Ethical Hacking II KTH Royal Institute of Technology

Programme Structure

After passing the course, the student should be able to:

• establish resources to support offensive security operations

• perform reconnaissance and discovery to plan operations

• access credentials, such as account names, passwords and access tokens

• achieve initial access to networks and systems

• execute malicious code on remote devices

• establish command and control capabilities to communicate with compromised systems

• elevate privileges on systems to gain higher-level permissions

• persist on networks by maintaining access across interruptions

• move laterally, pivoting through the computing environment

• avoid detection by network defenders

• collect and exfiltrate data from computing environments

• assess the security of computer systems, applications, and services

• carry out legal and ethical security testing.