Mentor : Shahriman @ Chaah, GPEN
Pakej Mentor Web Security dan Pentest selama 60 minit + 10 minit sesi pengenalan percuma. 
Boleh dijalankan satu sesi penuh atau maksimum 2 sesi dengan 35 minit setiapnya.
Kaedah dan Pelaksanaan Sesi Mentor ini akan dibincangkan dalam sesi pertama. 
Pelaksanaan secara online semasa PKP ini dengan Zoom, Whatsapp, Telegram , Call dan Email. 
Kepakaran :  Web Security / Web Pentest / Server Security / Pentest 
Pensijilan :  GIAC® Penetration Tester (GPEN)

• Award: 2006, 2nd Place in Uitm I­hack Competition 2006
• Award: 2006, 4th place Hack in the Box Competition 2006
• Award: 2007, 1st place and 2nd place in Uitm I­hack Competition 2007
• Award: 2008, 1st Place and 2nd place in Uitm I­Hack Competiton 2008
• Award: 2010, Head of Jury for Uitm I­Hack Competition 2010
• Award: 2010, Judge for Johor Technology Carnival Day Hacking Competition
• Award: 2011, Runner up for Cyberlimpic Challenge by Hacker Halted for APAC region.
• Award: 2012, Judge for Johor Technology Carnival Day Hacking Competition
• Award: 2012, SANS Netwar (Amsterdam) Winner
• Award: 2013, Uitm I­Hack CTF Game Architect
  
  

Koordinator Sesi Mentor ialah Nazrol Hafiz
Ada sebarang soalan, boleh bertanya Nazrol secara whatsapp di https://wa.me/60133583553. Terima kasih.

Mentor : Ts. Amir Haris Ahmad
Pakej Mentor DNS / DNS Security selama 60 minit + 10 minit sesi pengenalan percuma. 
Boleh dijalankan satu sesi penuh atau maksimum 2 sesi dengan 35 minit setiapnya.
Kaedah dan Pelaksanaan Sesi Mentor ini akan dibincangkan dalam sesi pertama. 
Pelaksanaan secara online semasa PKP ini dengan Zoom, Whatsapp, Telegram , Call dan Email. 
Kepakaran :  DNS / DNS Security / IT Security 
Persijilan  :  Certified  DNS/Bind Associate /  CNE6 / IPv6 / Google Cloud Professional /  GCIH / GSEC /  LPI 
                   MSc Computer Networking, UiTM 

Koordinator Sesi Mentor ialah Nazrol Hafiz
Ada sebarang soalan, boleh bertanya Nazrol secara whatsapp di https://wa.me/60133583553. Terima kasih.

Mentor : Aalim Rozli, GPEN, GWAPT, OSCP
Pakej Mentor Mobile App dan Mobile App Security Pentest selama 60 minit + 10 minit sesi pengenalan percuma. 
Boleh dijalankan satu sesi penuh atau maksimum 2 sesi dengan 35 minit setiapnya.
Kaedah dan Pelaksanaan Sesi Mentor ini akan dibincangkan dalam sesi pertama. 
Pelaksanaan secara online semasa PKP ini dengan Zoom, Whatsapp, Telegram , Call dan Email. 
Kepakaran :  Mobile Security / Mobile App Pentest / Web Security / Android /  Web Pentest / Server Security / Pentest 
Pensijilan :  GIAC® Penetration Tester (GPEN),  GIAC® Web Application Penetration Tester (GWAPT), 
                   Offensive Security Certified Professional (OSCP).

Koordinator Sesi Mentor ialah Nazrol Hafiz
Ada sebarang soalan, boleh bertanya Nazrol secara whatsapp di https://wa.me/60133583553. Terima kasih.

Web Penetration Testing (Pentest)
Web Application Security Assessment 
Vulnerability Report & Recommendations

URL        :  1  
Tempoh  :  1 Hari ( 6 Jam ) 
Pentester  :   GIAC® Penetration Tester (GPEN)  atau GWAPT 

Server Infrastructure Penetration Testing (Pentest)
Server Infrastructure Security Assessment 
Vulnerability Report & Recommendations

Server     :  1  
Tempoh  :  1 Hari ( 6 Jam ) 
Pentester  :   GIAC® Penetration Tester (GPEN)  atau GWAPT 

Network Penetration Testing (Pentest)
Network  Security Assessment 
Vulnerability Report & Recommendations

IP      :  1  
Tempoh  :  1 Hari ( 6 Jam ) 
Pentester  :   GIAC® Penetration Tester (GPEN)  atau GWAPT 

DNS Penetration Testing (Pentest)
DNS  Security Assessment 
Vulnerability Report & Recommendations

IP      :  1  
Tempoh  :  1 Hari ( 6 Jam ) 
Pentester  :   Amir Haris Ahmad
Kepakaran :  DNS / DNS Security / IT Security 
Persijilan  :  Certified  DNS/Bind Associate /  CNE6 / IPv6 / Google Cloud Professional /  GCIH / GSEC /  LPI 
                   MSc Computer Networking, UiTM 

Source Code Review
Security Code Review 
Vulnerability Report & Recommendations

Tempoh  :  5 Hari ( 30 Jam ) 
Pentester  :   GIAC® Penetration Tester (GPEN)  atau GWAPT 

Trainer : Shahriman @ Chaah, GPEN
SelfStudy dan Learning Support - video, material latihan & sijil disediakan.
Video Training sekitar 6 jam
Akses kepada Trainer jika ada sebarang pertanyaan. 

