Nmap/Short Course - Revision history

Unknown user: /* Lab Scenarios */

2025-05-29T15:07:52Z

Lab Scenarios

← Older revision		Revision as of 15:07, 29 May 2025
Line 7:		Line 7:
	* '''Scenario 1: Web and Cloud Audit (Hybrid Red/Blue Team)''': Investigate an organization's publicly accessible web services and a small, simulated cloud environment (a few instances representing common services like servers, APIs, and storage).		* '''Scenario 1: Web and Cloud Audit (Hybrid Red/Blue Team)''': Investigate an organization's publicly accessible web services and a small, simulated cloud environment (a few instances representing common services like servers, APIs, and storage).

	* '''Scenario 2: Industrial Control System Network (Red Team)''':		* '''Scenario 2: Industrial Control System Network (Red Team)''': (TBD)

	* '''Scenario 2 (Alternative): Casino Floor Network (Red Team)''': Network with a few desktop machines, and many, many small connected devices		* '''Scenario 2 (Alternative): Casino Floor Network (Red Team)''': Network with a few desktop machines, and many, many small connected devices

Unknown user: /* Lab Scenarios */

2025-05-29T15:07:40Z

Lab Scenarios

← Older revision		Revision as of 15:07, 29 May 2025
Line 5:		Line 5:
	There are 3 lab scenarios that map to the 3 modules of the course.		There are 3 lab scenarios that map to the 3 modules of the course.

	* '''Scenario 1: Web and Cloud Audit (Hybrid Red/Blue Team)''': Investigate an organization's publicly accessible web services and a small, simulated cloud environment (a few instances representing common services like servers, APIs, and storage). Red team will attempt to use nmap to identify exposed services, pinpoint versions or technology, and find security misconfigurations. Blue team will attempt to use nmap to verify only intended ports and service are exposed, audit for known vulnerabilities, identify services that are out of compliance with security policy, report findings and make recommendations.		* '''Scenario 1: Web and Cloud Audit (Hybrid Red/Blue Team)''': Investigate an organization's publicly accessible web services and a small, simulated cloud environment (a few instances representing common services like servers, APIs, and storage).

	* '''Scenario 2: Industrial Control System Network (Red Team)''':		* '''Scenario 2: Industrial Control System Network (Red Team)''':

	* '''Scenario 2 (Alternative): Casino Floor Network (Red Team)''':		* '''Scenario 2 (Alternative): Casino Floor Network (Red Team)''': Network with a few desktop machines, and many, many small connected devices

	* '''Scenario 3: Corporate Office Environment''': Navigating, mapping, auditing corporate network with various laptops, desktops, printers, office equipment, and servers connected to private subnet		* '''Scenario 3: Corporate Office Environment''': Navigating, mapping, auditing corporate network with various laptops, desktops, printers, office equipment, and servers connected to private subnet

Unknown user: /* Lab Scenarios */

2025-05-29T15:06:29Z

Lab Scenarios

← Older revision		Revision as of 15:06, 29 May 2025
Line 3:		Line 3:
	==Lab Scenarios==		==Lab Scenarios==

	There are 3 scenarios that ~~are covered in each lab. There is one lab for each lecture~~.		There are 3 lab scenarios that map to the 3 modules of the course.

	~~Here~~ are ~~the lab scenarios:~~		* '''Scenario 1: Web and Cloud Audit (Hybrid Red/Blue Team)''': Investigate an organization's publicly accessible web services and a small, simulated cloud environment (a few instances representing common services like servers, APIs, and storage). Red team will attempt to use nmap to identify exposed services, pinpoint versions or technology, and find security misconfigurations. Blue team will attempt to use nmap to verify only intended ports and service are exposed, audit for known vulnerabilities, identify services that are out of compliance with security policy, report findings and make recommendations.

	* '''Scenario 1 (~~Blue~~ Team)''': ~~Navigating, mapping, and auditing a corporate network with various laptops, desktops, printers, and office equipment connected to a few public and private subnets~~		* '''Scenario 2: Industrial Control System Network (Red Team)''':

	* '''Scenario 2 (Red Team)''': ~~penetrating and pivoting inside of an industrial control system network~~		* '''Scenario 2 (Alternative): Casino Floor Network (Red Team)''':

	* '''Scenario 3 ~~(Web and Cloud Audit, Hybrid Red/Blue)~~''': ~~Investigate an organization's publicly accessible web services and a small~~, ~~simulated cloud environment (a few instances representing common services like servers~~, ~~APIs~~, ~~and storage). Red team will attempt to use nmap to identify exposed services~~, ~~pinpoint versions or technology~~, and ~~find security misconfigurations. Blue team will attempt~~ to use nmap to verify only intended ports and service are exposed, audit for known vulnerabilities, identify services that are out of compliance with security policy, report findings and make recommendations.		* '''Scenario 3: Corporate Office Environment''': Navigating, mapping, auditing corporate network with various laptops, desktops, printers, office equipment, and servers connected to private subnet

