AI - SEC535: Offensive AI: Attack Tools & Techniques

Prepare for AI-enabled cyber threats by mastering the offensive AI tools adversaries already deploy. This course equips penetration testers with cutting-edge AI techniques to automate reconnaissance, bypass security guardrails, and deliver AI-driven attacks.

Today's threat landscape has fundamentally changed. AI-driven attacks shatter barriers that once kept unsophisticated threat actors at bay. Stay ahead by adopting attacker tools, tactics, and techniques before adversaries exploit them against your organization.

Through 14 immersive labs, apply real-world TTPs across three focused days:

Day 1: AI-Powered Reconnaissance and Social Engineering

• Gather OSINT using AI-enhanced Spiderfoot and Bbot
• Build RAG-powered pentest assistants for network enumeration
• Exploit vulnerabilities with AI-enhanced Metasploit
• Execute SQL injection attacks with AI assistance

Day 2: Deepfakes and Vulnerability Discovery

• Craft convincing AI-powered phishing content
• Clone voices with ElevenLabs for vishing attacks
• Generate image and video deepfakes
• Perform AI-assisted patch diffing and vulnerability analysis

Day 3: Malware Engineering and Evasion

• Write malware with AI assistance
• Implement hiding, obfuscation, and trojanization techniques
• Bypass security controls using machine learning
• Deploy living-off-the-land tactics enhanced by AI

Labs include: AI-Powered Reconnaissance, Automated Nmap Analysis with N8N and RAG, Metasploit Reengineered, AInjection SQL Exploits, Lure Lab Phishing Range, Voice Cloning, AI Dialed Deception Vishing Range, and Advanced Malware Writing.

Foster, Certified Instructor Candidate, brings nearly a decade of offensive security and AI research experience as a frequent conference speaker and published author.

Earn GIAC GOAA certification (exam sold separately). 18 CPE credits.