Masterclass: Windows Infrastructure Pen-testing Training in Kazakhstan

You will enjoy it! The course teaches strategy and advance techniques for performing internal infrastructure penetration testing in highly secure Windows infrastructure. Our course has been developed around professional penetration testing and security awareness in the business and IT fields. To make sure that all participants gain the necessary infrastructure security concepts and knowledge, our classes have an intensive hands-on labs format. 

We have gathered knowledge from top worldwide known experts and combine their skills to prepare unique content allowing you to prepare for performing penetration testing or read team exercise for your organization.

Every exercise is supported with lab instructions and multiple tools, both traditional and specialized. CQURE trainers recommend students have some knowledge of security concepts, such as operating system services and architecture. However, all required concepts will be covered throughout the course. 

Paula says: Penetration Test combines a lot of components that make a test to be a bit more professional. Starting with report templates, attitude, being legal and first steps, ending up with great tools and techniques. This course is fun but with a value! 

Pen-testers, read teamers, Windows network administrators, security professionals, systems engineers, IT professionals, security consultants and other people responsible for implementing infrastructure security.

Module 1: Evolution of Hacking 

• Evolution of vulnerabilities 

• Persistent Threats 

• Malware evolution 

• Modern Attack Techniques 

Module 2: Penetration testing methodology 

• Reconnaissance 

• Enumeration 

• Exploitation 

• Privilege escalation 

• Lateral movement 

• Persistency 

• Reporting and cleanup 

Module 3: Reconnaissance and enumeration 

• Open Source Intelligence 

• Google Hacking 

• DNS enumeration 

• Network scanning 

• Service discovery 

• IPS/IDS consideration and handling 

• 802.1x bypass 

Module 4: OS Security and elevation of privileges 

• Services Security 

• Permissions and Privileges 

• Offline Attacks 

• DPAPI Attacks with custom CQURE Tools 

• Cached Logons Attacks with custom CQURE Tools 

• Exploiting a lack of access controls 

• Application whitelisting bypass 

Module 5: Identity attacks and lateral movement 

• Pass-The-Hash Attacks 

• Pass-The-Ticket Attacks 

• Kerberoasting 

• DCSync 

• DCShadow 

• Smb Relay 

Module 6: Common service attacks 

• Microsoft SQL Server attacks 

• PKI misconfiguration detection and attacks 

• Compromising Web Server 

• Active Directory Security 

• Print server security 

Module 7: Tampering with Communication 

• Wireless Protocols Security 

• NetBIOS Spoofing 

• SMB Security 

• LLMNR 

• HTTP/HTTPS 

Module 8: AV bypass and evasion techniques 

• Malicious Files Execution 

• Anti-antimalware techniques 

• Non-exe Malware 

• File-less malware techniques 

• SIEM and PAM consideration 

Module 9: Legal Issues 

• Paperwork 

• Reporting 

• Responsibility 

• White hat ethics 

At Bilginç IT Academy, we combine our strong presence in both the UK and Türkiye to deliver high-quality, practical training solutions for organizations worldwide.

International Presence with Local Expertise
With operations in the United Kingdom and Türkiye, we bring together global standards and local market understanding to deliver effective training experiences across regions.

Expert Instructors with Real-World Experience
Our courses are delivered by certified trainers with extensive industry experience, ensuring you gain practical knowledge that can be applied immediately.

Corporate-Focused Training Approach
We specialize in training corporate teams, tailoring our programs to meet your organization’s goals, technologies, and project requirements.

Flexible Training Delivery Worldwide
We offer classroom, virtual classroom, and onsite training options globally, tailored to your organization’s needs.

Hands-On, Practical Learning
Our training sessions include real-world scenarios, case studies, and interactive exercises to ensure lasting understanding and skill development.

Proven Track Record
With over 10 years of experience, we have successfully trained professionals from leading organizations across different industries and regions.