Information Technology

CompTIA Penetration Testing Certification (PenTest+) - (Exam PT0-002)

Instructor-Led 20 Agenda

Description

As organizations scramble to protect themselves and their customers against privacy or security breaches, the ability to conduct penetration testing is an emerging skill set that is becoming ever more valuable to the organizations seeking protection, and ever more lucrative for those who possess these skills. In this course, you will be introduced to general concepts and methodologies related to pen testing, and you will work your way through a simulated pen test for a fictitious company. This course will assist you if you are pursuing the CompTIA PenTest+ certification, as tested in exam PT0-002. PenTest+ is compliant with ISO 17024 standards and approved by the US DoD to meet directive 8140/8570.01-M requirements.

Course Overview

Course Objective

This course will prepare students for the CompTIA PenTest+ (PT0-002) exam and verify the successful candidate has the knowledge and skills required to: Plan and scope a penetration testing engagement Understand legal and compliance requirements Perform vulnerability scanning and penetration testing using appropriate tools and techniques, and then analyze the results Produce a written report containing proposed remediation techniques, effectively communicate results to the management team, and provide practical recommendations

Who Should Attend

Penetration Tester Security Consultant Cloud Penetration Tester Cloud Security Specialist Network & Security Specialist Web App Penetration Tester Information Security Engineer Security Analyst

Scoping Organizational/Customer Requirements Lesson Id 1

Scoping Organizational/Customer Requirements

Defining the Rules of Engagement Lesson Id 2

Defining the Rules of Engagement

Footprinting and Gathering Intelligence Lesson Id 3

Footprinting and Gathering Intelligence

Evaluating Human and Physical Vulnerabilities Lesson Id 4

Evaluating Human and Physical Vulnerabilities

Preparing the Vulnerability Scan Lesson Id 5

Preparing the Vulnerability Scan

Lesson 6: Scanning Logical Vulnerabilities Lesson Id 6

Lesson 6: Scanning Logical Vulnerabilities

Analyzing Scanning Results Lesson Id 7

Analyzing Scanning Results

Avoiding Detection and Covering Tracks Lesson Id 8

Avoiding Detection and Covering Tracks

Exploiting the LAN and Cloud Lesson Id 9

Exploiting the LAN and Cloud

Testing Wireless Networks Lesson Id 10

Testing Wireless Networks

Targeting Mobile Devices Lesson Id 11

Targeting Mobile Devices

Attacking Specialized Systems Lesson Id 12

Attacking Specialized Systems

Web Application-Based Attacks Lesson Id 13

Web Application-Based Attacks

Performing System Hacking Lesson Id 14

Performing System Hacking

Scripting and Software Development Lesson Id 15

Scripting and Software Development

Leveraging the Attack: Pivot and Penetrate Lesson Id 16

Leveraging the Attack: Pivot and Penetrate

Communicating During the PenTesting Process Lesson Id 17

Communicating During the PenTesting Process

Summarizing Report Components Lesson Id 18

Summarizing Report Components

Recommending Remediation Lesson Id 19

Recommending Remediation

Performing Post-Report Delivery Activities Lesson Id 20

Performing Post-Report Delivery Activities

Lesson Id	Title	Description
1	Scoping Organizational/Customer Requirements	Topic 1A: Define Organizational PenTesting<br />Topic 1B: Acknowledge Compliance Requirements<br />Topic 1C: Compare Standards and Methodologies<br />Topic 1D: Describe Ways to Maintain Professionalism
2	Defining the Rules of Engagement	Topic 2A: Assess Environmental Considerations<br />Topic 2B: Outline the Rules of Engagement<br />Topic 2C: Prepare Legal Documents
3	Footprinting and Gathering Intelligence	Topic 3A: Discover the Target<br />Topic 3B: Gather Essential Data<br />Topic 3C: Compile Website Information<br />Topic 3D: Discover Open-Source Intelligence Tools
4	Evaluating Human and Physical Vulnerabilities	Topic 4A: Exploit the Human Psyche<br />Topic 4B: Summarize Physical Attacks<br />Topic 4C: Use Tools to Launch a Social Engineering Attack
5	Preparing the Vulnerability Scan	Topic 5A: Plan the Vulnerability Scan<br />Topic 5B: Detect Defenses<br />Topic 5C: Utilize Scanning Tools
6	Lesson 6: Scanning Logical Vulnerabilities	Topic 6A: Scan Identified Targets<br />Topic 6B: Evaluate Network Traffic<br />Topic 6C: Uncover Wireless Assets
7	Analyzing Scanning Results	Topic 7A: Discover Nmap and NSE<br />Topic 7B: Enumerate Network Hosts<br />Topic 7C: Analyze Output from Scans
8	Avoiding Detection and Covering Tracks	Topic 8A: Evade Detection<br />Topic 8B: Use Steganography to Hide and Conceal<br />Topic 8C: Establish a Covert Channel
9	Exploiting the LAN and Cloud	Topic 9A: Enumerating Hosts<br />Topic 9B: Attack LAN Protocols<br />Topic 9C: Compare Exploit Tools<br />Topic 9D: Discover Cloud Vulnerabilities<br />Topic 9E: Explore Cloud-Based Attacks
10	Testing Wireless Networks	Topic 10A: Discover Wireless Attacks<br />Topic 10B: Explore Wireless Tools
11	Targeting Mobile Devices	Topic 11A: Recognize Mobile Device Vulnerabilities<br />Topic 11B: Launch Attacks on Mobile Devices<br />Topic 11C: Outline Assessment Tools for Mobile Devices
12	Attacking Specialized Systems	Topic 12A: Identify Attacks on the IoT<br />Topic 12B: Recognize Other Vulnerable Systems<br />Topic 12C: Explain Virtual Machine Vulnerabilities
13	Web Application-Based Attacks	Topic 13A: Recognize Web Vulnerabilities<br />Topic 13B: Launch Session Attacks<br />Topic 13C: Plan Injection Attacks<br />Topic 13D: Identify Tools
14	Performing System Hacking	Topic 14A: System Hacking<br />Topic 14B: Use Remote Access Tools<br />Topic 14C: Analyze Exploit Code
15	Scripting and Software Development	Topic 15A: Analyzing Scripts and Code Samples<br />Topic 15B: Create Logic Constructs<br />Topic 15C: Automate Penetration Testing
16	Leveraging the Attack: Pivot and Penetrate	Topic 16A: Test Credentials<br />Topic 16B: Move Throughout the System<br />Topic 16C: Maintain Persistence
17	Communicating During the PenTesting Process	Topic 17A: Define the Communication Path<br />Topic 17B: Communication Triggers<br />Topic 17C: Use Built-In Tools for Reporting
18	Summarizing Report Components	Topic 18A: Identify Report Audience<br />Topic 18B: List Report Contents<br />Topic 18C: Define Best Practices for Reports
19	Recommending Remediation	Topic 19A: Employ Technical Controls<br />Topic 19B: Administrative and Operational Controls<br />Topic 19C: Physical Controls
20	Performing Post-Report Delivery Activities	Topic 20A: Post-Engagement Cleanup<br />Topic 20B: Follow-Up Actions