Network Attacks
This course shows network-level attacks from both sides: traffic interception, ARP and DNS spoofing, MITM and attacks on network services, together with how to detect and prevent them. Every attack is reproduced in Falcon Academy labs, in an authorised environment. You finish by learning to protect a network through segmentation, encryption and monitoring.
Course format
- Video lessons
- Theory
- Tests
- Practice
Course program
- 01
Sniffing and traffic analysis
Capturing traffic, reading packets and spotting unencrypted data.
- 02
ARP spoofing
Weaknesses in the ARP protocol and how traffic gets redirected on a local network.
- 03
MITM attacks
How an attacker positioned in the middle can observe and alter traffic.
- 04
DNS spoofing
Where forged DNS responses send users and how to detect them.
- 05
Attacks on network services
Poorly configured services, default passwords and outdated protocols.
- 06
Network defence
Segmentation, encryption, switch-level protection and attack detection.
By the end of the course
- Capture traffic and find risky patterns in it.
- Demonstrate ARP spoofing, MITM and DNS spoofing in the lab.
- Identify weak configurations in network services.
- Detect these attacks through logs and traffic.
- Recommend controls based on segmentation and encryption.
Who it is for
- Network and system administrators.
- SOC analysts who want to detect network attacks.
- Specialists preparing for penetration testing.
Requirements
- Knowledge of TCP/IP, DNS and HTTP fundamentals.
- Comfort with the Linux terminal.
- Your own computer with your tools installed and an internet connection.
Capture your first flag today
Create a free account and access 700+ hands-on challenges.