Curriculum For This Course
Video tutorials list
-
Introduction
Video Name Time 1. Introduction 9:45 2. Exam Tips 4:16 -
PenTesting Overview
Video Name Time 1. PenTesting Overview 3:33 2. Planning the Engagement 5:17 3. Information Gathering 5:34 4. Attacks and Exploits 4:11 5. Post-Exploitation 4:53 6. Reporting 6:44 7. Overview of a PenTest 1:42 -
Pre-Engagement Activities
Video Name Time 1. Pre-Engagement Activities (OBJ 1.1, 1.2) 3:50 2. Regulations and Standards (OBJ 1.1, 1.2) 10:25 3. Types of Assessments (OBJ 1.1) 5:51 4. Types of Agreements (OBJ 1.1) 6:34 5. Legal and Ethical Considerations (OBJ 1.1, 1.2) 6:14 6. Rules of Engagement (OBJ 1.1, 1.2) 6:36 7. Target Selection (OBJ 1.1) 4:33 8. Shared Responsibility Model (OBJ 1.1) 6:37 -
Frameworks
Video Name Time 1. Frameworks (OBJ 1.3) 4:56 2. MITRE ATT&CK (OBJ 1.3) 5:53 3. OWASP (OBJ 1.3) 6:02 4. MASVS (OBJ 1.3) 6:33 5. PTES (OBJ 1.3) 8:57 6. CREST (OBJ 1.3) 4:59 7. OSSTMM (OBJ 1.3) 3:52 8. STRIDE (OBJ 1.3) 8:54 9. Purdue Model (OBJ 1.3) 4:44 10. OCTAVE (OBJ 1.3) 4:31 11. DREAD (OBJ 1.3) 6:46 -
Information Gathering
Video Name Time 1. Information Gathering (OBJ 2.1) 5:31 2. Passive Reconnaissance (OBJ 2.1) 5:12 3. Network Sniffing (OBJ 2.1) 7:36 4. Active Reconnaissance (OBJ 2.1) 8:27 5. Port and Protocol Scanning (OBJ 2.1) 10:51 6. HTML Scraping and Cached Pages (OBJ 2.1) 7:07 7. Banner Grabbing (OBJ 2.1) 8:56 -
Open-Source Intelligence (OSINT)
Video Name Time 1. Open-Source Intelligence (OSINT) (OBJ 2.1) 3:26 2. Social Media and Job Boards (OBJ 2.1) 5:51 3. Information Disclosures (OBJ 2.1) 5:52 4. Cryptographic Flaws (OBJ 2.1) 9:22 5. DNS Lookups (OBJ 2.1) 9:38 6. Certificate Transparency Logs (OBJ 2.1) 5:07 7. Search Engine Analysis (OBJ 2.1) 8:00 8. Conducting OSINT (OBJ 2.1) 3:38 -
Scanning and Enumeration
Video Name Time 1. Scanning and Enumeration (OBJ 2.2) 4:30 2. Enumerating Protocols (OBJ 2.2) 13:03 3. Enumerating DNS (OBJ 2.2) 7:41 4. Enumerating Directories (OBJ 2.2) 8:16 5. Enumerating Hosts (OBJ 2.2) 12:52 6. Enumerating Users (OBJ 2.2) 10:52 7. Enumerating Email (OBJ 2.2) 5:08 8. Enumerating Permissions (OBJ 2.2) 7:52 9. Enumerating Wireless Devices (OBJ 2.2) 5:31 10. Enumerating Secrets (OBJ 2.2) 5:37 11. Enumerating the Web (OBJ 2.2) 9:08 12. Attack Path Mapping (OBJ 2.2) 6:37 -
Recon and Enumeration Tools
Video Name Time 1. Reconnaissance and Enumeration Tools (OBJ 2.4) 4:06 2. Wayback Machine (OBJ 2.4) 5:15 3. theHarvester and Hunter.io (OBJ 2.4) 3:31 4. OSINT Tools (OBJ 2.4, 4.8) 8:59 5. nslookup and dig (OBJ 2.4) 1:23 6. DNSdumpster and Amass (OBJ 2.4) 8:23 7. Shodan and Censys.io (OBJ 2.4) 8:58 8. tcpdump (OBJ 2.4) 8:36 9. Wireshark (OBJ 2.4) 8:13 10. Wireless Analysis Tools (OBJ 2.4) 11:46 -
Nmap and NSE
Video Name Time 1. Nmap and NSE (OBJ 2.4, 4.2) 2:54 2. Nmap Discovery Scans (OBJ 2.4, 4.2) 8:38 3. Nmap Port Scans (OBJ 2.4, 4.2) 7:59 4. Nmap Fingerprinting (OBJ 2.4, 4.2) 9:09 5. Nmap Scripting Engine (OBJ 2.4, 4.2) 1:55 -
Scripting Basics
