced Filtered
• Using Wireshark for Network Forensics
• Summary of Traffic Analysis Information Retrieval
• Protocol Usage Rates
• Joining the package TCP Session
• Using Wireshark Firewall Rule Writing
• Data Extraction HTTP Connection
• HTTPS Traffic Analysis
• WEP / WPA encrypted Traffic Analysis
• Use Tshark
• Wireshark Tshark Differences
• Tcpdump, Tshark Differences
• With Tshark Display and Capture Filter Filter Usage
• Tshark Use of Network Forensics Study
• Sample Package Analysis
• Cloud Environment Serving Traffic Analysis Systems

Network Forensics Temelleri

• What it is, Why is it Important?
• Network Forensics Bileşenleri
• Capture, Record, Analyze, Report
• Data Extraction from Network Traffic
• Data capture network traffic ngrep
• Simple IDSA Design
• Determination of tunneling using ngrep
• Data Extraction Software
• ChaosReader
• Tcpexract
• Tcpflow
• Network Miner
• Use Xplico
• Used in SSL Media Network forensics
• Crossover Study of Network Forensics

Encryption Protocols and Security Weaknesses

• Computer encryption and returns Networks
• Encryption Disadvantages
• Using SSL Wrapper
• Encrypted Protocols
• SSL, TLS, SSH
• SSL/TLS Protokol Analizi
• SSL, TLS Between Difference
• TLS Place at OSI Layer
• SSL / TLS Attacks Against Realized
• SSLsniff
• Ssldump
• Sslstrip
• Intervention in encrypted protocols
• HTTP Basic information
• Risks HTTP and SSL used in the media
• SSH Protocol Details
• Using SSH Firewall / IPS / Crossover
• Tunneling with SSH bypass Content Filtering Systems
• SSH protocol versions
• SSH-1 insert into the Protocol and Data Reading
• SSH-2 Interrupt
• SSL Certificates
• Buying Certification Process
• How to Determine the fake certificates?
• Certification Authority and Its Importance
• With examples from the World Certificate of Security
• Self-Signed Certificate Generation