Professional Pentesting

1. Professional Pentesting
2. Ethics & Hacking
   • Getting Permission to Hack
   • Code of Ethics Canons [(ISC)2]
   • Why Stay Ethical?
   • Ethical Standards
   • Computer Crime Laws
   • Getting Permission to Hack
3. Setting up Your Lab
   • Targets in a Pentest Lab
   • Virtual Network Pentest Labs
   • Protecting Penetration Test Data
   • Advanced Pentest Labs
4. Methodologies & Frameworks
   • Information System Security Assessment Framework
   • Open Source Security Testing Methodology Manual
5. Pentest Project Management
   • Quantitative, Qualitative, and Mixed Methods
   • Management of a Pentest
   • Project Team Members
   • Project Management
   • Solo Pentesting
   • Archiving Data
   • Cleaning up Your Lab
   • Planning for Your Next Pentest
6. Information Gathering
   • Passive Information Gathering
   • Active Information Gathering
7. Vulnerability Identification
   • Port Scanning
   • System Identification
   • Services Identification
   • Vulnerability Identification
8. Vulnerability Exploitation
   • Introduction
   • Automated Tools
   • Exploit Code
9. Local System Attacks
   • System Exploitation
   • Encrypted Tunnels
   • Shells and Reverse Shells
   • Adding a Host Firewall (Optional)
   • Other Encryption and Tunnel Methods
10. Privilege Escalation
    • Password Attacks
    • Network Packet Sniffing
    • Social Engineering
    • Manipulating Log Data
    • Hiding Files
11. Targeting Support Systes
    • Database Attacks
    • Network Shares
12. Targeting The Network
    • Wireless Network Protocols
    • Simple Network Management Protocol
13. Web Apps Attack Techniques
    • SQL Injection
    • Cross-Site Scripting
    • Web Application Vulnerabilities
    • Automated Tools
14. Reporting Results
    • What Should You Report?
    • Initial Report
    • Final Report
15. Hacking as a career
    • Career Paths
    • Certifications
    • Associations and Organizations
    • Putting It All Together