Planning and Scoping

Attacks and Exploits

Reporting and Communication

Tools and Code Analysis

Practice Test

Scoping Organization/Customer Requirements

Defining the Rules of Engagement

Footprinting and Gathering Intelligence

Evaluating Human and Physical Vulnerabilities

Preparing the Vulnerability Scan

Scanning Logical Vulnerabilities

Analyzing Scanning Results

Avoiding Detection and Covering Tracks

Exploiting the LAN and Cloud

Testing Wireless Networks

Targeting Mobile Devices

Attacking Specialized Systems

Web Application-Based Attacks

Performing System Hacking

Scripting and Software Development

Leveraging the Attack: Pivot and Penetrate

Communicating During the PenTesting Process

Summarizing Report Components

Recommending Remediation

Performing Post-Report Delivery Activities

Assisted Lab: Exploring the Lab Environment Assisted Lab: Exploring the Domain Tools: Nslookup, Dig and Whois Assisted Lab: Navigating Open-Source Intelligence Tools Assisted Lab: Understanding Social Engineering Toolkit (SET)

APPLIED Lab: Understanding Spear Phishing and Credentials Attack Assisted Lab: Exploring OpenVAS Assisted Lab: Using Web Scanners Assisted Lab: Understanding Nmap Common Usage

APPLIED Lab: Scanning a Vulnerable System Assisted Lab: Understanding Scan Output Assisted Lab: Navigating Steganography Tools Assisted Lab: Demonstrating Enumeration Techniques Assisted Lab: Exploring the Basics of Metasploit

APPLIED Lab: Using VSFTP Manual and Metasploit Assisted Lab: Monitoring with Aircrack-ng Assisted Lab: Discovering IoT devices with Shodan Assisted Lab: Using SQL Injection Assisted Lab: Using Reverse and Bind Shells Assisted Lab: Analyzing Exploit Code Assisted Lab: Exploring Programming Shells Assisted Lab: Applying PenTest Automation Assisted Lab: Exploring Password Attacks with John the Ripper and Hydra