Offensive services
Security Training
Janreth turns its offensive work into practical, instructor-led training. Your developers, engineers, and testers learn how real attacks work by doing them, in a safe environment.
01Overview
Janreth transfers the work of real engagements into practical, instructor-led courses. Your team learns offensive security by doing it: how attackers find and exploit vulnerabilities, and how to stop them. Courses suit everyone from developers and security enthusiasts to working testers and red teamers.
Every course is hands-on: the sessions are built around live exercises against deliberately vulnerable systems, so the skills stick, and the depth and pace are tailored to your team's level.
What you get
- 01Instructor-led courses, delivered remote or onsite
- 02Hands-on labs against deliberately vulnerable systems
- 03Courses for developers, engineers, and aspiring testers
- 04Tailored to your stack and your team's level
- 05Real attack techniques, mapped to OWASP and MITRE ATT&CK
- 06Slides, labs, and exercises your team keeps
02Challenges
Why training matters
Attackers do not stand still
Technologies and attack techniques change constantly, and the vulnerabilities change with them. Teams that stop learning fall behind the people trying to break in.
You cannot defend what you do not understand
Developers and engineers cannot stop an attack they have never seen. Understanding how a real attacker thinks is the fastest way to build software that resists them.
Awareness is uneven
Every team is a mix of security awareness, and the weakest link is where an attacker gets in. Training has to meet people where they are and raise the whole team.
03Courses
The courses
Every course is instructor-led and tailored to your team. Formats are a guide; the scope, depth, and pace are shaped with you.
01
Web & API Pentesting
Learn how vulnerabilities in web applications and APIs are found and exploited. A largely manual approach, supported by the tools professionals actually use.
- Format
- 2 to 5 days, tailored
- Delivery
- Instructor-led, remote or onsite
- Level
- Beginner to intermediate
What you will cover
- The OWASP Top 10
- Working with Burp Suite
- Manual web application testing
- API testing and abuse
- Authentication and access control
- Chaining vulnerabilities into real impact
02
Red Teaming
Think and operate like a targeted attacker. Gain initial access, move through a network, and reach the objective while staying ahead of the defenders.
- Format
- 3 to 5 days
- Delivery
- Instructor-led, remote or onsite
- Level
- Intermediate
What you will cover
- The MITRE ATT&CK framework
- Gaining initial access
- Command and control
- Lateral movement and discovery
- Persistence and evading defenses
- Active Directory attacks
03
Malware Development & Analysis
Understand malware from both sides: build custom tooling for authorized red team engagements in a controlled lab, and analyze real samples to reverse them and improve detection.
- Format
- 3 to 5 days
- Delivery
- Instructor-led, remote or onsite
- Level
- Advanced
What you will cover
- Static and dynamic malware analysis
- Reverse engineering fundamentals
- Injection, persistence, and evasion techniques
- Building custom tooling for authorized red teams
- Detection engineering: catching what you build
- Safe handling in a controlled lab
04
Binary Exploitation & Exploit Development
Go below the application layer. Learn how memory-corruption bugs are found and turned into working exploits, and how modern mitigations change the game.
- Format
- 3 to 5 days
- Delivery
- Instructor-led, remote or onsite
- Level
- Advanced
What you will cover
- Memory corruption fundamentals: stack and heap
- Stack-based buffer overflows
- Return-oriented programming (ROP)
- Heap exploitation basics
- Bypassing modern mitigations (ASLR, DEP, stack canaries)
- Writing and debugging a working exploit
05
Hardware Hacking & Physical Security
See the gadgets attackers actually carry, and what they do with them. From malicious USBs and cloned access cards to rogue radios, this course shows how physical and hardware attacks work, and how your team spots and stops them.
- Format
- 1 to 3 days
- Delivery
- Instructor-led, onsite or remote
- Level
- All levels
What you will cover
- Attack gadgets attackers use (Flipper Zero, HackRF, USB implants)
- Malicious USB and keystroke injection
- RFID and access-card cloning
- Rogue Wi-Fi, Bluetooth, and RF attacks
- Keyloggers and covert spy gadgets
- Employee awareness: spotting and stopping physical threats
06
Security for Developers
A focused workshop that shows your engineers how attackers think, so they catch the vulnerabilities that matter before they ship.
- Format
- Half a day to 2 days
- Delivery
- Workshop, remote or onsite
- Level
- All levels
What you will cover
- Secure coding fundamentals
- Threat modeling your own system
- Common vulnerabilities in your stack
- The attacker's mindset
- Reviewing code for security
- Fixing the root cause, not the symptom
04Approach
Why train with Janreth
Learn from a real attacker
Taught by someone who breaks systems for a living, so your team learns how attacks actually work, not just the theory.
Level up the whole team
Turn developers and engineers into people who spot and stop the vulnerabilities that matter, before they reach production.
Hands-on, not slideware
Every course is built around live exercises against deliberately vulnerable systems, so what your team learns sticks.
05Begin
Turn your team into a harder target.
Janreth will shape a course around your team, your stack, and the level you are at.