HackSpaceCon - ARTOC Training (Hybrid)
2026-05-06 08:00 - 2026-05-07 17:00 (America/New_York)
This course is designed to demonstrate the types of vulnerability commonly found in space applications, from mission control software to onboard software. We’ll dig into previously reported vulnerabilities, how to identify them, and how they could affect a mission if exploited. By the end of it, trainees should have acquired enough knowledge to be able to identify common vulnerabilities, assess their severity, and recommend mitigations, and practical fixes to reduce their risk.

OADOC Training (Hybrid) - NorthSec
2026-05-11 09:00 - 2026-05-13 20:59
The Offensive Active Directory Operations Certification (OADOC) equips students with a comprehensive, hands-on understanding of how to identify and exploit modern Active Directory misconfigurations across both Windows and Linux environments. Designed for today’s mixed and evolving enterprise ecosystems, the course covers forest functional levels from Windows Server 2016 through Server 2025, ensuring every technique you learn is relevant, current, and applicable across real-world infrastructures. You’ll develop the ability to execute multi-platform attacks, leverage cutting-edge AD abuse strategies, and customize modern, signed, and stealthy tooling for enumeration and exploitation.
The training also dives deep into bypassing today’s most common defensive mechanisms, including LDAP obfuscation, channel binding and signing protections, and SMB-based controls, while reinforcing strong operational security practices. Throughout the course, you’ll learn to enumerate and exploit enterprise systems such as Kerberos-integrated SSH, SCCM, and MSSQL using both established and novel attack techniques. OADOC delivers not only technical skill but also the instructor team’s real-world tradecraft, operational insights, and guidance on clearly communicating attack paths and realistic remediation strategies to clients and stakeholders.

ODPC Training (Hybrid) - NorthSec
2026-05-11 09:00 - 2026-05-13 23:59
By enrolling in the Offensive Development Practitioner Certification (ODPC), you’ll gain:

Understanding Modern Defenses: Learn to overcome modern security mechanisms through live, interactive labs with instructor guidance.
You’ll get hands-on experience in Terraform labs, PE file conversions, and advanced process injection strategies.
Advanced Offensive Techniques and Cobalt Strike: Develop expert-level skills in offensive development, including deep dives into Cobalt Strike C2 frameworks, sandbox detection evasion, and EDR bypass strategies.
Custom Payload Development: Learn to build and deploy custom reflective DLL loaders, bypass AMSI and ETW protections, and create tailored offensive payloads, with instructors guiding you through each step.

ASCPC Training (Hybrid) - NorthSec
2026-05-11 09:00 - 2026-05-13 23:59
The ASCPC On-Demand course blends offensive and defensive techniques across a variety of CI/CD platforms, focusing on practical, hands-on skills. Students will explore vulnerabilities, exploit misconfigurations, and learn how to defend against real-world CI/CD threats.
Key focus areas include:

GitHub Actions Security: Explore context injection, pull request abuse, artifact poisoning, and misconfigured OIDC workflows.
CircleCI Misconfigurations: Hijack pipeline configurations and exploit insecure runner setups.
AWS CodeBuild Exploitation: Abuse IAM roles, environment variables, and pipeline triggers to escalate privileges and exfiltrate secrets.
Docker Registry Attacks: Inject malicious images and perform credential harvesting through poorly secured registries.
Kubernetes Integration Risks: Compromise clusters via CI/CD, enumerate resources, and escalate access across pods and containers.
Azure DevOps Abuse: Leak credentials, escalate privileges, and abuse service connections in insecure Azure DevOps pipelines.
Each module is supported by guided labs that simulate real CI/CD environments and include both offensive attack paths and defensive remediation strategies.

OGOTC Training (Hybrid) - NorthSec
2026-05-11 09:00 - 2026-05-13 23:59
Offensive GCP Operations & Tactics Certification (OGOTC) is an hands-on course designed to equip security professionals with the skills to assess and exploit vulnerabilities in Google Cloud Platform (GCP) environments. This course covers the full attack lifecycle, from initial access and enumeration to privilege escalation, lateral movement, and post-exploitation techniques. Participants will learn to abuse misconfigured IAM roles, exposed APIs, and metadata services, as well as exploit weak permissions and default configurations. The course also includes a deep dive into Kubernetes attacks, highlighting how to compromise and move within Kubernetes clusters. Real-world scenarios, including credential theft, phishing, and service account hijacking, will be explored. Defensive strategies and mitigation techniques will be provided to help secure GCP environments against these threats.
