Course

Infosec Skills Challenge: March 2022

    Syllabus

  • Cyber Threat Hunting – Hunting Network-based Threats Lab — 00:30:00
    • In this lab you will learn how to replay traffic from a pcap file and how to capture and inspect that traffic.

  • Welcome to the Infosec Skills March Challenge Video — 00:00:30
  • Secure Coding – Python Lab — 00:30:00
    • This lab covers multiple secure coding errors commonly found in Python, including deserialization and XML based attacks.

  • Common Attack Types – HTML & SQL Injections Lab — 00:30:00
    • In this lab you will walkthrough an example of both HTML and SQL injections.

      HTML injections are vulnerabilities created from poor coding techniques and failure to sanitize user input that allow attackers to inject malicious payloads into the website’s HTML code and modify its content. Based on the vulnerability, an attacker can change a few code lines, add entire forms that can then be used to trick users into providing sensitive information or change the website’s entire layout.

      SQL injection is a web security vulnerability that permits an adversary to inject malicious SQL statements in the queries that an application makes to its database. It allows an unauthorized entity to view data to which they should not have access, like other users’ information

Syllabus

Course description

Start out inside our Common Attack Types cyber range with HTML & SQL injections bound to put your pentesting skills to the test! Then head over to our Hunting Network-based Threats lab to replay traffic from a pcap file and how to capture and inspect that traffic. To wrap up this month’s Challenge, you’ll attempt a variety of exploit multiple secure coding errors commonly found in Python. Complete all three labs and upload your certificate of completion to LinkedIn — don’t forget to tag @Infosec — for your chance to win a $100 Amazon gift card, Infosec hoodie and a 1-year subscription to Infosec Skills!

You're in good company

CY

We use Infosec Skills to provide continuous training to our technicians and to prepare them for various certifications. Infosec Skills allows us to create personalized training programs that focus on each of our technicians’ particular roles and see their progress as they take courses. We also, recommend it to clients to make their IT support teams better.

Caleb Yankus

DS

This has been utilized to bridge the skills gap across our cyber team and to aid them as they prepare for their various certifications. It also has provided a nice learning foundation for our various cyber team members to utilize as we continue to find ways for cross-utilization with operations while minimizing the downtime needed to ensure everyone’s knowledge is the same.

Daniel Simpson

IS

We use Infosec Skills to provide base level knowledge for employees. We also use the services to provide in depth learning for employees as they encounter new technologies. If an employee is is assigned to a new project, we can rely on Infosec Skills to provide a rapid concentrated learning environment. This rapid concentrated learning positions our employees for success.

Infosec Skills Teams client

Plans & pricing

  • Infosec Skills Personal

    $299 / year

    • 190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
    • 100s of hands-on labs in cloud-hosted cyber ranges
    • Custom certification practice exams (e.g., CISSP, Security+)
    • Skill assessments
    • Infosec peer community support
  • Infosec Skills Teams

    $799 per license / year

    • Team administration and reporting
    • Dedicated client success manager
    • Single sign-on (SSO)
      Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
    • Integrations via API
      Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
    • 190+ role-guided learning paths and assessments (e.g., Incident Response)
    • 100s of hands-on labs in cloud-hosted cyber ranges
    • Create and assign custom learning paths
    • Custom certification practice exams (e.g., CISSP, CISA)
    • Optional upgrade: Guarantee team certification with live boot camps

Unlock 7 days of free training

  • 1,400+ hands-on courses and labs
  • Certification practice exams
  • Skill assessments

Award-winning training that you can trust

Comprehensive Cybersecurity Training - Infosec Skills
Cybersecurity Education and Training Gold Award - Infosec IQ
Top Rated Award - Infosec Skills
2021 G2 Summer - Leader - Tech Skills Dev, Online Course, eLearning Content
Top 20 Company - Online Learning Library