sectechs - Cyber Security Organization

Red Team Training

For the first time ever, there is a training course that is more like an actual live Red Team Operation. The training converges Physical Infiltration/Security, Social Engineering and Penetration testing for full-training exercises with students breaking into actual offices/buildings (legally, of course), hacking systems/apps, and social engineering real people, face to face. There are no actors and there is no other information security training like this today.
The goal of the training is to immerse the student in as much of a real Red Team Operation as possible. Soup to nuts, the instructors will guide students as they undergo a full-cycle Red Team Operation from the planning phase to the reporting phase. At every step, RedTeam’s experiences, techniques, tactics and procedures will be integrated and make up the core foundation of the entire course.
RedTeam Security has developed a unique training program that includes paid, but unknowing participants, as real life targets. The students will exercise their newly acquired skills and tactics by carrying out social engineering attacks in-person, by phone and over email. Covert entry skills and other physical security attacks (ie: lock picking, evasion, diversions, physical pretexting) are simulated against surrounding and cooperating offices and/or buildings. No Red Team Operation goes 100% as planned and this approach provides students with priceless experience without the consequences of a failed Operation. It doesn’t get any more real than this.

Physical Penetration Testing

Physical security is an oft-overlooked component of data and system security in the technology world. While frequently forgotten, it is no less critical than timely patches, appropriate password policies, and proper user permissions. You can have the most hardened servers and network but that doesn’t make the slightest difference if someone can gain direct access to a keyboard or, worse yet, march your hardware right out the door.
Those who attend this session will leave with a full awareness of how to best protect buildings and grounds from unauthorized access, as well as how to compromise most existing physical security in order to gain access themselves. Attendees will not only learn how to distinguish good locks and access control from poor ones, but will also become well-versed in picking and bypassing many of the most common locks used in all over the world in order to assess their own company’s security posture or to augment their career as a penetration tester.

Black Box Penetration Testing

As ethical (white hat) hackers, we emulate an attacker by utilizing similar techniques to perform reconnaissance, identify vulnerabilities, and break into your systems. Unlike an attacker, however, we stop our test before exposing sensitive data or doing harm to your environment. With a Black Box Penetration Test we have unauthenticated access and have little prior knowledge, except the IP Address, domain name, or URL, about the systems in scope.
A Black Box Penetration Test is commonly used as an external penetration test against an organization’s Internet-facing systems