C)PTE: Certified Penetration Testing Consultant

A Certified Penetration Testing Engineer (C)PTE) imagines all of the ways that a hacker can penetrate a data system. In this course you will learn 5 Key Elements of Pen Testing, discover the latest vulnerabilities and the techniques malicious hackers are using to acquire and destroy data and learn more about the business skills needed to identify protection opportunities, justify testing activities and optimize security controls appropriate to the business needs in order to reduce business risk.

Description

Overview

A Certified Penetration Testing Engineer (C)PTE) imagines all of the ways that a hacker can penetrate a data system. You have to go beyond what you learned as an Ethical Hacker because pen testing explores technical and non-technical ways of breaching security to gain access to a system. This C)PTE course is built on proven hands-on methods utilized by our international group of vulnerability consultants.

In this course you will learn 5 Key Elements of Pen Testing; Information Gathering, Scanning, Enumeration, Exploitation and Reporting. Plus, discover the latest vulnerabilities and the techniques malicious hackers are using to acquire and destroy data. Additionally, you will learn more about the business skills needed to identify protection opportunities, justify testing activities and optimize security controls appropriate to the business needs in order to reduce business risk.

CPTE Exam Prep, Exam Voucher & Free Retake are included

Course Objectives

Upon completion, the Certified Penetration Testing Engineer (C)PTE) candidate will have solid knowledge of testing and reporting procedures which will prepare them for upper management roles within a cybersecurity system. They will be able to competently take the C)PTE exam.

Who Should Attend

  • Pen Testers
  • Security Officers
  • Ethical Hackers
  • Network Auditors
  • Cyber Security Engineers
  • Vulnerability Assessors
  • System Owners and Managers

Course Outline

Module 1: Business and Technical Logistics of Pen Testing

  • What is Penetration Testing?
  • Today’s Threats
  • Staying up to Date
  • Pen Testing Methodology
  • Pre-Engagement Activities

Module 2: Information Gathering

  • What are we looking for?
  • Keeping Track of what we find!
  • Where/How do we find this Information?
  • Are there tools to help?
  • Countermeasures

Module 3: Detecting Live Systems

  • What are we looking for?
  • Reaching Out!
  • Port Scanning
  • Are there tools to help?
  • Countermeasure

Module 4: Banner Grabbing and Enumeration

  • Banner Grabbing
  • Enumeration

Module 5: Automated Vulnerability Assessment

  • What is a Vulnerability Assessment?
  • Tools of the Trade
  • Testing Internal/External Systems
  • Dealing with the Results

Module 6: Hacking Operating Systems

  • Key Loggers
  • Password Attacks
  • Rootkits & Their Friends
  • Clearing Tracks

Module 7: Advanced Assessment and Exploitation Techniques

  • Buffer Overflow
  • Exploits
  • Exploit Framework

Module 8: Evasion Techniques

  • Evading Firewall
  • Evading Honeypots
  • Evading IDS

Module 9: Hacking with PowerShell

  • PowerShell – A Few Interesting Items
  • Finding Passwords with PowerShell

Module 10: Networks and Sniffing

  • Sniffing Techniques

Module 11: Hacking Web Techniques

  • OWASP Top 10
  • SQL Injection
  • XSS

Module 12: Mobile and IoT Hacking

  • What devices are we talking about?
  • What is the risk?
  • Potential Avenues to Attack
  • Hardening Mobile/IoT Devices

Module 13: Report Writing Basics

  • Report Components
  • Report Results Matrix
  • Recommendations

Detailed Labs Outline

Lab 1: Introduction to Pen Testing Setup

  • Recording IPs and Logging into the VMs
  • Joining the Domain
  • Research

Lab 2: Using tools for reporting

  • Setup a Shared Folder
  • Setting up and using Dradis CE

Lab 3: Information Gathering

  • Google Queries
  • Searching Shodan
  • Maltego
  • The many tools of OSINT
  • Recon-ng

Lab 4: Detecting Live Systems - Scanning Techniques

  • Finding a target using Ping utility
  • Footprinting a Target Using nslookup Tool
  • Scanning a Target Using nmap Tools
  • Scanning a Target Using Zenmap Tools
  • Scanning a Target Using hping3 Utility
  • Make use of the telnet utility to perform banner grabbing

