Black Hat USA Training 2004
Caesars Palace Las Vegas • July 26-27

Course Length: 2 days

Attacktecs™ Attack Techniques used to exploit network infrastructure, servers, databases and other services with the intent of stealing or destroying intellectual property and/or to deny users and clients legitimate access.

Defentecs – Defense Techniques and implementation methods used to defend against the latest Attacktecs.

This class will cover a wide variety of the publicly available exploit tools and how they can be used specifically against a Cisco infrastructure. A majority of the class time will be spent doing practical labs. Therefore, a certain level of Cisco expertise will be expected. The training will also cover the possible defenses against these attacks.

Students will be using 2651 routers, and 1900 switches for their labs. The lab core will consist of 3600s, 2900s, 2500s and servers of various flavors. Students will be required to bring their own laptops to (with appropriate caution) attach to the labs. This class will focus on Cisco Router and Switch vulnerabilities and will not be covering PIX firewalls, VPN concentrators, or IDS tools.

Here is a list of some of the topics that will be covered:

• Ways of Password Nabbing
• Sniffing traffic on a switch
• VLAN Hopping and 802.1Q issues
• Root Bridge Takeovers
• Local and remote HSRP attacks
• Routing manipulation/injection with RIP, IGRP, EIGRP, OSPF
• BGP attacks
• SNMP Exploits
• Tunneling attacks
• DoS and DDoS issues and preventive methods