Video Name Time 1. Scripting Basics (OBJ 2.3) 2:40 2. Shells and Programming Languages (OBJ 2.3) 10:48 3. Variables and Constants (OBJ 2.3) 5:48 4. Loops (OBJ 2.3) 4:31 5. Logic Control (OBJ 2.3) 6:31 6. Data Structures (OBJ 2.3) 8:59 7. Object Oriented Programming (OBJ 2.3) 7:55 -
Modifying Scripts
Video Name Time 1. Modifying Scripts (OBJ 2.3) 2:38 2. Bash Fundamentals (OBJ 2.3) 10:06 3. PowerShell Fundamentals (OBJ 2.3) 11:07 4. Understanding a PowerShell Script (OBJ 2.3) 5:03 5. Python Fundamentals (OBJ 2.3) 13:44 6. Understanding a Python Script (OBJ 2.3) 5:30 7. Modifying a Python Script (OBJ 2.3) 3:53 -
Analyzing Scans
Video Name Time 1. Analyzing Scans (OBJ 3.2, 4.1) 3:33 2. Positive and Negative Results (OBJ 3.2) 5:56 3. Validating Scan Results (OBJ 3.2) 5:30 4. Using CVEs and CVSS (OBJ 4.1) 8:38 5. Exploit Prediction Scoring System (OBJ 4.1) 5:13 6. Target Prioritization (OBJ 4.1) 6:11 7. Common Target Criteria (OBJ 4.1) 8:19 8. Scripting for Result Validation (OBJ 3.2) 5:25 9. Scan Validations (OBJ 3.2) 7:10 10. Capability Selection (OBJ 3.2, 4.1) 7:13 11. Documenting the Attack (OBJ 4.1) 7:33 12. Other Attack Considerations (OBJ 4.1) 5:20 -
Discovering Vulnerabilities
Video Name Time 1. Discovering Vulnerabilities (OBJ 3.1) 2:51 2. Application Scanning (OBJ 3.1) 6:05 3. Software Analysis (OBJ 3.1) 5:51 4. Host-Based Scanning (OBJ 3.1) 5:38 5. Network Scanning (OBJ 3.1) 5:43 6. Mobile Scanning (OBJ 3.1) 7:51 7. Container Scanning (OBJ 3.1) 2:31 8. Scanning IaC (OBJ 3.1) 6:27 9. ICS Vulnerability Discovery (OBJ 3.1) 6:36 10. Wireless Scans (OBJ 3.1) 5:52 11. Static Code Analysis (SonarQube) (OBJ 3.1) 3:12 -
Vulnerability Discovery Tools
Video Name Time 1. Vulnerability Discovery Tools (OBJ 3.1) 2:45 2. Nikto (OBJ 3.1) 3:51 3. Trivy (OBJ 3.1) 5:17 4. BloodHound (OBJ 3.1) 6:04 5. PowerSploit (OBJ 3.1) 5:21 6. Grype (OBJ 3.1) 7:08 7. Kube-Hunter (OBJ 3.1) 6:12 8. TruffleHog (OBJ 3.1) 5:27 -
Social Engineering Attacks
Video Name Time 1. Social Engineering Attacks (OBJ 4.8) 2:49 2. Methods of Influence (OBJ 4.8) 5:20 3. Phishing Campaigns (OBJ 4.8) 5:38 4. Gophish (OBJ 4.8) 4:53 5. Impersonation (OBJ 4.8) 5:39 6. Surveillance Techniques (OBJ 4.8) 5:48 7. Watering Hole (OBJ 4.8) 4:38 8. Evilginx (OBJ 4.8) 5:04 9. Tailgating and Piggybacking (OBJ 4.8) 4:02 10. Browser Exploitation Framework (BeEF) (OBJ 4.8) 4:12 -
Wireless Attacks
Video Name Time 1. Wireless Attacks (OBJ 4.7) 2:53 2. Wireless Security (OBJ 4.7) 7:48 3. Wireless Signal Exploitation (OBJ 4.7) 4:39 4. Aircrack-ng (OBJ 4.7) 8:29 5. Wireless Hacking (OBJ 4.7) 2:31 6. WPS PIN Attacks (OBJ 4.7) 2:41 7. Captive Portal Attacks (OBJ 4.7) 5:01 8. Evil Twin (OBJ 4.7) 5:10 9. Kismet (OBJ 4.7) 5:47 10. Wi-Fi Protocol Fuzzing (OBJ 4.7) 8:07 -
Network Attacks
Video Name Time 1. Network Attacks (OBJ 4.2, 4.3, 4.5) 4:21 2. Stress Testing (OBJ 4.2) 8:32 3. Bypassing Segmentation (OBJ 4.2) 7:12 4. MAC Spoofing (OBJ 4.2) 6:11 5. NAC Bypass (OBJ 4.2) 6:05 6. Session-Based Attacks (OBJ 4.2) 5:35 7. Service Exploitation (OBJ 4.2) 6:49 8. Packet Crafting (OBJ 4.2) 7:37 9. Netcat (OBJ 4.2) 6:12 10. Using Ncat (OBJ 4.2) 7:54 11. LLMNR/NBT-NS Poisoning (OBJ 4.2) 7:22 12. ARP Poisoning (OBJ 4.2) 6:21 13. Intro to Metasploit (OBJ 4.2) 5:12 -