Course Outline Web Application Pentest
1. Introduction to Web Application Security.
2. Identifying The Web Stack.
3. Attacking the Web based on owasp top 10

Student akan dibekalkan dgn vulnerable app dan burp hash

Trainer : Shahriman @ Chaah GPEN
SelfStudy dan Learning Support - video, material latihan dan sijil disediakan.
Video Training sekitar 6 jam
Akses kepada Trainer jika ada sebarang pertanyaan. 

Course Outline Server Infrastructure Pentest
– Information Gathering
– VA Scanning
– Exploitation
– Data Harvesting
– Maintaining Access

Trainer : Shahriman @ Chaah, GPEN
SelfStudy dan Learning Support - video, material latihan dan sijil disediakan.
Kursus Web Application Pentest  / Kursus Kursus Server Infrastructure Pentest

Trainer : Shahriman @ Chaah, GPEN
Yuran asal: RM90 Promosi : RM50
SelfStudy dan Learning Support - video, material latihan dan sijil disediakan.
Video Training sekitar 5 jam
Akses kepada Trainer jika ada sebarang pertanyaan. 

Course outline:
1. Belajar bagaimana C programming works
2. Basic Introduction to Immunity Debugger
3. Introduction to IDA Pro.
4. Cara cheat dalam game.
5. Create Trainer/Patcher.
6. Exploit Simple BufferOverflow Program

Trainer : Dr Syed Zainudeen
Yuran asal: RM90 Promosi : RM50
SelfStudy dan Learning Support - video, material latihan dan sijil disediakan.
Video Training sekitar 6 jam
Akses kepada Trainer jika ada sebarang pertanyaan. 

Your server was hacked recently?

How do you deal with it? This hands-on course is about excavating your server, finding traces of attackers in the aim of fixing bugs and vulnerabilities
that allow hackers to penetrate your server.

You will be exposed to ‘the hacker way of thinking’, finding and exploiting flaws in your web applications.

Learn how to identify the type of attack that hit your server and how to
fix your code, securing your precious web application from further exploitation.

• How hackers hack
• Digital Evidence
• The art of tracing and evidence gathering
• Understanding log data
• Attack Forensics & Bug Tracing
• Log management

Trainer : Dr Syed Zainudeen
Yuran asal: RM90 Promosi : RM50
SelfStudy dan Learning Support - video, material latihan dan sijil disediakan.
Video Training sekitar 6 jam
Akses kepada Trainer jika ada sebarang pertanyaan. 

Secure Coding Practice for Web Applications

As more sites are hacked each day, developers need to know what makes it possible for hackers to infiltrate their system.

This course will expose common mistakes made by developer that leave their web application open to attack, and highlight on best practices to combat them.

Participants will learn how to embed security in their web application, as early as in the development phase of their web application development, to patching existing vulnerable web application against further attacks.

• Secure App vs Insecure App
  • 10 common security risks
  • Fixing Code Injection (server side)
  • Fixing XSS (client side)
  • Fixing Broken Authentication and Session
  • Fixing Insecure Direct Object References
  • Fixing CSRF
  • Fixing Security Misconfiguration
  • Fixing Insecure Cryptographic Storage
  • Fixing Unrestricted URL Access
  • Fixing Insufficient Transport Layer Protection
  • Fixing Unvalidated Redirects and Forwards
  • Best coding practices

Trainer : Aalim Rozli, GPEN, OSCP
SelfStudy dan Learning Support - video, material latihan  & sijil disediakan.
Video Training sekitar 6 jam
Akses kepada Trainer jika ada sebarang pertanyaan. 

This training is designed to help anyone with no prior experience in Android app penetration test. It suits anyone – working professional, school leavers, students and more.

The training will covers the following

• Introduction to Android App Pentest
  o Purpose
  o Common vulnerabilities
• Tooling
  o Virtualisation/emulators
  o Testing Frameworks/Suites
• Knowing Android app
  o Type of Android app
  o Limitation on Android version
• Obtaining Android application file
  o From store
  o Offline (ie: APK distribution)
• Introduction to ADB
  o basic ADB usage
  o ADB in pentest
• Decompile, recompile and re-sign
• Static Analysis
  o Analysis of application file
  o Reversing
  o Storage
• Dynamic Analysis
  o Request/response analysis
  o Logging
  o Storage
• Modifying an android App
  o Tampering the android application file
• Consolidating and reporting vulnerabilities