Ethical Hacking Penetration Testing
Analysis of the methodologies, tools, and techniques used in Cyber Attacks and how to apply them ethically to identify weaknesses and vulnerabilities in computer systems and networks through a Penetration Test (Pentest).
About the Course
Ethical Hacking Penetration Testing (EHPT) is our entry-level course in the Offensive Security track. The course begins by covering the techniques and procedures used in Cyber Attacks, exploring some real cases as a way to identify the stages of the Cyber Kill Chain and other attack methodologies.
Next, methodologies for conducting a Penetration Test (Pentest), the legal and formal implications of performing this type of activity, and a quick overview of Pentest, Red Team, and Blue Team are addressed.
Concluding the first part (whose content is provided through recorded classes), we discuss how to produce a report of the test performed and how to classify the vulnerabilities found according to established standards and their respective impacts.
In the second part of the course, the phases of a penetration test are addressed in a practical manner: Reconnaissance, Scanning/Enumeration, Exploitation, and Post-Exploitation. In each phase, the techniques and tools that allow you to achieve the desired objectives at each stage of the test are demonstrated, and the knowledge is applied in the labs of each module. In addition to the phases of a Pentest, topics such as Social Engineering and Physical Pentesting are covered.
In the final lab of the course, students will be able to carry out a Simulated Pentest on the network of a fictitious organization, with a defined scope and rules of engagement.
The course includes more than 30 hands-on labs at a Basic/Intermediate level and is recommended for students who are starting their studies in Offensive Security or who are preparing for certifications such as OSCP.
Course Content
- 1.Cyber Attacks
- 2.Ethical Hacking and Penetration Testing
- 3.Configuration and Practice on Linux and Windows Systems
- 4.Reporting (Report)
- 5.Reconnaissance (Reconnaissance)
- 6.Scanning and Enumeration (Scanning and Enumeration)
- 7.Exploitation (Exploitation)
- 8.Exploitation of Vulnerabilities in Web Applications
- 9.Post-Exploitation (Post-Exploitation Activities)
- 10.Social Engineering (Social Engineering)
- 11.Pentest Simulation (Simulated Penetration Test)