Dinner for All Training Attendees

DMG: Track 0 - General Session Area 1906 Deadwood Mountain Drive, Deadwood, SD, United States

One of the many perks of attending the pre-conference training is that we feed you! Training attendees are invited to join WWHF

Event Series Modern WebApp Pentesting

Modern WebApp Pentesting II w/ BB King

TBD

Modern Webapp Pentesting is unique in its approach to testing webapps. Too many courses are built around the assumption that a webapp pentester’s skills should grow along a straight line, starting with something like the OWASP Top Ten and culminating in something like Attacking Web Cryptography. Real webapps don’t follow that same path, and neither should real webapp pentesters. This course doesn’t worry about where a student falls on the imaginary scale of beginner to expert but instead focuses on finding and exploiting the kinds of issues found in real webapps today, based on the instructor’s many years of ongoing experience in testing real webapps today.

$1095
Event Series Introduction to Python

Introduction to Python w/ Joff Thyer

TBD

This course aims to teach the fundamentals of the Python programming language such that a student will gain a beginning to intermediate level of competency with the language. Labs will be presented in a Capture the Flag (CTF) style format as well as some more comprehensive programming tasks.

$1095
Event Series Hacking Active Directory

Hacking Active Directory: Fundamentals and Techniques w/ Dale Hobbs

TBD

The course simulates real world attack scenarios with a focus is on exploiting the variety of overlooked domain features and not just software vulnerabilities.

We cover topics like  AD enumeration, what tools to use, domain privilege escalation, gaining credentials, Kerberos based attacks (Golden ticket, Silver ticket and more), and Delegation abuse. The training will be conducted in a hands-on manner, with participants performing various exercises and simulations to understand how attackers can compromise Active Directory environments.

$1095

Linux Command Line for Analysts & Operators w/ Hal Pomeranz

TBD

This 16-hour course is a quick jumpstart on the Linux command-line. Start from the basics and work all the way up to command-line programming. Short learning modules and lots of practical hands-on activities will put you on the road to Linux command-line mastery. And electronic copies of everything are yours to take home, so you can continue the learning even after class is over.

$1095
Event Series Offensive Development

Offensive Development w/ Greg Hatcher & John Stigerwalt

Dive deep into cutting edge techniques that bypass or neuter modern endpoint defenses. Learn how these solutions work to mitigate their utility and hide deep within code on the endpoint. The days of downloading that binary from the internet and pointing it at a remote machine are over. Today’s defenses oftentimes call for multiple bypasses within a single piece of code.

Event Series Introduction to Pentesting

Introduction to Pentesting w/ John Strand

In this training course, we will examine the different types of penetration testing engagements and take a deep dive into establishing a repeatable testing methodology for executing quality tests. We will look at some tools of the trade to understand what they are doing under the hood, identify what separates a great finding from a good finding in reports, and really zero in on establishing your own methodology!

Event Series Advanced Endpoint Investigations

Advanced Endpoint Investigations w/ Alissa Torres

TBD

For most security teams, high operational tempo (measured in dumpster fire lumens) incentivizes analysts to stick to well-tailored playbooks that prioritize remediation at the expense of proper incident scoping and root cause analysis. Though modern endpoint security products have significantly improved host visibility, most critical incidents will require the acquisition and analysis of additional endpoint data. This course focuses on four core investigative competencies: endpoint data collection, investigative triage, incident response pivots, and root cause analysis.

$1095
Event Series Breaching the Cloud

Breaching the Cloud w/ Beau Bullock

Do you want to level up your cloud penetration testing skills? The attack surface of many organizations has changed to include third-party hosted services such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform. In this training course, hacking concepts will be introduced for each of those services.

$1095
Event Series Enterprise Attack Initial Access

Enterprise Attack Initial Access w/ Steve Borosh

Enterprises have been working tirelessly to improve their security postures through defense-in-depth approaches. Offensive teams have also been putting in long hours of research into bypassing the latest EDR’s and defensive products that keep them on their toes. Long gone “hopefully” are the days of hurdling an HTA file laced with a download cradle at a mature organization with a “Free iPad” ruse and watching your screen fill with incoming agents.

