Advanced Penetration Testing
Course Overview
Ehackify Certified Advanced Penetration Tester (eAPT) is an extensive cybersecurity training program that focuses on most aspects of Offensive security. The course is built to simulate industry scenarios for making it easy to learn from a beginner’s perspective and can advance to a pro in a matter of 6 months. This covers Advanced Penetration testing methodologies, Infrastructure security, Web application security, Active Directory attacks, Wireless attacks, Powershell for pen-testers, Exploit Development which can help the candidate build a career in an extensive field of Cybersecurity.
What you’ll Learn ?
Ehackify Advanced Penetration Tester (APT) is an extensive cybersecurity
training program that focuses on most aspects of Offensive security. The course is built to simulate industry scenarios for making it easy to learn from a beginner’s perspective and can advance to a pro in a matter of 6 months.
This covers Advanced Penetration testing methodologies, Infrastructure security, Web application security, Active Directory attacks, Wireless attacks, Powershell for pen-testers, Exploit Development which can help the candidate build a career in an extensive field of Cybersecurity.
Course Outline
- Duration : 6 months
- Category : Beginner Level
Course Module
- Network design, configuration, and monitoring.
- Looking for ways to improve efficiency in network and optimizing accordingly.
- Repair, upgrade, and maintain computer networks.
- Working with IT colleagues and supporting system administration.
- Repair, upgrade and configure desktop computers, servers and various office peripherals
- Provide technical assistance and remote computer or network support to end users
- Perform server patch maintenance, system and server backups and data archiving
- Troubleshoot and resolve software, hardware and connection issues
- Problem Solving.
- Critical Thinking.
- Time Management.
- Communication Skills.
- Learning Nature.
- People and Domain Reconnaissance
- Domain Security Information
- Google Hacks and Dorks
- Shodan and Dorks
- Harvesting email
- Extracting Employee Names from LinkedIn
- Data Dumps for Passwords and other Credentials
- Scraping Data from Social Medias
- Methods for comprehensive OSINT data gathering
- Types of Social Engineering
- Spear Phishing Emails, Calls or Texts
- Phishing Emails,
- Voice Phishing (Vhishing),
- SMS Phishing (Smishing)
- Real-Life Example Social Engineering Attacks
- Pretexting samples
- Social Engineering Tool
- Network Reconnaissance
- Discovering initial targets
- Vulnerability Identification
- System/Service Exploits
- Network Protocol Attacks
- Windows/ Linux Exploits
- Authentication Attacks
- Acquire System Control
- Gaining internal network access
- Bypassing a Filtered Network
- Covert Channels & Rootkits
- Evading Defense Mechanisms
- Structure Of Memory
- CPU Registers
- Understanding the Stack
- Immunity Debugger
- Finding Buffer Overflows
- Exploiting Buffer Overflows
- Exploiting a Real-World Buffer Overflow
- Shellcoding
- Payloads and Types of payloads
- Building the Exploit
- Web application standards and protocols
- Functional analysis of web applications
- Mapping application
- Web Application Vulnerabilities
- Encryption/SSL and data security
- Input validation errors
- Code & form security vulnerabilities
- Parameter tampering
- Hidden field manipulation
- Cookie poisoning
- Session management issues
- Manual exploitation of web applications
- Command/Client-Side injection
- (XSS, CSRF, HTML, XPath, XXE,SOAP)
- SQL Injection
- JSON Hijacking
- Server Side Request Forgery
- OWASP Top 10
- Confirming WLAN and WAPs SSID(s), channels and operating frequency
- Identifying accessibility and range of wireless networks/WAPs from outside the physical location(s)
- Connecting to target access point
- Impersonating an AP
- Impersonating a STA
- Capturing information transmitted over the air
- Decrypting and reading transmitted information
- Further mapping/identifying internal network
- Gathering information from client computer
- De-authentication, chop-chop, and similar attack vectors
- Capturing and interrogation of the 4-way handshake
- Password/passphrase cracking or brute-forcing
- Basic CMD and PowerShell for pen testers
- Recon Active Directory
- Password Spraying
- Enumerating Active Directory
- Windows local privilege escalation
- Privesc on Active Directory
- Dumping Domain Credentials
- Over Pass the Hash/Pass the Key
- Abusing MSSQL Trusted Links
- Unconstrained and Constrained Delegation
- ACLs Abuse
- Printer Spooler service abuse
- Persistence
- Golden Ticket and Silver Ticket
- AdminSDHolder Group
- DSRM Credentials
- ACL Persistence
- Skeleton Key
- Forest Privilege Escalation
- Domain trust abuse
- Child-to-Parent forest privilege escalation
- External Forest Domain Privilege escalation
- General Detection and Defenses
- Attack Surface Mapping
- Firmware reverse engineering
- Hardware based exploitation
- Detecting open and poorly protected communication
- Sniffing
- Detecting configuration interfaces or backdoors
- Buffer overflow
- Breaking passwords
- Tailgating into a facility
- Lock Picking
- RFID Cloning
- Access Control Bypass
- Bypassing a human firewall
- Network access
- Sensitive data
- Dumpster diving
- Post-engagement cleanup
- Document Findings
- Prioritize and Rank Findings
- Executive summary
- Attack narrative
- Technical observations
- Document potential solution
Course Overview
Outline
- Duration : 6 months
- Category : Beginner Level
Targeted Audience
- Graduates
- Under Graduates, System/Network Administrators
- IT Professionals
What you’ll Learn ?
Ehackify Advanced Penetration Tester (APT) is an extensive cybersecurity
training program that focuses on most aspects of Offensive security. The course is built to simulate industry scenarios for making it easy to learn from a beginner’s perspective and can advance to a pro in a matter of 6 months.
This covers Advanced Penetration testing methodologies, Infrastructure security, Web application security, Active Directory attacks, Wireless attacks, Powershell for pen-testers, Exploit Development which can help the candidate build a career in an extensive field of Cybersecurity.
Tools Used
APT
Ehackify Cyber Security Research & Training company based in South India devoted to providing best-in-class ethical hacking and cybersecurity training to beginners as well as professionals looking for level-up.