Threats and Countermeasures
You will learn to conduct reconnaissance, exploit vulnerabilities, escalate privileges, and perform full-scale penetration tests using real-world tools and frameworks. With these hands-on skills and knowledge, you will be well-prepared to land a job in the cybersecurity industry.
Structured Learning Path
Dive into a sequential journey covering reconnaissance, exploitation, privilege escalation, and more
Hands-On Practice
Conduct two full-scale penetration tests to apply learned concepts and simulate real-world scenarios
Professional Guidance
Understand and utilize leading offensive security frameworks and tools
Course Outline
- Overview of the course
- Installing and configuring Kali Linux
- Basics of penetration testing and ethical considerations
- Understanding MITRE ATT&CK and other frameworks
- Mapping attack vectors
- Choosing the right tools for each phase
- Passive and active information gathering
- OSINT techniques and tools
- Practice
- Crafting payloads and phishing campaigns
- Setting up C2 infrastructure
- Practice
- Delivery methods: phishing, drive-by downloads, etc.
- Exploit development basics
- Creating and maintaining footholds
- Leveraging scheduled tasks implants
- Practice
- Creating and maintaining footholds
- Leveraging scheduled tasks implants
- Practice
- Week 3: Linux privilege escalation: SUID, sudo, and kernel exploits
- Practice 1.
- Linux privilege escalation: SUID, sudo, and kernel exploits
- Windows privilege escalation: tokens, UAC bypass, and misconfigurations
- Practice
- Dumping hashes and cracking passwords
- Keylogging and memory dumping
- Credential reuse and implications
- Network and host discovery techniques
- Locating sensitive data
- Identifying high-value targets
- Remote code execution
- Pivoting through compromised hosts
- Advanced tunneling techniques
- Gathering and exfiltrating data
- Working with scripts and automation
- Strategies for stealth
- Practice 2: Final penetration test, incorporating all phases learned
- Debriefing: Lessons learned from practical exercises
- Report writing and client communication tips
- Next steps in advancing your pentesting career
What you get
- A compact guide "RTFM" that includes all basic penetration testing tools and concepts
- A certificate (only if you passed the final exam)
- All required skills that you need to become a professional penetration tester
Threats and Countermeasures
If you have questions: Telegram @alexdolgavin
Smart Contract Auditor