$1095
Event Series Next Level OSINT

Next Level OSINT w/ Mishaal Khan

The course progresses from basic to very advanced practical OSINT techniques that you can use in your investigative routine. No special software, operating system, or paid licenses are required. Bookmarks for all tools and websites used will be provided for quick access. 

$1095

Penetration Testing for Systems and Network Admins w/ Qasim Ijaz & Jake Nelson

Not everyone taking a pen test class will want to be a penetration tester. Hence, we have organized this class to be a well-rounded experience, allowing both aspiring red teamers and blue teamers to get the most out of it. This class will provide students with hands-on experience with all phases of a penetration test, from information gathering to reporting.  

$1095

Ransomware Attack Simulation and Investigation for Blue Teamers w/ Markus Schober

As a cyber security defender and investigator, we often just get to analyze an environment that suffered a ransomware attack after the ransomware execution, where we are trying to make our way back in time to understand the scope and initial infection vectors of a breach. However, knowing how attackers operate and having an understanding of their tools can help tremendously to conduct a more effective analysis and response and ultimately lower the impact of such attacks. This is why in this workshop we will teach you how to perform the common steps of every phase in a ransomware attack scenario as the attacker, from initial infection to impact.

$1095

Wild West Hackin’ Fest

Deadwood Mountain Grand (DMG) 1906 Deadwood Mountain Drive, Deadwood, SD, United States

Wild West Hackin’ Fest is the most happenin infosec conference on any side of the Mississippi!

Register Now!

Event Series Modern WebApp Pentesting

Modern WebApp Pentesting II w/ BB King

TBD

Modern Webapp Pentesting is unique in its approach to testing webapps. Too many courses are built around the assumption that a webapp pentester’s skills should grow along a straight line, starting with something like the OWASP Top Ten and culminating in something like Attacking Web Cryptography. Real webapps don’t follow that same path, and neither should real webapp pentesters. This course doesn’t worry about where a student falls on the imaginary scale of beginner to expert but instead focuses on finding and exploiting the kinds of issues found in real webapps today, based on the instructor’s many years of ongoing experience in testing real webapps today.

$1095
Event Series Introduction to Python

Introduction to Python w/ Joff Thyer

TBD

This course aims to teach the fundamentals of the Python programming language such that a student will gain a beginning to intermediate level of competency with the language. Labs will be presented in a Capture the Flag (CTF) style format as well as some more comprehensive programming tasks.

$1095
Event Series Hacking Active Directory

Hacking Active Directory: Fundamentals and Techniques w/ Dale Hobbs

TBD

The course simulates real world attack scenarios with a focus is on exploiting the variety of overlooked domain features and not just software vulnerabilities.

We cover topics like  AD enumeration, what tools to use, domain privilege escalation, gaining credentials, Kerberos based attacks (Golden ticket, Silver ticket and more), and Delegation abuse. The training will be conducted in a hands-on manner, with participants performing various exercises and simulations to understand how attackers can compromise Active Directory environments.

$1095

Linux Command Line for Analysts & Operators w/ Hal Pomeranz

TBD

This 16-hour course is a quick jumpstart on the Linux command-line. Start from the basics and work all the way up to command-line programming. Short learning modules and lots of practical hands-on activities will put you on the road to Linux command-line mastery. And electronic copies of everything are yours to take home, so you can continue the learning even after class is over.

$1095
Event Series Intro to Offensive Tooling

Intro to Offensive Tooling w/ Chris Traynor

TBD

This hands-on course covers a variety of offensive tools, such as Nmap, Recon-ng, Metasploit, Proxychains, Responder, and many more. Through a series of practical labs, you will gain experience in using these tools to assess the security of systems and networks.

In addition to learning how to use these tools effectively, you will also explore the ethical considerations surrounding offensive tooling, how to responsibly use these tools to protect sensitive information, and prevent cyber attacks.