Authentication Attacks
Video Name Time 1. Authentication Attacks (OBJ 4.2, 4.3, 4.5) 3:47 2. Types of Password Attack (OBJ 4.3) 5:08 3. Credential Attacks (OBJ 4.3) 9:22 4. Credential Passing Attacks (OBJ 4.3) 7:02 5. Directory Service Attacks (OBJ 4.2, 4.3) 11:20 6. CrackMapExec (CME) (OBJ 4.3) 3:47 7. SAML Attacks (OBJ 4.3) 8:51 8. OpenID Connect (OIDC) Attacks (OBJ 4.3) 8:58 9. Hash Attacks (OBJ 4.5) 7:07 -
HostAttacks
Video Name Time 1. Host Attacks (OBJ 4.4) 3:32 2. Privilege Escalation (OBJ 4.4) 7:50 3. Credential Harvesting (OBJ 4.4) 7:37 4. Misconfigured Endpoints (OBJ 4.4) 5:20 5. Unquoted Service Paths (OBJ 4.4) 6:31 6. Disabling Security Software (OBJ 4.4) 9:18 7. Payload Obfuscation (OBJ 4.4) 6:31 8. User-Controlled Access Bypass (OBJ 4.4) 8:05 9. Shell and Kiosk Escapes (OBJ 4.4) 6:34 10. Library and Process Injection (OBJ 4.4) 1:38 11. Log Tampering (OBJ 4.4) 5:59 12. Living Off the Land (OBJ 4.4) 10:24 -
Web Application Vulnerabilities
Video Name Time 1. Web Application Vulnerabilities (OBJ 4.3, 4.5) 3:33 2. Race Conditions (OBJ 4.5) 7:22 3. Buffer Overflows (OBJ 4.5) 7:52 4. Authentication Flaws and Insecure References (OBJ 4.5) 5:41 5. Improper Error Handling (OBJ 4.5) 6:08 6. Improper Headers (OBJ 4.5) 7:21 7. Code Signing (OBJ 4.5) 5:30 8. Vulnerable Components (OBJ 4.5) 10:15 9. Software Composition (OBJ 4.5) 8:25 -
Web Application Attacks
Video Name Time 1. Web Application Attacks (OBJ 4.5) 3:22 2. Directory Traversals (OBJ 4.5) 6:56 3. Directory Traversal Tools (OBJ 4.5) 3:07 4. Cross-Site Scripting (XSS) (OBJ 4.5) 6:56 5. Request Forgeries (OBJ 4.5) 6:56 6. SQL Injections (OBJ 4.5) 8:23 7. Injection Attacks (OBJ 4.5) 8:22 8. File Inclusions (OBJ 4.5) 7:46 9. Arbitrary Code Execution (OBJ 4.5) 8:30 10. Web Application Session Hijacking (OBJ 4.5) 7:20 11. Abusing APIs (OBJ 4.5) 4:52 12. OWASP ZAP (OBJ 4.5) 6:46 -
Cloud Atacks
Video Name Time 1. Cloud Attacks (OBJ 4.6 ) 3:32 2. Identity and Access Management (IAM) Misconfigurations (OBJ 4.6 ) 5:18 3. Resource Misconfigurations (OBJ 4.6 ) 6:25 4. Logging Information Exposures (OBJ 4.6 ) 5:31 5. Metadata Service Attacks (OBJ 4.6 ) 5:51 6. Image and Artifact Tampering (OBJ 4.6 ) 7:21 7. Supply Chain Attacks (OBJ 4.6 ) 6:14 8. Container Exploits and Attacks (OBJ 4.6 ) 6:11 9. Trust Relationship Abuse (OBJ 4.6 ) 7:58 10. Third-party Integration Exploits (OBJ 4.6 ) 8:18 11. Cloud Security Testing (OBJ 4.6 ) 7:20 -
Attacking Specialized Systems
Video Name Time 1. Attacking Specialized Systems (OBJ 4.9) 3:13 2. Mobile Device Attacks (OBJ 4.9) 14:24 3. Tools for Mobile Device Attacks (OBJ 4.9) 8:36 4. Bluetooth Attacks (OBJ 4.9) 5:29 5. NFC and RFID Attacks (OBJ 4.9) 6:41 6. AI Attacks (OBJ 4.9) 6:29 7. Operational Technology (OT) (OBJ 4.9) 7:42 8. OT Attacks (OBJ 4.9) 8:48 9. Testing OT Systems (OBJ 4.9) 7:51 -