	==Module 1: Nmap Mastery - Beyond the Basics==		==Module 1: Nmap Mastery - Beyond the Basics==

Unknown user: /* Lab Scenarios */

2025-05-26T23:33:10Z

Lab Scenarios

← Older revision		Revision as of 23:33, 26 May 2025
Line 9:		Line 9:
	* '''Scenario 1 (Blue Team)''': Navigating, mapping, and auditing a corporate network with various laptops, desktops, printers, and office equipment connected to a few public and private subnets		* '''Scenario 1 (Blue Team)''': Navigating, mapping, and auditing a corporate network with various laptops, desktops, printers, and office equipment connected to a few public and private subnets

	* '''Scenario 2 (Red Team)''': penetrating an pivoting inside of an industrial control system network		* '''Scenario 2 (Red Team)''': penetrating and pivoting inside of an industrial control system network

	* '''Scenario 3 (Web and Cloud Audit, Hybrid Red/Blue)''': Investigate an organization's publicly accessible web services and a small, simulated cloud environment (a few instances representing common services like servers, APIs, and storage). Red team will attempt to use nmap to identify exposed services, pinpoint versions or technology, and find security misconfigurations. Blue team will attempt to use nmap to verify only intended ports and service are exposed, audit for known vulnerabilities, identify services that are out of compliance with security policy, report findings and make recommendations.		* '''Scenario 3 (Web and Cloud Audit, Hybrid Red/Blue)''': Investigate an organization's publicly accessible web services and a small, simulated cloud environment (a few instances representing common services like servers, APIs, and storage). Red team will attempt to use nmap to identify exposed services, pinpoint versions or technology, and find security misconfigurations. Blue team will attempt to use nmap to verify only intended ports and service are exposed, audit for known vulnerabilities, identify services that are out of compliance with security policy, report findings and make recommendations.

Unknown user: /* Notes for the Instructor */

2025-05-26T22:14:31Z

Notes for the Instructor

← Older revision		Revision as of 22:14, 26 May 2025
Line 75:		Line 75:
	==Notes for the Instructor==		==Notes for the Instructor==

	[[Running the Labs]]		[[Nmap/Short Course/Running the Labs]]

	==Flags==		==Flags==

	{{NmapShortCourseFlag}}		{{NmapShortCourseFlag}}

Unknown user: /* Module 3: Blue Team Nmap - Auditing, Defense & Network Monitoring */

2025-05-26T22:04:30Z

Module 3: Blue Team Nmap - Auditing, Defense & Network Monitoring

← Older revision		Revision as of 22:04, 26 May 2025
Line 72:		Line 72:
	* [[Nmap/Short Course/Lab 11]]		* [[Nmap/Short Course/Lab 11]]
	* [[Nmap/Short Course/Lab 12]]		* [[Nmap/Short Course/Lab 12]]

			==Notes for the Instructor==

			[[Running the Labs]]

	==Flags==		==Flags==

	{{NmapShortCourseFlag}}		{{NmapShortCourseFlag}}

Unknown user at 20:36, 26 May 2025

2025-05-26T20:36:53Z

@@ Line 1: / Line 1: @@
-This short course consists of 12 short lectures in 3 modules, with each module building on the last. Lab scenarios will be integrated throughout.
+This is a 12-part short course on advanced nmap topics, intended for cybersecurity professionals. The course consists of 12 short lectures, with associated labs for each lecture (multiple scenarios for each lab). Each module builds on the last.
-=Lectures=
+==Lab Scenarios==
 ==Module 1: Nmap Mastery - Beyond the Basics==
@@ Line 8: / Line 18: @@
 Lab Integration: Students will begin initial reconnaissance on all three lab scenarios using the techniques learned in this module.
 * [[Nmap/Short Course/Lecture 1]] - Precision Host Discovery & Initial Sweeps
@@ Line 14: / Line 26: @@
 * [[Nmap/Short Course/Lecture 4]] - Optimizing Nmap: Performance Tuning & Firewall Evasion Basics
 ==Module 2: Red Team Nmap - Offensive Recon & Vuln Identification==
@@ Line 20: / Line 38: @@
 Lab Integration: Focus on applying offensive Nmap techniques within the ICS Penetration (Scenario 2) and Web/Cloud Audit (Scenario 3) labs.
 * [[Nmap/Short Course/Lecture 5]] - Introduction to the Nmap Scripting Engine (NSE)
@@ Line 25: / Line 45: @@
 * [[Nmap/Short Course/Lecture 7]] - Advanced NSE Usage & Nmap for Exploitation Support
 * [[Nmap/Short Course/Lecture 8]] - Nmap in Penetration Testing: Pivoting & Internal Recon
 ==Module 3: Blue Team Nmap - Auditing, Defense & Network Monitoring==
@@ Line 31: / Line 58: @@
 Lab Integration: Focus on applying defensive Nmap techniques within the Corporate Network Audit (Scenario 1) and using data from all scenarios for defensive analysis.
 * [[Nmap/Short Course/Lecture 9]] - Network Auditing & Inventory with Nmap
@@ Line 37: / Line 66: @@
 * [[Nmap/Short Course/Lecture 12]] - Detecting Scans, Defensive Strategies & Course Capstone
-=Labs=
+Labs:
 * [[Nmap/Short Course/Lab 9]]
 * [[Nmap/Short Course/Lab 10]]
@@ Line 71: / Line 73: @@
 * [[Nmap/Short Course/Lab 12]]
+{{NmapShortCourseFlag}}

