EV_P02: Hands-on Metasploit Training

Join us for this hands-on training, where we will walk you through how to use Metasploit in common scenarios to pop your first shells on a remote target! Including:

• Scanning Services with Metasploit
• Overview of Exploit Types, e.g. Server-Side, Client-Side, AiTM, Priv. Esc., etc.
• Review of Inline vs Staged Payload Types 
• Rundown of Common Payload Types, e.g. Connect / Bind, Reverse Connect / Callback 
• Exploiting Common CVEs via Metasploit Modules

This hands-on workshop is targeted for Information Technology (IT) professionals who have a strong interest in some of the most common Computer Network Exploitation (CNE) tools, techniques, and procedures (TTPs) which are being used to compromise the Confidentiality, Integrity, and/or Availability (the CIA triad) of our information systems. This course provides you with a solid foundation in the information security domain by presenting the course material with an operational focus and then solidifying core concepts through hands on learning exercises.

Prerequisite: Students should be comfortable with basic networking concepts and services (e.g. TCP/IP, DNS, DHCP, etc.) 

• Some basic penetration testing experience is recommended, but not required. 
• Some experience interacting with AWS is recommended, but not required. 
• Some scripting knowledge (e.g. python, powershell, etc.) is recommended, but not required. 

• The laptop needs to be able to join a wireless network with a web browser able to access AWS services. 
• Ability to join Discord. 

Students do NOT need to have their own accounts with AWS during the course, but having an AWS account will enable the student to continue to work on the course content after the course has concluded for the day.

All proceeds are donated to Nova Labs nonprofit.

Michael Butler is Vice President of Offensive Services and a senior penetration tester at UltraViolet Security where he leads, hacks, and develops red teaming tools. Michael has worked in the offensive security field for nearly 10 years which includes time working for the US Army, NSA, Cyber Command, and several commercial cyber security companies. Michael holds several awards and certifications (e.g. OSCP, CISSP, AWS-SCS, etc).