Penetration Testing
This course walks through a professional penetration test step by step, from agreeing the scope to delivering the final report. Video lessons, theory and tests are paired with hands-on labs: targets are launched on demand and you connect to the given IP and port with your own tools. Offensive skills are used only in these labs or with written authorisation.
Course format
- Video lessons
- Theory
- Tests
- Practice
Course program
- 01
Scoping and rules of engagement
Agreeing scope, rules of engagement, written authorisation and testing boundaries.
- 02
Reconnaissance
Gathering information about the target from open sources and the network.
- 03
Scanning and enumeration
Identifying open ports, services and versions, and mapping the attack surface.
- 04
Web exploitation
Finding common web application vulnerabilities and demonstrating their impact.
- 05
Privilege escalation
Escalating privileges on Linux and Windows through misconfigurations.
- 06
Post-exploitation
Assessing impact, collecting evidence and returning systems to their original state.
- 07
Professional reporting
Describing findings by risk level and writing remediation advice.
By the end of the course
- Agree the scope and rules of engagement with a client.
- Build an attack plan from reconnaissance and scanning results.
- Find and exploit vulnerabilities in web applications.
- Escalate privileges on Linux and Windows systems.
- Write a professional report with remediation advice.
Who it is for
- Specialists starting a career in penetration testing.
- Defensive teams that want to understand attack methodology.
- Administrators and developers who want to test their systems through an attacker's eyes.
Requirements
- Comfort with the Linux terminal and networking fundamentals.
- Your own computer with your tools installed and an internet connection.
- A general understanding of HTTP and how web applications work.
Capture your first flag today
Create a free account and access 700+ hands-on challenges.