Introduction

Introduction to the Course

Fundamentals

Lab Setup Using the VMware Player
Theoretical Basics

Information Gathering

Passive Reconnaissance – Part 1
Passive Reconnaissance – Part 2
Passive Reconnaissance – Part 3
Active Reconnaissance – Part 1
Active Reconnaissance – Part 2
Active Reconnaissance – Part 3

Vulnerability Analysis

Vulnerability Analysis
Manually Identify, Analyze, and Rank Vulnerabilities
Automated Vulnerability Assessment Using Nessus
Automated Vulnerability Assessment – Nmap and VEGA

Exploitation

Lab 1 – Exploitation with Metasploit Framework
Lab 2 – Exploitation Using Manual Public Exploits

Web Penetration Test

CMS Hacking – Initial Information Gathering
CMS Hacking – Directory Busting and CMS Scanning
CMS Hacking – General Brute Forcing and Exploitation
Do You Know the Power of Version Numbers? – Part 1
Do You Know the Power of Version Numbers? – Part 2
Important Specific Vulnerabilities Such as SQL Injection In-Depth
Important Specific Vulnerabilities Such as XSS In-Depth
Important Specific Vulnerabilities Such as File Upload and Command Injection
Part 1 Web Server Hacking: Introduction and Enumeration Ideas
Part 2 Web Server Hacking: Risky PUT and DELETE Methods
Part 3 Web Server Hacking: SSH Brute Forcing w/ Hydra

Network Pentesting

The Core of Network Testing – Part 1
The Core of Network Testing – Part 2
The Core of Network Testing – Part 3
Post Exploitation Using Metasploit – Part 1
Post Exploitation Using Metasploit – Part 2
Post Exploitation Using Metasploit – Part 3
Privilege Escalation Techniques – Part 1
Privilege Escalation Techniques – Part 2
Privilege Escalation Techniques – Part 3
Privilege Escalation Techniques – Part 4

Security Control Evasion

#1 Bypass Antivirus – Making the Base Payload
#2 Bypass Antivirus – The Actual Evasion Technique!

Writing Great Reports
Clean Documentation in a Professional Test