$725
Event Series Offensive Development

Offensive Development w/ Greg Hatcher & John Stigerwalt

Dive deep into cutting edge techniques that bypass or neuter modern endpoint defenses. Learn how these solutions work to mitigate their utility and hide deep within code on the endpoint. The days of downloading that binary from the internet and pointing it at a remote machine are over. Today’s defenses oftentimes call for multiple bypasses within a single piece of code.

Event Series Introduction to Pentesting

Introduction to Pentesting w/ John Strand

In this training course, we will examine the different types of penetration testing engagements and take a deep dive into establishing a repeatable testing methodology for executing quality tests. We will look at some tools of the trade to understand what they are doing under the hood, identify what separates a great finding from a good finding in reports, and really zero in on establishing your own methodology!

Event Series Advanced Endpoint Investigations

Advanced Endpoint Investigations w/ Alissa Torres

TBD

For most security teams, high operational tempo (measured in dumpster fire lumens) incentivizes analysts to stick to well-tailored playbooks that prioritize remediation at the expense of proper incident scoping and root cause analysis. Though modern endpoint security products have significantly improved host visibility, most critical incidents will require the acquisition and analysis of additional endpoint data. This course focuses on four core investigative competencies: endpoint data collection, investigative triage, incident response pivots, and root cause analysis.

$1095
Event Series Breaching the Cloud

Breaching the Cloud w/ Beau Bullock

Do you want to level up your cloud penetration testing skills? The attack surface of many organizations has changed to include third-party hosted services such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform. In this training course, hacking concepts will be introduced for each of those services.

$1095
Event Series Enterprise Attack Initial Access

Enterprise Attack Initial Access w/ Steve Borosh

Enterprises have been working tirelessly to improve their security postures through defense-in-depth approaches. Offensive teams have also been putting in long hours of research into bypassing the latest EDR’s and defensive products that keep them on their toes. Long gone “hopefully” are the days of hurdling an HTA file laced with a download cradle at a mature organization with a “Free iPad” ruse and watching your screen fill with incoming agents.

$1095
Event Series Next Level OSINT

Next Level OSINT w/ Mishaal Khan

The course progresses from basic to very advanced practical OSINT techniques that you can use in your investigative routine. No special software, operating system, or paid licenses are required. Bookmarks for all tools and websites used will be provided for quick access. 

$1095

Penetration Testing for Systems and Network Admins w/ Qasim Ijaz & Jake Nelson

Not everyone taking a pen test class will want to be a penetration tester. Hence, we have organized this class to be a well-rounded experience, allowing both aspiring red teamers and blue teamers to get the most out of it. This class will provide students with hands-on experience with all phases of a penetration test, from information gathering to reporting.  

$1095

Ransomware Attack Simulation and Investigation for Blue Teamers w/ Markus Schober

As a cyber security defender and investigator, we often just get to analyze an environment that suffered a ransomware attack after the ransomware execution, where we are trying to make our way back in time to understand the scope and initial infection vectors of a breach. However, knowing how attackers operate and having an understanding of their tools can help tremendously to conduct a more effective analysis and response and ultimately lower the impact of such attacks. This is why in this workshop we will teach you how to perform the common steps of every phase in a ransomware attack scenario as the attacker, from initial infection to impact.

$1095
Event Series Conference

Steak Dinner!

DMG: Track 0 - General Session Area 1906 Deadwood Mountain Drive, Deadwood, SD, United States

Wild West Hackin’ Fest is the only conference around where you get a genuine, cowboy-style steak dinner with all the trimmings!

Event Series Conference

Calf Roping and Mechanical Bull

DMG: Track 0 - General Session Area 1906 Deadwood Mountain Drive, Deadwood, SD, United States

WWHF is the only hacking event where you can not only ride a mechanical bull, but you can even learn how to rope and tie a calf!

Event Series Conference

Wild West Photos

DMG: Track 0 - General Session Area 1906 Deadwood Mountain Drive, Deadwood, SD, United States

At WWHF, we like to have fun! And in keeping with the wild west theme, we have a photographer on site to take old time style photos! Bring your own wild west costumes, or borrow some for the shoot from the goodies we will have there for you to use!