RCCE Course
Course #317

Hands-On Auth: Basics

📊 Level: Beginner
⏱️ Duration: 2 Days
🏷️ Track: AppSec
📋 Prerequisites: None
🖥️ Mode: Online Instructor-Led
📝 Course Description

RCCE students will learn authentication security including credential storage, password policies, multi-factor authentication, session management, and authentication protocol security. RCCE students will learn to evaluate authentication implementations for security weaknesses, test for credential brute-forcing vulnerabilities, assess password storage mechanisms for proper hashing and salting, verify multi-factor authentication implementation, identify session fixation and session hijacking vulnerabilities, implement secure authentication designs using modern standards, configure account lockout and adaptive authentication, and build authentication security into application development processes. This practice-intensive course emphasizes applied skills through lab exercises, real-world scenarios, and production-realistic workflows. Starting from foundational concepts, RCCE students will learn by doing, building muscle memory and practical confidence through repeated hands-on engagement. Students complete exercises that mirror actual workplace tasks, ensuring skills transfer directly to their professional roles.

🎯 Target Audience
  • Security Engineers building defensive controls
  • Security Analysts and Blue Team members
  • Systems Administrators with security responsibilities
  • GRC and Risk Professionals supporting controls
  • Professionals implementing Hands-On Auth: Basics
🧠 What You Will Learn
  • Execute hands-on tasks for hands-on auth: basics
  • Explain Course Overview fundamentals
  • Execute hands-on tasks for what you will learn
  • Execute hands-on tasks for what is authentication?
  • Execute hands-on tasks for why it matters — covering Verifying claimed identity of a user, First line of defense for systems.
  • Execute hands-on tasks for authentication factors
  • Execute hands-on tasks for something you know — covering Something You Have, Something You Are.
  • Execute hands-on tasks for something you have — covering Something You Are, Emerging: Somewhere you are (geolocation) and something you do (behavioral biometrics).
  • Explain Credential Types Overview fundamentals
  • Execute hands-on tasks for username/password
  • Execute hands-on tasks for biometric data
  • Execute hands-on tasks for password-based authentication flow
📚 Course Outline
Module 01Hands-On Auth: Basics
Module 02Course Overview
Module 03What You Will Learn
Module 04What Is Authentication?
Module 05Why It Matters
Module 06Authentication Factors
Module 07Something You Know
Module 08Something You Have
Module 09Credential Types Overview
Module 10Username/Password
Module 11Biometric Data
Module 12Password-Based Authentication Flow
Module 13User Input
Module 14Secure Flow Steps
🧪 Lab Details

All hands-on labs run on Rocheston Rose X OS. Students practice hands-on auth: basics by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.

  • Lab 1: Execute hands-on tasks for hands-on auth: basics
  • Lab 2: Explain Course Overview fundamentals
  • Lab 3: Execute hands-on tasks for what you will learn
  • Lab 4: Execute hands-on tasks for what is authentication?
  • Lab 5: Execute hands-on tasks for why it matters
📊 Skill Level
Beginner
Beginner Intermediate Advanced Expert
Duration
2 Days
🎓
Certificate
Completion
🖥️
Lab Platform
Rose X OS
👨‍🏫
Mode of Training
Online Instructor-Led
🔥
Platform
Zelfire
🐦‍⬛
Cyber Range
Raven
📓
Study Material
CyberNotes
🏆 Certificate

Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Hands-On Auth: Basics, verifiable through the Rocheston certification portal.

🔑 Student Access & Materials
  • Full access to all course materials and slide decks
  • Hands-on lab access on Rocheston Rose X OS environment
  • Access to Rocheston CyberNotes
  • Access to Rocheston Zelfire — EDR/XDR SIEM platform
  • Access to Rocheston Raven — online cyber range exercise platform
  • Access to Rocheston Vulnerability Vines AI