Training course
digicode: CSECAS
CAS Cyber Security Expert
Course facts
Download as PDF- Classifying information security risks within the context of an ISMS and ISO/IEC 27001, and deriving appropriate security controls
- Analyzing and evaluating current attack scenarios targeting networks, systems, and web applications
- Selecting and strategically deploying professional ethical hacking and penetration testing tools on Kali Linux™
- Systematically identifying, verifying, and prioritizing vulnerabilities in realistic hacking labs
- Combining various attack techniques and independently handling complex penetration testing scenarios
- Developing technical and organizational protective measures and verifying their effectiveness from an offensive perspective
- Analyzing AI-enabled cyberattacks and deriving effective countermeasures
- Using AI tools to support security assessments, vulnerability analyses, and security testing
- Assessing the risks of modern cloud, web, and AI applications from an attacker’s perspective
- Planning, conducting, and documenting professional security audits and penetration tests in accordance with OSSTMM
- Preparing and presenting results tailored to the target audience and deriving concrete recommendations for the cybersecurity strategy
- Introduction to the concepts of an Information Security Management System (ISMS) according to ISO/IEC 27001:2022
- Information Security Management System requirements and certification
- Practical use of the course materials
- Latest Cyber Threats
- Fundamentals of Cryptography
- System security measures
- Network security measures
- Access control
- Control and monitoring
- Introduction to security issues and the Hacking-LAB
- Hackers’ working methods, techniques and tools
- Procedure of a targeted hacker attack
- Open Source Intelligence and Social Engineering
- Network sniffing, scanning and spoofing
- Intercept passwords and crack passwords
- Use cloaked malware and targeted exploits
- Secure access with a backdoor
- General defensive measures of the scenarios shown in the Hacking-LAB
- Basics and Development of an Own Hacking Lab
- Useful Bash Commands in Linux
- Targeted Scouting / Footprinting / Bannergrabbing
- Network Sniffing Techniques (incl. passive WLAN scanning)
- Targeted Use of Network Scanning Techniques (Active and Passive)
- Perform Vulnerability Scanning
- Perform Various Man-in-the-Middle Attacks (ARP Poisoning, SSLStrip, ...)
- Perform Wireless Attacks (WEP, WPA2, WPS, DoS, ...)
- Understanding the Dangers of Evil Twin WLAN Attacks
- Introduction to MetasploitTM Framework (msfconsole, modules, payloads, auxiliary, ...)
- Exploit Selection for Various Client Side Attacks
- Post Exploitation (additional modules, rights escalation, pivoting, fixing, ...)
- Understanding the Dangers of Antivirus and Firewall Evasion Techniques
- Advanced Threats Live Demo (HID and Bad USB Attacks)
- Extension of the own Hacking-Labs from the course «Ethical-Hacking-Hands-on-Vieferung (HAK2)»
- Consolidation of the techniques learned in the HAK2 course with further hands-on labs
- Encourage your own creativity in ethical hacking with a targeted combination of hacking techniques
- Deepening of MitM techniques (e.g. HSTS bypass, code injection, keyloggers, DNA spoofing)
- Targeted advanced backdoor methods with evasion techniques using fake updates, manipulated files, embedding in programs, macros
- Achieving targeted system rights (bypass UAC techniques)
- Targeted methods for access security using persistence scripts
- PowerShell hacking methods and tools
- Browser Explotation (Hooking)
- Advanced knowledge with the Metasploit™ Framework (e.g. post-explotation, pass-the-hash, pivoting, targeted exploiting, combining with other attack vectors)
- Advanced WLAN hacking techniques (e.g. Rogue AP, Evil Twin)
- Skills extension with web hacking methods (e.g. website spoofing, XSS, SQLInjection)
- Advanced Threats Live-Demo (IoT-Hacking)
- Introduction to the OSSTMM method
- The six sections of OSSTMM (with case studies)
- International best practices and standards
- OSSTMM Rules of Engagement (Ethical approach of OSSTMM)
- Security test types
- Structure of OSSTMM Compliance
- Testing procedure
- RAV Risk Assessment Value as a benchmark
- Hands-on exercises to prepare for the «Certified OSSTMM Professional Security Tester» exam
- A01:2021-Broken Access Control
- A02:2021-Cryptographic Failures
- A03:2021-Injection
- A04:2021-Insecure Design
- A05:2021-Security Misconfiguration
- A06:2021-Vulnerable and Outdated Components
- A07:2021-Identification and Authentication Failures
- A08:2021-Software and Data Integrity Failures
- A09:2021-Security Logging and Monitoring Failures
- A10:2021-Server-Side Request Forgery
Consists of the following modules
- ISO/IEC 27001:2022 Foundation
- Cyber Security – Implement Network and System Security
- Cyber Security Tester – Hands-on Foundation
- Cyber Security Tester – Hands-on Professional
- Cyber Security Tester – Hands-on Advanced
- OSSTMM Professional Security Tester
- Web Application Security – Foundation
- Exam Preparation, Exam and Final Presentation
The CAS program is based on the principle of «learning by hacking». Each theoretical module is immediately reinforced through hands-on exercises and interactive labs. Instead of merely discussing security concepts, you implement them yourself: You analyze networks, compromise test systems, carry out web attacks, identify vulnerabilities, and professionally document your results.
