Learning Objectives

• Perform internal and external penetration tests in enterprise environments
• Execute privilege escalation techniques on both Windows and Linux systems
• Use Open-Source Intelligence (OSINT) methods to support attack planning
• Exploit web application vulnerabilities to achieve initial access
• Apply Active Directory attack techniques, including A/V evasion, lateral movement, and Domain Controller compromise
• Produce professional penetration testing reports suitable for both technical and executive audiences

Course Outline

Module Day 1: OSINT Fundamentals

Introduces the foundations of Open-Source Intelligence, including the Intel Lifecycle, Sock Puppets, and Search Engine Operators. Students work through hands-on exercises covering Email OSINT, Password OSINT, Username OSINT, Image OSINT, Video OSINT, Website OSINT, Business OSINT, and Social Media OSINT.

Module Day 2: Network Penetration Testing

Covers essential network penetration testing concepts including Port Scanning Tactics, Service Enumeration, Shell Types, Payloads, and Exploitation. Students also work through Privilege Escalation Tactics, External Pentest Methodology, Attack Strategy, and Report Writing.

Module Day 3: Active Directory Attacks and Defenses

Begins with an Active Directory overview and progresses through Pre-Compromise AD Attacks and Defenses, Post-Compromise AD Enumeration, and Post-Compromise AD Attacks. Additional topics include AD Methodology, Attack Strategy, Report Writing, AD Case Studies, and Network Pivoting.

Module Day 4: Web Application Hacking

Covers modern web application architecture and web hacking methodologies along with key reference resources. Students complete hands-on exercises in Recon and Discovery as well as exploitation of common web application vulnerabilities.