Lab 5: Enumeration

  • OS Detection with Zenmap
  • Enumerating services with nmap
  • DNS Zone Transfer
  • Enum4linux
  • AD Enumeration

Lab 6: Vulnerability Assessments

  • Vulnerability Assessment with Rapid7 InsightVM
  • Vulnerability Assessment with OpenVAS

Lab 7: System Hacking – Windows Hacking

  • Scanning from the Hacked System
  • Using a Keylogger
  • Extracting SAM Hashes for Password cracking
  • Creating Rainbow Tables
  • Password Cracking with Rainbow Tables
  • Password Cracking with Hashcat
  • Mimikatz

Lab 8: Advanced Vulnerability and Exploitation Techniques

  • Metasploitable Fundamentals
  • Metasploit port and vulnerability scanning
  • Client-side attack with Metasploit
  • Using Workspaces in Metasploit
  • Remote Exploitation of Windows Server

Lab 9: AntiVirus Bypass

  • Bypassing AntiVirus – Not as effective
  • Bypassing AntiVirus Signature Scanning
  • Bypassing Windows Defender

Lab 10: Cracking Passwords from a Linux System

  • Cracking Linux Passwords
  • Brute-force SSH Accounts

Lab 11: Hacking with PowerShell

  • Using PowerShell to Crack Passwords
  • Using PowerShell for Enumeration

Lab 12: Network Sniffing/IDS

  • Sniffing Passwords with Wireshark
  • Performing MitM with Cain

Lab 13: Attacking Web Applications

  • Injection
  • Broken Authentication
  • Sensitive Data Exposure
  • XML External Entities
  • Broken Access Control
  • Security Misconfiguration
  • Cross-Site Scripting
  • Insecure Deserialization
  • WebApp Scanning

Prerequisites

Similar courses

This course was built to incorporate a unique, in-depth, and interactive hands-on environment and systematic process across each ethical hacking domain and methodology, giving you the opportunity to work towards proving the required knowledge and skills needed to achieve the CEH credential.

More Information

CompTIA A+ is the industry standard for launching IT careers into today’s digital world. CompTIA A+ Core 1 (Exam 220-1101) covers mobile devices, networking technology, hardware, virtualization, cloud computing and network troubleshooting.

More Information

The CCISO program is a first-of-its-kind training and certification course that aims to produce cybersecurity executives of the highest caliber and ethics.

More Information

The principles of Scrum and be able to identify Scrum-appropriate projects The various Scrum roles, ceremonies, and artifacts The responsibilities and the core competencies of an effective Scrum Master Best-practices on how to build and guide an effective Scrum team An understanding of user stories and techniques to prioritize and manage a product backlog Ways to communicate Scrum team progress throughout all levels of the organization Everything you need to know to pass the 50 question CSM test.

More Information

This course introduces tools and tactics to manage cybersecurity risks, identify various types of common threats, evaluate the organization's security, collect and analyze cybersecurity intelligence, and handle incidents as they occur.

More Information

This course will build on existing knowledge from the CompTIA A+ 1101 course. This course will provide fundamental level skills and theoretical concepts to prepare you for real-world experiences on the job as a technician. CompTIA A+ is the industry standard for launching IT careers into today’s digital world. CompTIA A+ Core 2 (Exam 220-1102) covers installing and configuring operating systems, expanded security, software troubleshooting and operational procedures.

More Information

This course was designed for people who work in a Security Operations job role and helps learners prepare for the exam SC-200: Microsoft Security Operations Analyst.

More Information

Certified Information Systems Auditor (CISA) Boot Camp is a five-day training focused on preparing you for the ISACA CISA exam. You’ll leave with the knowledge and domain expertise needed to pass the CISA exam the first time you take it.

More Information

CEH provides an in-depth understanding of ethical hacking phases, various attack vectors, and preventative countermeasures. This course was built to incorporate a unique, in-depth, and interactive hands-on environment and systematic process across each ethical hacking domain and methodology, giving you the opportunity to work towards proving the required knowledge and skills needed to achieve the CEH credential.