Unknown user: Admin moved page Nmap/2025 Short Course to Nmap/Short Course without leaving a redirect

2025-05-26T20:34:05Z

Admin moved page Nmap/2025 Short Course to Nmap/Short Course without leaving a redirect

← Older revision	Revision as of 20:34, 26 May 2025
(No difference)

Unknown user: /* Labs */

2025-05-26T20:25:39Z

Labs

← Older revision		Revision as of 20:25, 26 May 2025
Line 53:		Line 53:
	==Labs==		==Labs==

	* Module 1:		Module 1:
	** [[Nmap/Short Course/Lab 1]]		* [[Nmap/Short Course/Lab 1]]
	** [[Nmap/Short Course/Lab 2]]		* [[Nmap/Short Course/Lab 2]]
	** [[Nmap/Short Course/Lab 3]]		* [[Nmap/Short Course/Lab 3]]
	** [[Nmap/Short Course/Lab 4]]		* [[Nmap/Short Course/Lab 4]]

	* Module 2:		Module 2:
	** [[Nmap/Short Course/Lab 5]]		* [[Nmap/Short Course/Lab 5]]
	** [[Nmap/Short Course/Lab 6]]		* [[Nmap/Short Course/Lab 6]]
	** [[Nmap/Short Course/Lab 7]]		* [[Nmap/Short Course/Lab 7]]
	** [[Nmap/Short Course/Lab 8]]		* [[Nmap/Short Course/Lab 8]]

	* Module 3:		Module 3:
	** [[Nmap/Short Course/Lab 9]]		* [[Nmap/Short Course/Lab 9]]
	** [[Nmap/Short Course/Lab 10]]		* [[Nmap/Short Course/Lab 10]]
	** [[Nmap/Short Course/Lab 11]]		* [[Nmap/Short Course/Lab 11]]
	** [[Nmap/Short Course/Lab 12]]		* [[Nmap/Short Course/Lab 12]]

Unknown user at 20:24, 26 May 2025

2025-05-26T20:24:46Z

← Older revision		Revision as of 20:24, 26 May 2025
Line 1:		Line 1:
	This short course consists of 12 short lectures in 3 modules, with each module building on the last. Lab scenarios will be integrated throughout.		This short course consists of 12 short lectures in 3 modules, with each module building on the last. Lab scenarios will be integrated throughout.

			=Lectures=

	==Module 1: Nmap Mastery - Beyond the Basics==		==Module 1: Nmap Mastery - Beyond the Basics==
Line 35:		Line 37:
	* [[Nmap/Short Course/Lecture 12]] - Detecting Scans, Defensive Strategies & Course Capstone		* [[Nmap/Short Course/Lecture 12]] - Detecting Scans, Defensive Strategies & Course Capstone

	==Lab Scenarios ~~and Labs~~==		=Labs=

			==Lab Scenarios==

	There are 3 scenarios that are covered in each lab. There is one lab for each lecture.		There are 3 scenarios that are covered in each lab. There is one lab for each lecture.
Line 47:		Line 51:
	* '''Scenario 3 (Web and Cloud Audit, Hybrid Red/Blue)''': Investigate an organization's publicly accessible web services and a small, simulated cloud environment (a few instances representing common services like servers, APIs, and storage). Red team will attempt to use nmap to identify exposed services, pinpoint versions or technology, and find security misconfigurations. Blue team will attempt to use nmap to verify only intended ports and service are exposed, audit for known vulnerabilities, identify services that are out of compliance with security policy, report findings and make recommendations.		* '''Scenario 3 (Web and Cloud Audit, Hybrid Red/Blue)''': Investigate an organization's publicly accessible web services and a small, simulated cloud environment (a few instances representing common services like servers, APIs, and storage). Red team will attempt to use nmap to identify exposed services, pinpoint versions or technology, and find security misconfigurations. Blue team will attempt to use nmap to verify only intended ports and service are exposed, audit for known vulnerabilities, identify services that are out of compliance with security policy, report findings and make recommendations.

	~~And here are the labs:~~		==Labs==

	* Module 1:		* Module 1: