course | CompTIA Pentest+

Planning And Scoping Penetration Tests
 

• Introduction to Penetration Testing Concepts
• Plan a Pen Test Engagement
• Scope and Negotiate a Pen Test Engagement
• Prepare for a Pen Test Engagement

Conducting Passive Reconnaissance

• Gather Background Information
• Prepare Background Findings for Next Steps

Performing Non-technical Tests

• Perform Social Engineering Tests
• Perform Physical Security Tests on Facilities
   

Conducting Active Reconnaissance

• Scan Networks
• Enumerate Targets
• Scan for Vulnerabilities
• Analyze Basic Scripts

Analysing Vulnerabilities
 

• Analyze Vulnerability Scan Results
• Leverage Information to Prepare for Exploitation
   

Penetrating Networks
 

• Exploit Network-Based Vulnerabilities
• Exploit Wireless and RF-Based Vulnerabilities
• Exploit Specialized Systems

Exploiting Host-based Vulnerabilities
 

• Exploit Windows-Based Vulnerabilities
• Exploit *Nix-Based Vulnerabilities
   

Testing Applications
 

• Exploit Web Application Vulnerabilities
• Test Source Code and Compiled Apps

Completing Post-exploit Tasks
 

• Use Lateral Movement Techniques
• Use Persistence Techniques
• Use Anti-Forensics Techniques

Analyzing And Reporting Pen Test Results
 

• Analyze Pen Test Data
• Develop Recommendations for Mitigation Strategies
• Write and Handle Reports
• Conduct Post-Report-Delivery Activities