A continuación, se detallan los contenidos específicos de la asignatura (dado que la asignatura es en inglés, este detalle se proporciona en el idioma de impartición):

1. Basic Scenarios

• Know how to activate and configure Windows IIS and Linux Web and FTP servers.
• Know how to activate, configure and work with Linux SSH servers.
• Analyze 3-way-handshake TCP process, ICMP traffic (also traceroute operation in Windows and Linux and other types of relevant traffic to understand network operation (with Linux tcpdump tool)).
• Identify, create and use TCP/IP sockets (netcat and netstat tools).
• Learn how to avoid password sniffing on Windows and Linux capturing passwords with Wireshark and tcpdump.
• Learn how to avoid ARP spoofing implementing it and capturing the traffic generated.

2. Cryptography

• Understand and identify symmetric and asymmetric cryptography methods.
• Know SSH protocol versions and their operation and configuration.
• Understand, identify and use hashing algorithms (MD5 and SHA-1).
• Identify how Linux stores passwords and understand methods of password encryption (MD5, Blowfish, DES, SHA-256, SHA-512).
• Know, identify and manage digital certificates.
• Understand and identify HTTPS and SSL operation.

3. Password Cracking

• Implement password dictionary attacks (with different tools like John the Ripper, Hydra, Medusa, among others) and learn countermeasures to avoid them.
• Implement password Brute-force attack (with different tools like Brutus) and learn countermeasures to avoid them. Additionally, analyze rainbow tables performing.
• Be aware of ways to obtain people’s passwords and how to avoid it (social engineering, shoulder surfing, phishing, among others).

4. Basic Network Attacks

• Implement and identify ping of death attack and learn to apply countermeasures.
• Implement and identify smurf attacks and learn to apply countermeasures.
• Implement Web Session Hijacking attack and learn to apply countermeasures.
• Implement SYN flood attack and learn to apply countermeasures.

5. Footprinting

• Conduct a footprinting (with different tools and methods suggested in Kali Linux and OSINT documentation) and learn how to document it.

6. Host Scanning

• Identify how Nmap works, which information it helps to gather, what traffic it generates and learn to use it.
• Understand the differences between state results in port scanning, identify Nmap port scans and implement a port scan.
• Identify Nmap options for version detection and use Nmap to detect applications and Operating system versions.
• Learn to use Hping as a scanning tool.
• Learn what is and Idle scanning, implement it and propose countermeasures.

7. Fingerprinting

• Know and implement fingerprinting, and explain IP and ICMP fingerprinting techniques.
• Know, implement and explain techniques for Server Banner Grabbing.
• Know, implement and explain techniques for Client Banner Grabbing.
• Explain what security through obscurity is used for and implement a header obfuscation scenario.

8. Vulnerabilities

• Know vulnerability databases and find vulnerabilities for a specific application using these databases.
• Know, describe, install and configure Nessus and identify security problems using this tool.

9. Penetrating

• Understand “Unicode Directory traversal” vulnerability (CVE-2000-0884, MS00-078), use netcat to hack a Windows server with this vulnerability and, determine and apply countermeasures.
• Understand how Metasploit Framework is used to exploit vulnerabilities, use Metasploit Framework to hack into a Windows system and, determine and apply countermeasures.
• Exploit a poorly secured Linux with basic methods, using netcat to open a backdoor and, determine and apply countermeasures.
• Understand SQLi methods, exploit a vulnerable web server using SQLi, use different tools to implement SQLi, implement complementary methods to test a web server and, determine and apply countermeasures.