Training Level: Intermediate

Training Objectives:
Take your web application pen-testing skills to the next level with this intermediate-level training course tailored for professional pen testers, bug hunters, and security enthusiasts. Rooted in the principles of the Open Web Application Security Project (OWASP) Testing Guide, this comprehensive course equips you with a structured and practical approach to uncovering vulnerabilities. By mapping workflows, understanding the intricate components of web applications, and utilizing open-source tools, you'll sharpen your ability to identify critical bugs with precision and efficiency. Designed for those actively engaged in pentest projects, this training is your key to becoming a more proficient and impactful web application pentester.

Training Level: Intermediate

Training Objectives:
A hands-on focused, lab work driven training built on the identification, discovery and exploitation of misconfigurations in AWS and Google Cloud. The training will take participants through setting up of their own private customized environments, security misconfigurations within them and their exploitation to achieve attacker objectives.

Training Level: Intermediate

Training Objectives:
In an era where a larger portion (~80%) of software development activities come from third parties, the security of your software supply chain is more critical than ever. Software isn't built in silos anymore. It's built on a complex web of dependencies, with each component sourced from different providers across the globe. This opens up a myriad of vulnerabilities, making your software supply chain a prime target for cybercriminals. In this course, we focus on holistic learning around attacking and then securing the software supply chain. / Section 1 is focused on understanding and exploiting supply chain issues. Section 2 focuses on the various fixes and security configurations to protect the supply chain. We’ll get our hands dirty by applying these strategies to secure the developer environments, code repositories, CI/CD pipelines, and deployment environments. By the end of the course, we will be well-equipped to transform our software supply chain from a security liability to a valuable asset.

Training Level: Intermediate

Training Objectives:
This training agenda is designed to build a strong foundation in the core concepts of threat hunting, enabling participants to think like defenders and proactively identify suspicious activity across environments. The program emphasizes practical, real-world detection skills and ensures participants become fluent in the three most important languages used in modern security operations: Sigma (Generic), SPL (Splunk), and KQL (Azure Sentinel/Defender).

Training Level: Intermediate

Training Objectives:
This course teaches participants how to exploit and weaponize weaknesses in Enterprise AI systems - from prompt injections and model poisoning to supply chain and agentic system compromises. Through hands-on labs and real-world case studies, students will learn the techniques attackers use to break AI models, Agentic Systems, and AI infrastructures at scale.

Training Level: Intermediate

Training Objectives:
Modern breaches often start not from sophisticated zero-days, but from simple vulnerabilities hiding in plain sight within source code. Read. Break. Fix: Secure Code Review in Practice is an intermediate, hands-on training designed to help security professionals and developers think like attackers while reviewing code like defenders. This course focuses on practical, real-world secure code review techniques used to uncover high-impact vulnerabilities before they reach production. Participants will learn how attackers examine source code to uncover flaws in its logic and flow. The training bridges the gap between offensive security and defensive engineering, showing how code review can become a powerful security control rather than a checkbox activity. Through guided examples and hands-on exercises, attendees will review vulnerable code across different application stacks, exploit the flaws from an attacker’s perspective, and then implement secure fixes. The goal is not only to find vulnerabilities but to understand why they occur and how to prevent them at the design and development level. By the end of this training, participants will be able to confidently identify security weaknesses in source code, prioritize risk effectively, and collaborate with engineering teams to remediate issues in a practical and scalable manner.