More Information

CompTIA Cloud+ is a global certification that validates the skills needed to deploy and automate secure cloud environments that support the high availability of business systems and data. It is ideal for cloud engineers who need to have expertise across multiple products and systems. CompTIA Cloud+ is the only cloud focused certification approved for DoD 8570.01-M, offering an infrastructure option for individuals who need to certify in IAM Level I, CSSP Analyst and CSSP Infrastructure Support roles.

More Information

CompTIA Security+ is a global certification that validates the foundational cybersecurity skills necessary to perform core security functions and pursue an IT security career. It establishes the core knowledge required of any cybersecurity role and provides a springboard to intermediate-level cybersecurity jobs. CompTIA Security+ is compliant with ISO 17024 standards and approved by the U.S. DoD to meet Directive 8140.03M requirements.

More Information

Gain a broad view of how to respond to a cybersecurity incident while preparing for the CyberSec First Responder certification.

More Information

CompTIA Data+ is an early-career data analytics certification for professionals tasked with developing and promoting data-driven business decision-making that gives learners the confidence to bring data analysis to life.

More Information

This course shows you how to apply various approaches and algorithms to solve business problems through Artificial Intelligence (AI) and Machine Learning (ML), follow a methodical workflow to develop sound solutions, use open source, off-the-shelf tools to develop, test, and deploy those solutions, and ensure that they protect the privacy of users. This course includes hands on activities for each topic area.

More Information

Our Exam Cram sessions are intensive, focused review sessions designed to help your team master key concepts and pass their CompTIA certification exams with confidence. Led by expert instructors, these sessions provide in-depth, targeted hands-on practice to ensure your team is fully prepared for exam day. CompTIA A+ Core 1 covers mobile devices, networking technology, hardware, virtualization and cloud computing and network troubleshooting. This exam cram session is included with the A+ Core 1 course.

More Information

Our Exam Cram sessions are intensive, focused review sessions designed to help your team master key concepts and pass their CompTIA certification exams with confidence. Led by expert instructors, these sessions provide in-depth, targeted hands-on practice to ensure your team is fully prepared for exam day. CompTIA A+ Core 2 covers installing and configuring operating systems, expanded security, software troubleshooting and operational procedures. This exam cram session is included with the A+ Core 2 course.

More Information

CompTIA Network+ certification exam covers the latest trends in networking and validates the core skills necessary to establish, maintain, troubleshoot and secure networks in any environment, preparing learners for a rewarding career in networking and cybersecurity. Students gain a wide range of technical and hands-on skills required of today’s early-career network administrators. Network+ is Approved for DoD 8140.03.

More Information

Our Exam Cram sessions are intensive, focused review sessions designed to help your team master key concepts and pass their CompTIA certification exams with confidence. Led by expert instructors, these sessions provide in-depth, targeted hands-on practice to ensure your team is fully prepared for exam day. Network+ exam covers the core skills necessary to establish, maintain, troubleshoot and secure networks regardless of technology or platform. This exam cram session is included with the Network+ course.

More Information

Our Exam Cram sessions are intensive, focused review sessions designed to help your team master key concepts and pass their CompTIA certification exams with confidence. Led by expert instructors, these sessions provide in-depth, targeted hands-on practice to ensure your team is fully prepared for exam day. Security+ covers the most in-demand skills related to current threats, automation, zero trust, IoT, risk – and more. This exam cram session is included with the Security+ course.

More Information

Our Exam Cram sessions are intensive, focused review sessions designed to help your team master key concepts and pass their CompTIA certification exams with confidence. Led by expert instructors, these sessions provide in-depth, targeted hands-on practice to ensure your team is fully prepared for exam day. Cloud+ covers the expertise needed to deploy and automate secure cloud environments and protect mission-critical applications and data. This exam cram session is included with the Cloud+ course.

More Information

Our Exam Cram sessions are intensive, focused review sessions designed to help your team master key concepts and pass their CompTIA certification exams with confidence. Led by expert instructors, these sessions provide in-depth, targeted hands-on practice to ensure your team is fully prepared for exam day. Cloud+ covers mining and manipulating data, applying basic statistical methods, and analyzing complex datasets. This exam cram session is included with the Data+ course.

