Module 1: Planning and Scopintìg Penetration Tests
Introduction to Penetration Testing Concepts
Plan a Pen Test Engagement
Scope and Negotiate a Pen Test Engagement
Prepare for a Pen Test Engagement
Module 2: Conducting Passive Reconnaissance
Gather Background Information
Prepare Background Findings for Next Steps
Module 3: Performing Non-Technical Tests
Perform Social Engineering Tests
Perform Physical Tests on Facilities
Module 4: Conducting Active Reconnaissance
Scan Networks
Enumerate Targets
Scan for Vulnerabilties
Analyze Basic Scripts
Module 5: Analyzing Vulnerabilities
Analyze Vulnerability Scan Results
Leverage Information to Prepare for Exploitation
Module 6: Penetrating Networks
Exploit Network-Based Vulnerabilities
Exploit *nlx-Based Vulnerabilites
Module 8: Testing Applications
Exploit Web Application Vulnerabilities
Test Source Code and Compiled Apps
Module 9: Completing Post-Exploit Tasks
Use Lateral Movement Techniques
Use Persistence Techniques
Use Anti-Forensics Techniques
Module 10: Analyzing and Reporting Pen Test Results
Analyze Pen Test Data
Develop Recommendations for Mitigation Strategies
Write and Handle Reports
Conduct Post-Report-Devlivery Activities