This hands-on course focuses on advanced infrastructure security testing techniques, using real-world scenarios and offensive research. Delegates will learn to identify, exploit, and remediate vulnerabilities across on-premises and cloud environments. The course is designed to keep skills up to date with the latest threat landscape, providing practical experience through extensive lab exercises led by experienced penetration testers.

Target Audience

Intermediate knowledge of infrastructure application security (at least 2 years’ experience)
Competency with common command line syntax
Experience using virtual labs for penetration testing and/or offensive research

Target audience

Penetration testers and red teamers
Security consultants and architects
Network administrators with security experience
CSIRT/SOC teams and blue teamers
Security and IT managers and team leads
In-house security teams from intermediate to pro-level
Other security and IT practitioners and managers seeking to understand the current threat landscape

We can organize this training at your preferred date and location.

What You Will Learn

Delegates will learn how to:

Think and behave like an advanced, real-world threat actor
Identify and exploit commonly used vulnerabilities that have recently caused damage and disruption
Deploy the latest and most common network infrastructure and cloud hacking techniques, including novel methods undetectable by scanners
Analyse vulnerabilities within their own organisation and customise hacking techniques in response
Apply a wide range of hacks for Windows, Linux, Microsoft Azure, AWS, Google Cloud Platform, and software development systems
Remediate as well as attack weaknesses in infrastructure
Use lab-based exercises to reinforce practical skills

Training Outline

Reconnaissance and Perimeter Compromise

Advanced OSINT and organisation footprinting
Attack surface mapping and asset identification
Exploiting vulnerable VPN appliances
Configuration extraction and credential recovery
Credential stuffing and external service abuse
IPv4/IPv6 service discovery and enumeration

Internal Network Pivoting (Linux)

Linux attack surface enumeration and misconfigurations
Kerberos authentication
Restricted shells breakouts
SSH-based access and lateral escalation
Breaking hardened web servers
Local privilege escalation (SUID/SGID, PAM, sudo, kernel)
Persistence techniques (Linux Capabilities)
Pivoting via SSH tunnelling and internal service access

Container Breakout

Breaking and abusing Docker
Breaking out of Kubernetes containers

Lateral Movement and Pivoting

Persistence techniques and credential harvesting
Pivoting via SSH tunnelling and internal service access

Cross-Network Pivoting

VLAN segmentation bypass and VLAN hopping techniques
Switch spoofing and double tagging attacks
Network reconnaissance (CDP/LLDP, routing visibility)
CI/CD pipeline compromise and pipeline poisoning
Supply chain and dependency confusion attacks
Database exploitation (MSSQL/PostgreSQL)
Observability platform compromise and credential extraction

Identity Compromise (Windows)

Windows enumeration and policy/restriction analysis
RDP-based access and desktop/kiosk breakouts
AppLocker bypass and proxied execution
Offensive PowerShell and Offsec development
AMSI bypass techniques
AV evasion techniques
OPSEC and defence evasion
Post-exploitation and persistence techniques

Enterprise Pivot and Active Directory Exploitation

Active Directory delegation reviews and exploitation (Windows 2022 Server)
Resource-based constrained delegation
ACL/ACE misconfigurations and shadow credentials
Kerberos attacks (Kerberoasting, AS-REP, Pass-the-Ticket)
Ticket forgery (Golden, Silver, Diamond)
OPSEC and defence evasion under detection constraints
Active Directory Certificate Services (AD CS) abuse
Cross domain and forest attacks
Pivoting and port forwarding across enterprise environments
Persistence and backdooring techniques (Golden and Diamond Ticket)

Cloud Hacking

AWS, Microsoft Azure, and GCP specific attacks
Storage misconfigurations
Credentials, APIs, and token abuse
Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS), Container as a Service (CaaS), and serverless exploitation
Azure AD attacks

Exams and assessments

There is no formal exam for this course.

Hands-on learning

Extensive lab-based exercises, making up approximately 80% of the course
Individual access to virtual lab environments for practical hacking experience
Scenario-led, research-based learning reflecting real-world threat actor behaviour
30 days of lab access post-course completion for continued practice

Why Choose Us

Experience Adversary Ops Infrastructure Edition through Bilginç IT Academy's live and interactive virtual classroom environment. Join a Public course as an individual delegate or arrange a dedicated Private / In-house online training program exclusively for your organization.

Delivery Method: Online Instructor-Led
Participation Model: Public / Private (In-house)
Live and Interactive Training: Connect with your instructor in real time and actively participate through discussions, Q&A sessions, practical exercises, and group activities.
Flexible Participation: Join the training from your home, office, or any location with a suitable internet connection.
Expert Trainer Network: Learn from experienced trainers with strong industry backgrounds and practical field expertise.
Over 30 Years of Training Expertise: Benefit from Bilginç IT Academy's professional training experience since 1995.
Worldwide Access: Join our live virtual classrooms from anywhere in the world or arrange a dedicated online training program for your organization.

Experience Adversary Ops Infrastructure Edition in a professional face-to-face classroom environment. Classroom Based training can be delivered as a Public course open to individual delegates or as a dedicated Private / In-house class exclusively for your organization.

Delivery Method: Classroom Based
Participation Model: Public / Private (In-house)
Face-to-Face Learning: Interact directly with your instructor and fellow delegates in an engaging classroom environment.
Experienced Trainers: Learn from specialists with extensive industry experience and practical real-world knowledge.
Professional Training Environment: Attend training in comfortable, well-equipped classrooms designed to support effective learning.
Practical Learning: Depending on the course, reinforce your knowledge through hands-on exercises, scenarios, case studies, and instructor-led activities.

Arrange Adversary Ops Infrastructure Edition as a dedicated Onsite training program for your organization. Bilginç IT Academy trainers can deliver the training at your office or another location of your choice, with the program planned around your team's requirements and business objectives.

Delivery Method: Onsite
Participation Model: Private (In-house)
Training at Your Preferred Location: Organize the training at your company's office or another location selected by your organization.
Tailored Course Content: Adapt the training program to your projects, team structure, existing skill levels, and specific business requirements.
Team-Focused Learning: Develop your team around a shared knowledge base while strengthening internal collaboration and knowledge transfer.
Flexible Scheduling: Plan the training dates, location, and program according to your organization's operational requirements.
Worldwide Onsite Delivery: Bilginç IT Academy trainers can travel internationally to deliver dedicated training programs at your preferred location.

Why have you chosen us?

I have attended a training from Bilginc IT Academy before and I was satisfied.

I have attended a training from a different provider and it was not helpful.

Other

How many employees do you have in your IT department?

0 – 50

50 – 250

250 – 1000

1000+