Learning Objectives

• Conduct penetration tests against IoT systems
• Develop advanced binary exploits
• Evade defensive controls and weaponize exploits
• Perform penetration testing on Operational Technology (OT) environments
• Navigate target networks using pivoting and double pivoting techniques
• Execute advanced attacks against Windows environments
• Adapt and weaponize exploits for use in engagements
• Perform privilege escalation on compromised systems
• Automate attack tasks using custom scripts
• Produce professional-quality penetration testing reports
• Bypass filtered or restricted networks
• Apply techniques to evade detection and defensive mechanisms
• Reach hidden network segments through pivoting

Course Outline

Module 1: Penetration Testing Fundamentals

Introduces foundational penetration testing concepts, the LPT methodology, and established guidelines for planning and conducting penetration tests.

Module 2: Scoping and Engagement Planning

Addresses the RFP process, defining engagement requirements, establishing rules of engagement, setting up communication protocols, scheduling, identifying support personnel, handling legal considerations, pre-test preparation, and managing scope creep throughout an engagement.

Module 3: Open Source Intelligence (OSINT)

Examines OSINT collection via the web, website reconnaissance, DNS interrogation, and the use of tools, frameworks, and scripts to automate information gathering.

Module 4: Social Engineering Penetration Testing

Covers social engineering concepts and attack techniques delivered through email, phone, and physical vectors, as well as guidance on reporting findings and recommending countermeasures.

Module 5: External Network Penetration Testing

Covers port scanning, OS and service fingerprinting, vulnerability research, and exploit validation as applied to external network penetration testing scenarios.

Module 6: Internal Network Penetration Testing

Covers footprinting, network scanning, OS and service fingerprinting, enumeration, vulnerability assessment, exploitation of Windows and Unix/Linux systems, additional internal attack techniques, automation, post-exploitation activities, and advanced methodology tips.

Module 7: Perimeter Device Penetration Testing

Covers security assessment of perimeter devices including firewalls, intrusion detection systems (IDS), routers, and switches.

Module 8: Web Application Penetration Testing

Covers discovery of default and hidden content, web vulnerability scanning, SQL injection, cross-site scripting (XSS), parameter tampering, weak cryptography, security misconfigurations, client-side attacks, authentication and authorization flaws, session management weaknesses, web services security, business logic vulnerabilities, web server flaws, thick client vulnerabilities, and WordPress-specific testing.

Module 9: Wireless Penetration Testing

Covers penetration testing of wireless LAN (WLAN) environments, RFID systems, and NFC technologies.

Module 10: IoT Penetration Testing

Covers common IoT attack types and threats, along with structured methodologies for testing IoT devices and ecosystems.

Module 11: OT/SCADA Penetration Testing

Covers foundational OT/SCADA concepts, the Modbus protocol, and penetration testing approaches for industrial control systems (ICS) and SCADA environments.

Module 12: Cloud Penetration Testing

Covers general methodology for cloud penetration testing and platform-specific techniques for AWS, Microsoft Azure, and Google Cloud Platform.

Module 13: Binary Analysis and Exploitation

Covers binary coding fundamentals and a structured methodology for analyzing binaries to identify and exploit vulnerabilities at the binary level.

Module 14: Report Writing and Post-Engagement Actions

Covers penetration testing report formats, the stages of report development, report components, analysis of findings, report delivery, and recommended post-engagement steps for client organizations.