Vulnerability Analysis

Introduction to Penetration Testing

• What Is Penetration Testing?
• Terminology
• Methodologies
• Ethical Issues
• Legal Issues
• Certifications
• Careers in Penetration Testing
• Building Your Skillset
• Summary
• Test Your Skills

Standards

• PCI DSS
• NIST 800-115
• National Security Agency InfoSec Assessment Methodology (NSA-IAM)
• PTES
• CREST (UK)
• A Synthesis (Putting Standards Together into a Single Unified Approach)
• Related Standards
• Other Standards
• Summary
• Test Your Skills

Cryptography

• Cryptography Basics
• History of Encryption
• Modern Methods
• Public Key (Asymmetric) Encryption
• Digital Signatures
• Hashing
• MAC and HMAC
• Password Crackers
• Steganography
• Cryptanalysis
• Learning More
• Summary
• Test Your Skills

Reconnaissance

• Passive Scanning Techniques
• Active Scanning Techniques
• Wireshark
• Maltego
• Other OSINT Tools
• Summary
• Test Your Skills

Malware

• Viruses
• Trojan Horses
• Other Forms of Malware
• Creating Malware
• Summary
• Test Your Skills

Hacking Windows

• Windows Details
• Windows Password Hashing
• Windows Hacking Techniques
• Windows Scripting
• Windows Password Cracking
• Detecting Malware in Windows
• Cain and Abel
• Summary
• Test Your Skills

Web Hacking

• Web Technology
• Specific Attacks on Websites
• Tools
• Summary
• Test Your Skills

Vulnerability Scanning

• Vulnerabilities
• Packet Capture
• Network Scanners
• Wireless Scanners/Crackers
• General Scanners
• Web Application Scanners
• Cyber Threat Intelligence
• Summary
• Test Your Skills

Introduction to Linux

• Linux History
• Linux Commands
• Directories
• Graphical User Interface
• Summary
• Test Your Skills

Linux Hacking

• More on the Linux OS
• Linux Firewall
• Syslogd
• Scripting
• Linux Passwords
• Linux Hacking Tricks
• Summary
• Test Your Skills

Introduction to Kali Linux

• Kali Linux History
• Kali Basics
• Kali Tools
• Summary
• Test Your Skills

General Hacking Techniques

• Wi-Fi Testing
• Social Engineering
• DoS
• Summary
• Test Your Skills

Introduction to Metasploit

• Background on Metasploit
• Getting Started with Metasploit
• Basic Usage of msfconsole
• Scanning with Metasploit
• How to Use Exploits
• Exploit Examples
• Post Exploits
• Summary
• Test Your Skills

More with Metasploit

• Meterpreter and Post Exploits
• msfvenom
• More Metasploit Attacks
• Summary
• Test Your Skills

Introduction to Scripting with Ruby

• Getting Started
• Basic Ruby Scripting
• Summary
• Test Your Skills

Write Your Own Metasploit Exploits with Ruby

• The API
• Getting Started
• Examine an Existing Exploit
• Extending Existing Exploits
• Writing Your First Exploit
• Summary
• Test Your Skills

General Hacking Knowledge

• Conferences
• Dark Web
• Certification and Training
• Cyber Warfare and Terrorism
• Nation State Actors
• Summary
• Test Your Skills

Additional Pen Testing Topics

• Wireless Pen Testing
• Mainframe and SCADA
• Mobile Pen Testing
• Summary
• Test Your Skills

A Sample Pen Test Project

• Pen Test Outline
• Report Outline
• Summary

Introduction to Penetration Testing

• Defining Penetration Testing
• Preserving Confidentiality, Integrity, and Availability
• Appreciating the Evolution of Hacking

Introduction to Operating Systems and Networking

• Comparing Common Operating Systems
• Exploring Networking Concepts

Outlining the Pen Testing Methodology

• Determining the Objective and Scope of the Job
• Choosing the Type of Test to Perform
• Gaining Permission via a Contract
• Following the Law While Testing

Gathering Intelligence

• Introduction to Intelligence Gathering
• Examining a Company's Web Presence
• Finding Websites That Don't Exist Anymore
• Gathering Information with Search Engines
• Targeting Employees with People Searches
• Discovering Location
• Do Some Social Networking
• Looking via Financial Services
• Investigating Job Boards
• Searching Email
• Extracting Technical Information

Scanning and Enumeration

• Introduction to Scanning
• Checking for Live Systems
• Performing Port Scanning
• Identifying an Operating System
• Scanning for Vulnerabilities
• Using Proxies (Or Keeping Your Head Down)
• Performing Enumeration

Conducting Vulnerability Scanning

• Introduction to Vulnerability Scanning
• Recognizing the Limitations of Vulnerability Scanning
• Outlining the Vulnerability Scanning Process
• Types of Scans That Can Be Performed

Cracking Passwords

• Recognizing Strong Passwords
• Choosing a Password-Cracking Technique
• Executing a Passive Online Attack
• Executing an Active Online Attack
• Executing an Offline Attack
• Using Nontechnical Methods
• Escalating Privileges

Retaining Access with Backdoors and Malware

• Deciding How to Attack
• Installing a Backdoor with PsTools
• Opening a Shell with LAN Turtle
• Recognizing Types of Malware
• Launching Viruses
• Launching Worms
• Launching Spyware
• Inserting Trojans
• Installing Rootkits

Working with Defensive and Detection Systems

• Detecting Intrusions
• Recognizing the Signs of an Intrusion
• Evading an IDS
• Breaching a Firewall
• Using Honeypots: The Wolf in Sheep's Clothing

Covering Your Tracks and Evading Detection

• Recognizing the Motivations for Evasion
• Getting Rid of Log Files
• Hiding Files
• Evading Antivirus Software
• Evading Defenses by Entering Through a Backdoor
• Using Rootkits for Evasion

Detecting and Targeting Wireless

• An Introduction to Wireless
• Breaking Wireless Encryption Technologies
• Conducting a Wardriving Attack
• Conducting Other Types of Attack
• Choosing Tools to Attack Wireless
• Knocking Out Bluetooth
• Hacking the Internet of Things (IoT)

Performing Social Engineering

• Introduction to Social Engineering
• Exploiting Human Traits
• Acting Like a Social Engineer
• Targeting Specific Victims
• Leveraging Social Networking
• Conducting Safer Social Networking

Hardening a Host System

• Introduction to Hardening
• Three Tenets of Defense
• Creating a Security Baseline
• Hardening with Group Policy
• Hardening Desktop Security
• Backing Up a System

Hardening Your Network

• Introduction to Network Hardening
• Intrusion Detection Systems
• Firewalls
• Physical Security Controls

Network Hardening Techniques

Physical Security