Introduction to Pen Testing

Day 1: Pen Testing Introduction

This session gives a brief history and overview of the  purpose and different types of penetration testing. We'll also discuss the goals and outcomes of penetration testing, rules of engagement that govern the field, data collection and reporting methods.

Topics

Red teaming, Vulnerability scanning, Attack cycles, Change control, Testing frameworks, Exploit techniques, Stakeholder engagement.

Day 2: Scanning and Enumeration

This session looks at the techniques and tools used in network scanning such as ARP sweeping, DNS scanning, DNS enumeration and port scanning. We'll also run through several practical lab-based exercises utilising Ettercap and Kali Linux.

Topics

Networking scanning, Google hacking database vulnerability scanning, Netcat, Nikto, Golismero tool, Dnswalk, Dnsrecon, Fierce Script, Thehavester.

Day 3: Exploitation Techniques

We continue exploring network exploitation techniques utilising the Metasploit framework, modules and shellcode payloads. Afterwards, we’ll see how the framework integrates with Postgresql database within Kali Linux, and have a lab walkthrough on MSF3 Windows System.

Topics

Metasploit framework, Ruby programming, Exploit code, Auxiliary modules, Exploit modules, Post modules, Shellcode, Listeners, Encoders, Social Engineer Toolkit.

Day 4: Website Penetration Testing

This session will broaden your knowledge of web-based attacks and provide a greater understanding of how dangerous and difficult they are to identify and track. You'll gain hands-on experience using the same tools and processes attackers follow in simulated online scenarios.

Topics

Injection attacks, Scripting attacks, Sensitive information exposure, Cross site scripting, SQLi, SQLMAP, Web scanners, directory brute force tools.

Day 5: Internal Testing & Social Engineering

This session focuses on how social engineering (SE) campaigns are formed and will introduce some of the software and methods used for these attacks. We'll touch on the use of SMB Protocol, MimiKatz, Responder Python Script and Social-Engineer Toolkit.

Topics

SMB Protocol with Kali Linux, MimiKatz Post exploit tool, Responder Python Script, Browser exploitation framework.

Please download the Introduction to Pen Testing course PDF.