Automated Attacks
Video Name Time 1. Automated Attacks (OBJ 4.10) 3:40 2. Automating Attacks with Bash (OBJ 4.10) 5:30 3. Empire/PowerSploit (OBJ 4.10) 8:27 4. PowerView (OBJ 4.10) 7:39 5. PowerUpSQL (OBJ 4.10) 10:00 6. AD Search (OBJ 4.10) 8:48 7. Impacket (OBJ 4.10) 5:19 8. Scapy (OBJ 4.10) 8:09 9. Caldera (OBJ 4.10) 8:02 10. Infection Monkey (OBJ 4.10) 5:56 11. Atomic Red Team (OBJ 4.10) 5:45 -
Persistence
Video Name Time 1. Persistence (OBJ 5.1) 2:59 2. Command and Control (OBJ 5.1) 8:44 3. Automating Persistence (OBJ 5.1) 9:31 4. Remote Shells (OBJ 5.1) 7:33 5. Using Remote Shells (OBJ 5.1) 8:09 6. Backdoor (OBJ 5.1) 7:54 7. Remote Access Trojans (OBJ 5.1) 11:32 8. Account Credentials (OBJ 5.1) 9:26 9. Browser-Based Persistence (OBJ 5.1) 7:06 10. Security Control Tampering (OBJ 5.1) 9:30 -
Lateral Movement
Video Name Time 1. Lateral Movement (OBJ 5.2) 3:36 2. Pivoting and Relaying (OBJ 5.2) 7:23 3. Using ProxyChains (OBJ 5.2) 7:29 4. Enumerating for Lateral Movement (OBJ 5.2) 7:16 5. Service Discovery (OBJ 5.2) 7:41 6. Protocol Discovery (OBJ 5.2) 6:04 7. Remote Access Discovery (OBJ 5.2) 7:11 8. Printer Discovery (OBJ 5.2) 5:32 9. Discovering Internal Websites (OBJ 5.2) 9:52 10. Living Off the Land Tools (OBJ 5.2) 7:53 11. sshuttle (OBJ 5.2) 8:48 12. Covenant (OBJ 5.2) 8:49 -
Exfiltration
Video Name Time 1. Exfiltration (OBJ 5.3) 2:21 2. Covert Channels (OBJ 5.3) 7:38 3. Steganography (OBJ 5.3) 2:54 4. Covert Channel Using DNS (OBJ 5.3) 2:14 5. Covert Channel Using ICMP (OBJ 5.3) 0:49 6. Alternate Data Streams (ADS) (OBJ 5.3) 6:37 7. Exfiltrating Data (OBJ 5.3) 6:39 -
Cleanup and Restoration
Video Name Time 1. Cleanup and Restoration (OBJ 5.4) 2:52 2. Persistence Removal (OBJ 5.4) 7:41 3. Revert Configuration Changes (OBJ 5.4) 5:58 4. Created Credentials Removal (OBJ 5.4) 6:36 5. Removal of Testing Tools (OBJ 5.4) 5:55 6. Decommission Testing Infrastructure (OBJ 5.4) 7:15 7. Artifact Preservation (OBJ 5.4) 5:31 8. Secure Data Destruction (OBJ 5.4) 8:55 -
Remediation Recommendations
Video Name Time 1. Remediation Recommendations (OBJ 1.5) 2:52 2. System Hardening (OBJ 1.5) 9:07 3. User Input Sanitization (OBJ 1.5) 9:15 4. Network and Infrastructure Controls (OBJ 1.5) 7:50 5. Authentication Recommendations (OBJ 1.5) 8:40 6. Encryption Recommendations (OBJ 1.5) 10:45 7. Patch Management (OBJ 1.5) 9:02 8. Process Level Remediation (OBJ 1.5) 7:43 9. Administrative Controls (OBJ 1.5) 10:41 10. Physical Controls (OBJ 1.5) 8:46 11. Operational Controls and Policies (OBJ 1.5) 6:26 -
Penetration Test Reporting
Video Name Time 1. Penetration Test Reporting (OBJ 1.4) 3:19 2. Executive Summary Process (OBJ 1.4) 5:23 3. Root Cause Analysis (OBJ 1.4) 5:45 4. Report Components (OBJ 1.2, 1.4) 5:47 5. Risk Scoring and Prioritization (OBJ 1.4) 4:39 6. Definitions in the Report (OBJ 1.4) 3:46 7. Limits and Assumptions (OBJ 1.2, 1.4) 5:14 8. Special Considerations (OBJ 1.2, 1.4) 6:36 -
Conclusion
Video Name Time 1. Conclusion 9:51
Add Comment