Course Catalog / Subject / MITRE ATT&CK

MITRE ATT&CK

View All Courses Download Course Catalog

LAB 211 – Defending Java Applications Against Credentials in Code Medium (NEW)

LAB 212 – Defending Python Applications Against Credentials in Code Medium (NEW)

LAB 213 – Defending Node.js Applications Against Credentials in Code Medium (NEW)

LAB 214 – Defending C# Applications Against Credentials in Code Medium (NEW)

LAB 215 – Defending Java Applications Against Business Logic Error for Input Validation (NEW)

LAB 216 – Defending Python Applications Against Business Logic Error for Input Validation (NEW)

LAB 217 – Defending Node.js Applications Against Business Logic Error for Input Validation (NEW)

LAB 218 – Defending C# Applications Against Business Logic Error for Input Validation (NEW)

LAB 224 – Defending Java Applications Against Forceful Browsing (NEW)

LAB 225 – Defending Python Applications Against Forceful Browsing (NEW)

LAB 226 – Defending Node.js Applications Against Forceful Browsing (NEW)

LAB 227 – Defending C# Applications Against Forceful Browsing (NEW)

LAB 311 ATT&CK: File and Directory Discovery (NEW)

LAB 310 ATT&CK: File and Directory Permissions Modification (NEW)

LAB 136 – Identifying Improper Neutralization of Script in Attributes in a Web Page (NEW)

LAB 135 – Identifying URL Redirection to Untrusted Site (NEW)

LAB 134 – Identifying Plaintext Storage of a Password (NEW)

LAB 133 – Identifying Exposure of Sensitive Information Through Environmental Variables (NEW)

LAB 337 ATT&CK: Valid Accounts

EliteElective

LAB 336 ATT&CK: Data from Local System

EliteElective

LAB 132 – Identifying Exposed Services

LAB 131 – Identifying Improper Restriction of XML External Entity Reference

LAB 335 ATT&CK: Unsecured Credentials

EliteElective

LAB 334 ATT&CK: Create Account

EliteElective

LAB 332 ATT&CK: Network Share Discovery

EliteElective

LAB 331 ATT&CK: Network Service Discovery

EliteElective

CYB 250 – Cyber Threat Hunting: Tactics, Techniques, and Procedures (TTP)

LAB 126 – Identifying Information Leakage

LAB 125 – Identifying Buffer Overflow

LAB 124 – Identifying Horizontal Privilege Escalation

LAB 111 – Identifying Server-Side Request Forgery

LAB 324 ATT&CK: Exploiting Java Web Application Server Misconfiguration

EliteElective

LAB 323 ATT&CK: Exploiting Vulnerable Java Web Application Server Software

EliteElective

LAB 315 ATT&CK: Updating Vulnerable Java Web Application Server Software

EliteElective

DES 232 – Mitigating OWASP 2021 Injection

LAB 330 ATT&CK: Exploiting Java SQL Injection to Extract Password Hashes

EliteElective

LAB 322 ATT&CK: Exploiting Windows File Sharing Server with External Remote Services

EliteElective

LAB 321 ATT&CK: Password Cracking

EliteElective