ICSI | CPT Certified Penetration Tester v2 (subscription)

ICSI | CPT Certified Penetration Tester v2

Course Overview

This course teaches penetration testing and will illustrate how to think like an attacker and use industry standard tools to perform penetration testing. The course is aligned with the CREST CRT technical syllabus. Students will learn and perform the different phases of penetration testing assessments. The students will practice using Kali Linux and its tools to perform information gathering, target discovery and enumeration, vulnerability mapping, social engineering, system exploitation, privilege escalation, and maintaining access to compromised systems. The students will also learn to report the results of their assessments.

100% online course - Study anywhere, anytime – all you need is a reliable internet connection
CREST, University of Central Lancashire Accredited Training Course
20 Credits MSc Cybersecurity
24-hr remote access to a virtual lab allows you to learn, train and practice your skills in your own time.

20 CREDITS MSc CYBERSECURITY

Course curriculum

1. Introduction
1. CPT Lab
1. Kali Linux History
2. Kali Linux Installation
3. Kali Linux Configuration
4. Basic Search Utilities
5. Guided Exercise: Finding Files
6. Lab: Starting and Stopping Services
1. What is Penetration Testing
2. Benefits of Penetration Testing
3. Vulnerability Scans
4. Methodologies
5. Ethical Issues
6. Legal Issues
7. Quiz: Introduction to Penetration Testing
1. Penetration Testing Execution Standard
2. PCI DSS
3. NIST 800-115
4. CREST UK
5. OWASP Top 10
6. ISO 27002
7. Quiz: Standards
1. TCP/IP
2. IP Protocols
3. Network Architectures
4. Domain Name Server (DNS)
5. Management Protocols
6. Network Protocols
7. Using Netcat
8. Guided Exercise: Using Netcat
1. Basics of Cryptography
2. History of Encryption
3. Symmetric Encryption
4. Asymmetric (Public Key) Encryption
5. Digital Signatures
6. Hashing
7. MAC and HMAC
8. Encoding
9. Password Crackers
10. Steganography
11. Cryptanalysis
12. Quiz: Cryptography
1. Scripting
2. Windows PowerShell (Command Line Interface)
3. Linux Shell (Command Line Interface)
4. Guided Exercise: Writing a Simple Bash Script
1. Passive Information Gathering
2. Guided Exercise: Using Shodan
3. Registration Records
4. Google Searching
5. Active Information Gathering
6. DNS Enumeration
7. Guided Exercise: DNS Enumeration
8. Host Discovery
9. Guided Exercise: Host Discovery
10. Port and Operating System Discovery
11. Guided Exercise: Port and Operating System Discovery
12. Fingerprinting and Enumeration
13. Guided Exercise: Fingerprinting and Enumeration
14. Lab: Information Gathering
15. Lab: Information Gathering (Solution)
1. Vulnerabilities
2. Packet Capture
3. Guided Exercise: Using Wireshark
4. Network Scanners
5. Guided Exercise: Using OpenVAS
6. Nmap NSE
7. Guided Exercise: Using Nmap Scripts
8. Metasploit Framework
9. Guided Exercise: Using Metasploit Framework
10. Web Application Scanners
11. Lab: Finding Vulnerabilities
12. Lab: Finding Vulnerabilities (Solution)
1. Important Windows Files
2. Windows Logs
3. The Registry
4. Active Directory Roles
5. Active Directory Database
6. Active Directory Reconnaissance
7. Guided Exercise: Active Directory Reconnaissance
8. User and System Enumeration
9. Guided Exercise: User and System Enumeration
10. Windows Vulnerabilities
11. Guided Exercise: Windows Vulnerabilities
12. Windows Privilege Escalation
13. Guided Exercise: Windows Privilege Escalation
14. Antivirus Evasion
15. Guided Exercise: Evading Windows Defender
16. Harvesting Credentials
17. Windows Password Cracking
18. Guided Exercise: Responder
19. Guided Exercise: Dumping Credentials from Memory
20. Guided Exercise: Extract SAM File from Windows Registry
21. Lab: Attacking SMB
22. Lab: Attacking SMB (Solution)
1. Linux Permissions Review
2. User Enumeration
3. Guided Exercise: User Enumeration
4. Linux/Unix Service Enumeration
5. Guided Exercise: Service Enumeration
6. Linux/Unix Vulnerabilities
7. Guided Exercise: Exploit ProFTPD
8. Linux Privilege Escalation
9. Guided Exercise: Linux Privilege Escalation
10. Linux / Unix Passwords
11. Lab: Linux/Unix Vulnerabilities
12. Lab: Linux/Unix Vulnerabilities (Solution)
1. Web Protocols
2. Web Servers
3. Guided Exercise: Web Servers
4. Web Application Structure Discovery
5. Cross-Site Scripting (XSS)
6. Guided Exercise: XSS
7. SQL Injection
8. Guided Exercise: SQL Injection
9. Directory Traversal
10. Guided Exercise: Directory Traversal
11. File Uploads
12. Guided Exercise: File Uploads
13. Command Execution
14. Guided Exercise: Command Execution
1. Databases
2. Microsoft SQL Server
3. Oracle RDBMS
4. MySQL
5. Lab: Assessing Databases
6. Lab: Assessing Databases (Solution)
1. Discovery
2. Windows Situational Awareness
3. Linux Situational Awareness
4. Lateral Movement
5. Guided Exercise: Pass the Hash
6. Guided Exercise: Port Forwarding
1. Data from Local System
2. Data Exfiltration with Frameworks
3. Guided Exercise: Data Exfiltration with Metasploit
1. Persistence
2. Windows Persistence
3. Windows Persistence with Scheduled Tasks
4. Guided Exercise: Scheduled Task
5. .bash Startup File Manipulation
6. Local Job Scheduling
7. Linux Persistence by Adding User Accounts
8. Windows Persistence by Adding User Accounts
9. Lab: Maintaining Access
10. Lab: Maintaining Access (Solution)
1. Introduction to Cloud Computing
2. Cloud Security
3. Threats and Attacks
4. Azure
5. Azure AD
6. Access Control
7. Attacking Azure with PowerZure
1. Writing Penetration Test Reports
1. Mock Exam
1. Exam Information
1. CPTv2 Course Evaluation

About this course

Free
157 lessons
0 hours of video content

Watch Intro Video

Video

What is included in this course

High-quality videos with in-depth content
Modular structure – student-directed path
Knowledge Checks at end of each module and the course
Lab Guide including video Guided Exercises and answer files
24x7 remote access to a virtual lab