Course Catalog / Subject / MITRE ATT&CK

MITRE ATT&CK

View All Courses Download Course Catalog

CYB 250 – Cyber Threat Hunting: Tactics, Techniques, and Procedures (TTP)

DES 232 – Mitigating OWASP 2021 Injection

LAB 111 – Identifying Server-Side Request Forgery

LAB 124 – Identifying Horizontal Privilege Escalation

LAB 125 – Identifying Buffer Overflow

LAB 126 – Identifying Information Leakage

LAB 131 – Identifying Improper Restriction of XML External Entity Reference

LAB 132 – Identifying Exposed Services

LAB 133 – Identifying Exposure of Sensitive Information Through Environmental Variables

LAB 134 – Identifying Plaintext Storage of a Password

LAB 135 – Identifying URL Redirection to Untrusted Site

LAB 136 – Identifying Improper Neutralization of Script in Attributes in a Web Page

LAB 137 – Identifying Improper Authorization (NEW)

LAB 139 – Identifying Use of a Key Past its Expiration Date (NEW)

LAB 211 – Defending Java Applications Against Credentials in Code Medium

LAB 212 – Defending Python Applications Against Credentials in Code Medium

LAB 213 – Defending Node.js Applications Against Credentials in Code Medium

LAB 214 – Defending C# Applications Against Credentials in Code Medium

LAB 215 – Defending Java Applications Against Business Logic Error for Input Validation

LAB 216 – Defending Python Applications Against Business Logic Error for Input Validation

LAB 217 – Defending Node.js Applications Against Business Logic Error for Input Validation

LAB 218 – Defending C# Applications Against Business Logic Error for Input Validation

LAB 224 – Defending Java Applications Against Forceful Browsing

LAB 225 – Defending Python Applications Against Forceful Browsing

LAB 226 – Defending Node.js Applications Against Forceful Browsing

LAB 227 – Defending C# Applications Against Forceful Browsing

LAB 310 – ATT&CK: File and Directory Permissions Modification

LAB 311 – ATT&CK: File and Directory Discovery

LAB 312 – ATT&CK: Testing for Network Services Identification (NEW)

LAB 313 – ATT&CK: Testing for Vulnerability Identification Using Vulnerability Databases (NEW)

LAB 315 – ATT&CK: Updating Vulnerable Java Web Application Server Software

LAB 321 – ATT&CK: Password Cracking

LAB 322 – ATT&CK: Exploiting Windows File Sharing Server with External Remote Services

LAB 323 – ATT&CK: Exploiting Vulnerable Java Web Application Server Software

LAB 324 – ATT&CK: Exploiting Java Web Application Server Misconfiguration

LAB 330 – ATT&CK: Exploiting Java SQL Injection to Extract Password Hashes

LAB 331 – ATT&CK: Network Service Discovery

LAB 332 – ATT&CK: Network Share Discovery

LAB 334 – ATT&CK: Create Account

LAB 335 – ATT&CK: Unsecured Credentials

LAB 336 – ATT&CK: Data from Local System

LAB 337 – ATT&CK: Valid Accounts