Winter School 2027
Sharpen Your Cybersecurity Skills
Immerse yourself in the world of cybersecurity and master the fundamentals of offensive security at Epitech Paris!
During this intensive two-week program, you will explore reconnaissance, web application attacks, Active Directory exploitation, privilege escalation, password cracking, Kerberos abuse and advanced post-exploitation techniques through hands-on labs and realistic scenarios.
Learn to use industry-standard tools while collaborating with international students. You will also discover French language and culture through language classes and curated cultural activities in the heart of Paris.
Program
Ready to sharpen your cybersecurity skills and explore offensive security?
Join the Epitech Winter School 2027 in Paris for an intensive two-week program designed to help you develop practical cybersecurity skills. Through hands-on labs and real-world-inspired scenarios, you will learn to identify vulnerabilities, exploit common weaknesses, navigate Linux and Windows environments, and understand advanced attack techniques.
From reconnaissance and web application attacks to Active Directory exploitation, password cracking and privilege escalation, this program combines technical learning with practical exercises in an international environment.
Delivered in English, the program includes 70 estimated hours of learning over two weeks and awards 4 credits.
Agenda outline
Module 1 — Recon & Web Attacks
Description: Setup (Exegol, CTFd) followed by enumeration, port scanning and service attacks, then coverage of major web vulnerabilities and exploitation tools.
Technical skills and tools: Enumeration, port scanning, FTP/SMB/ FreeRDP/MSSQL/WinRM attacks, SQL injection, XSS, LFI, file upload; ffuf, BurpSuite, sqlmap.
Module 2 — Shells & Exfiltration
- Description: Shell types and stabilization, especially reverse shells, followed by data exfiltration techniques and alternative remote access methods.
- Technical skills and tools: Webshells, bind shells, reverse shells, pty stabilization, base64/wget/curl/nc exfiltration; psexec, evil-winrm, xfreerdp.
Module 3 — Password Cracking & Pivoting
Description: Password cracking techniques across various file types, followed by pivoting methods to reach additional machines.
Technical skills and tools: John the Ripper, Hashcat, rainbow tables, bruteforce, wordlist mutation, ZIP/Office/ KeePass cracking; SSH port forwarding, proxychains, ligolo-ng.
Module 4 — AD Enumeration & Poisoning
Description: Active Directory enumeration and common AD weaknesses, followed by network poisoning and deeper permission-based enumeration.
Technical skills and tools: BloodHound, nxc, password spraying, Kerbrute, Kerberoasting, Responder/ Inveigh; GenericAll, GenericWrite, DCSync, WriteOwner, AddMember, ForceChangePassword.
Module 5 — Privilege Escalation
Description: Linux privilege escalation to root, followed by Windows privilege escalation to SYSTEM using user rights abuse.
Technical skills and tools: Sudo abuse, SUID, capabilities, cron and kernel exploits, LinPEAS and pspy
SeImpersonate and SeDebug, DLL injection
Module 6 — Pass the Hash/Ticket & Kerberos Abuse
Description: Pass-the-Hash and Pass-the-Ticket attacks and Kerberos fundamentals, followed by advanced Kerberos abuse with NTLM disabled.
Technical skills and tools: PtH, PtT, psexec, Rubeus, getTGT, Mimikatz; Targeted Kerberoasting,
Shadow Credentials, AS-REP Roasting.
Module 7 — Advanced AD Attacks & Review
Description: Advanced Active Directory attack techniques followed by a comprehensive review of the program’s content.
Technical skills and tools: Silver/Golden Ticket, delegation abuse, GMSA attacks.
Module 8 — Final Exam
Description: Comprehensive exam covering all concepts from Days 1–7.
Technical skills and tools: Cumulative assessment of the concepts and techniques covered throughout the program
Practical information
When?
- Program dates: January 4–15, 2027
- Duration: 2 weeks
- Schedule: Monday to Friday, 9:00 AM–6:00 PM
- Estimated workload: 70 hours
- Language of instruction: English
- Location: Paris, France
- Credit: 4 credits
How much?
- Standard fee: €2,300
- Students from Epitech partner institutions: €2,000
- Program fee without accommodation: €1,500
What’s included?
- French language courses
- Cultural activities
- Accommodation
- Breakfast
- Welcome and farewell events
Admission requirements
Computer Science or Information Technology Background: Applicants should possess a background in Computer Science or Information Technology. Ideally, candidates should have basic programming skills, with a minimum of one year of experience in programming.
English Proficiency: Acceptable English proficiency levels include CECRL B2, IELTS 5.5/6, TOEIC 600, or TOEFL IBT 65 or attestation from their home university validating their proficiency in English.
Participants must bring a laptop – all other devices and software will be provided by Epitech.
Program location
Paris (first 2 weeks)
Epitech Paris
40 rue du Docteur Roux
75015 Paris, France
Winter School 2026 Application form
Before filling in this form, please make sure you have the following documents ready:
- copy of your passport
- copy of your university transcripts translated in English
- certificate of English language proficiency (TOEFL IBT: 65 / IELTS: 5.5/ TOEIC: 600/ CECRL B2/Internal test or certificate of English proficiency from your home institution)
- short statement explaining why you want to participate in our Winter School
Be assured that all the information you will share with us will remain strictly private