You’ll spend a significant portion of the program in a hands-on hacking environment, solving realistic challenges similar to those encountered daily in security assessments, penetration tests, and red team engagements.
This CAS is designed for you if, as an IT or security professional, you want to specifically deepen your expertise in ethical hacking, penetration testing, and offensive information security.
You are responsible for the security of IT systems, networks, or web applications and want to not only assess vulnerabilities theoretically, but also identify, verify, and document them in practice using professional methods and tools.
This CAS is particularly well-suited for you if you work as an information security officer, security analyst, security tester, auditor, security engineer, consultant, information systems architect, network engineer, or system administrator.
You’ll learn to understand cybersecurity from the perspective of potential attackers, develop your technical skills in realistic hacking labs, and conduct professional security audits and penetration tests.
You hold a Federal Professional Certificate, a Federal Diploma, a HF Diploma, or a university degree (university/university of applied sciences, Bachelor’s or Master’s) and have at least 3 years of relevant professional experience. Admission based on your application materials («sur dossier») is also possible. A postgraduate diploma from a Higher Educational Institution (NDS HF) alone does not meet the formal admission requirements
Certificate Project
As part of your certificate project, you will conduct an OSSTMM-compliant security audit of an infrastructure. Together with the supervising instructors, you will define the scope and parameters of the audit. You will then apply the methods and techniques acquired in the CAS program to a real-world penetration testing scenario, document the results, and derive appropriate recommendations for action.
You will present your certificate project and discuss your findings in greater depth during a subsequent expert discussion. The project is considered passed with a grade of 4.0 or higher.
ISO/IEC 27001 Foundation
The «PECB ISO/IEC 27001 Foundation» certification fully complies with the requirements of the PECB Examination and Certification Program (ECP).
Exam Format
Online, multiple-choice questions, number of questions: 40, duration: 60 minutes, language: German, closed book
Exam Language & Exam Duration
If you choose an exam language that is not your native language, you will receive an additional 10 minutes.
If you have completed the training but did not pass the exam, you may retake it once free of charge within 12 months of the original exam date. To do so, please contact support@pecb.com.
Exam Information
As part of the course, you will take the «Certified OSSTMM Professional Security Tester» exam. The exam lasts 3 hours and includes theoretical questions about OSSTMM as well as practical tasks in the field of security testing. You can take the exam on your own laptop or on devices provided by digicomp.
Certification
The OPST certification is recognized for the «Master in Information Technology Security» degree offered by La Salle University in Barcelona. This university is part of the international La Salle educational network, which includes, among others, Manhattan College in New York and La Salle University in Philadelphia. All OPST certificates bear both the ISECOM and La Salle seals as a mark of their high prestige.
Your Added Value at a Glance
✅ Over 100 hours of hands-on labs
✅ Real-world security audit as a final project
✅ Two international certifications included
✅ Current topics such as AI security and AI-powered attacks
✅ Instruction from active cybersecurity professionals
✅ 15 ECTS credits
✅ Ability to use professional hacking tools and Kali Linux™
The CAS and ECTS credits are awarded by the Zurich University of Applied Sciences (HWZ).