More Information

The Certified Information Systems Security Manager (C-ISSM) course covers the skills and knowledge to assess threat analysis & risks, risk & incident management, security programs & CISO roles, IS security strategy & frameworks, audit & risk management creation of policies, compliance & awareness, as well as DR & BCP development, deployment & maintenance. This course not only covers ISACA®'s CISM exam, but will provide a measurable certification that demonstrates proficiency in the IS Management field.

More Information

This scenario-based course focuses on computer security as an applied process across job roles and industries. The course also helps to prepare students for achieving the widely regarded Certified Information Systems Security Professional (CISSP) certification.

More Information

This course provides IT Security Professionals with the knowledge and skills needed to implement security controls, maintain an organization’s security posture, and identify and remediate security vulnerabilities. This course includes security for identity and access, platform protection, data and applications, and security operations.

More Information

The Microsoft Identity and Access Administrator course explores how to design, implement, and operate an organization’s identity and access management systems by using Microsoft Entra ID (Formerly Azure AD). Learn to manage tasks such as providing secure authentication and authorization access to enterprise applications. You will also learn to provide seamless experiences and self-service management capabilities for all users.

More Information

Learn how to protect information in your Microsoft 365 deployment. This course focuses on data governance and information protection within your organization. The course covers implementation of data loss prevention policies, sensitive information types, sensitivity labels, data retention policies and Office 365 message encryption among other related topics. The course helps learners prepare for the Microsoft Information Protection Administrator exam (SC-400).

More Information

The Cloud is being widely adopted today for a diverse set of reasons. However, many are finding that security in the cloud is a huge challenge. The C)CSO looks to fill the gap in cloud security education and give you the skills you need to develop strong cloud security.

More Information

The Certified Security Principles (C)SP) course is going to prepare you for security across the entire environment including understanding risk management, identity and access control, network and data security. This is just a short list of everything covered within this course, which will include new technologies like IoT and cloud services. This course is intended to prepare you to become a benefit to any company attempting to improve its security posture.

More Information

The Certified Cybersecurity Systems Auditor (C)CSSA) course covers the skills and knowledge to assess vulnerabilities, report on compliance and implement controls for private and public enterprises. Many organizations require a Cybersecurity System Auditor's expert knowledge when it comes to identifying critical issues and providing effective auditing solutions.

More Information

The CISSO addresses the broad range of industry best practices, knowledge and skills expected of a security manager/officer. You will learn in-depth theory pertaining to the practical implementation of core security concepts, practices, monitoring and compliance of IS management. Whether you’re responsible for the management of a Cybersecurity team, a Security Officer, an IT auditor or a Business Analyst, the C)ISSO certification course is an ideal way to increase your knowledge, expertise and skill.

More Information

A Certified Disaster Recovery Engineer (C)DRE) is the superhero of an Information System. Disaster recovery (DR) and business continuity planning (BCP) is the process of having a professional work with a business to prepare processes, policies, and procedures to follow in the event of a disruption. The C)DRE prepares students to plan and present the latest methodologies and best practices for real-world system recovery.

More Information

To protect an information system you need to be able to see that system through the eyes of the attacker. The Certified Professional Ethical Hacker certification course is the foundational training to a line of penetration testing courses because it teaches you to think like a hacker. Therefore, you can set up dynamic defenses to prevent intrusion.

More Information

The Certified Secure Web Application Engineer (C)SWAE) course is delivered by high level OWASP experts and students can expect to obtain real world security knowledge that enables them to recognize vulnerabilities, exploit system weaknesses and help safeguard against application threats. You will learn how to develop web applications that aren't subject to common vulnerabilities, and how to test and validate that their applications are secure, reliable and resistant to attack.

More Information

The course focuses on common data engineering tasks such as orchestrating data transfer and transformation pipelines, working with data files in a data lake, creating and loading relational data warehouses, capturing and aggregating streams of real-time data, and tracking data assets and lineage.

More Information

This course teaches developers how to create applications using the SQL API and SDK for Azure Cosmos DB. Students will learn how to write efficient queries, create indexing policies, manage and provision resources, and perform common operations with the SDK.

More Information

In this course students will learn the various security, compliance, and identity concepts. After attending you will be able to describe the capabilities of Microsoft’s identity and access management solutions and Microsoft security and compliance solutions.

More Information