Penetration testing – detecting and exploiting vulnerabilities Training Course

How to Test Network and Service Security

• Penetration Testing – What is it?
• Penetration Testing vs. Audit – Similarities, Differences, and What is Appropriate?
• Practical Challenges – What Can Go Wrong?
• Scope of Testing – What Do We Want to Check?
• Sources of Best Practices and Recommendations

Penetration Testing – Reconnaissance

• OSINT – Gathering Information from Public Sources
• Passive and Active Methods of Network Traffic Analysis
• Identification of Services and Network Topology
• Security Systems (Firewalls, IPS/IDS Systems, WAF, etc.) and Their Impact on Testing

Penetration Testing – Vulnerability Searching

• Identification of Systems and Their Versions
• Vulnerability Search in Systems, Infrastructure, and Applications
• Vulnerability Assessment – "How Much Will It Hurt"?
• Exploit Sources and Customization Possibilities

Penetration Testing – Attack and Control Acquisition

• Types of Attacks – How Are They Conducted and What Are the Outcomes?
• Attacks Using Remote and Local Exploits
• Attacks on Network Infrastructure
• Reverse Shell – How to Manage a Compromised System
• Privilege Escalation – How to Become an Administrator
• Ready-Made "Hacking Tools"
• Analysis of Compromised Systems – Interesting Files, Saved Passwords, Private Data
• Special Cases: Web Applications, WiFi Networks
• Social Engineering – How to "Break" a Person if Systems Cannot Be Breached?

Penetration Testing – Covering Tracks and Maintaining Access

• Logging and Activity Monitoring Systems
• Cleaning Logs and Covering Tracks
• Backdoor – How to Leave Yourself an Open Entry

Penetration Testing – Summary

• Report Preparation and Structure
• Report Delivery and Consultation
• Verification of Recommendation Implementation