SEC660: Advanced Penetration Testing, Exploit Writing, and Ethical Hacking

• Slide 1 of 2
  James Shewmaker

  James Shewmaker

  James Shewmaker

  Principal Instructor

  James Shewmaker, founder of Bluenotch Corporation, has over two decades of technical experience in IT, primarily developing appliances for automation and security for broadcast radio, internet, and satellite devices.

  Read more about James Shewmaker
• Slide 2 of 2
  Stephen Sims

  Stephen Sims

  Stephen Sims

  Fellow

  Stephen Sims, an esteemed vulnerability researcher and exploit developer, has significantly advanced cybersecurity by authoring SANS's most advanced courses and co-authoring the "Gray Hat Hacking" series.

  Read more about Stephen Sims

Relevant Job Roles

Vulnerability Researcher & Exploit Developer

In this role, you will work to find 0-days (unknown vulnerabilities) in a wide range of applications and devices used by organizations and consumers. Find vulnerabilities before the adversaries!

Vulnerability Assessment

This role tests IT systems and networks and assesses their threats and vulnerabilities. Find the SANS courses that map to the Vulnerability Assessment SCyWF Work Role.

Vulnerability Analysis (OPM 541)

Responsible for assessing systems and networks to identify deviations from acceptable configurations, enclave policy, or local policy. Measure effectiveness of defense-in-depth architecture against known vulnerabilities.

Exploitation Analyst (DCWF 121)

Collaborates to identify access and collection gaps using cyber resources and techniques to penetrate target networks and support mission operations.

Application Pen Tester

Application penetration testers probe the security integrity of a company’s applications and defenses by evaluating the attack surface of all in-scope vulnerable web-based services, clientside applications, servers-side processes, and more. Mimicking a malicious attacker, app pen testers work to bypass security barriers in order to gain access to sensitive information or enter a company’s internal systems through techniques such as pivoting or lateral movement.

Cyber Operations Planner (DCWF 332)

Coordinates cyber operations plans, working with analysts and operators to support targeting and synchronization of actions in cyberspace.

Penetration Tester

Assess the effectiveness of security controls, reveals and utilise cybersecurity vulnerabilities, assessing their criticality if exploited by threat actors.

Red Teamer

In this role you will be challenged to look at problems and situations from the perspective of an adversary. The focus is on making the Blue Team better by testing and measuring the organization’s detection and response policies, procedures, and technologies. This role includes performing adversary emulation, a type of Red Team exercise where the Red Team emulates how an adversary operates, following the same tactics, techniques, and procedures (TTPs), with a specific objective similar to those of realistic threats or adversaries. It can also include creating custom implants and C2 frameworks to evade detection.

• Slide 1 of 3
  Absolutely amazing stuff. I couldn't ask for more in SEC660. The wealth of knowledge is just mind-blowing. The extra materials presented in the course will definitely keep me going for the next couple of months.

• Slide 2 of 3
  SEC660 has been nothing less than excellent. Both the instructor and assistant are subject-matter experts who have extensive knowledge covering all aspects of the topics covered and then some.

• Slide 3 of 3
  No frills and goes right to the point. The first day alone is what other classes spend a full week on.