This course is ideal for Penetration Testers, Security Engineers, Network Administrators, System Administrators, and individuals aiming for OSCP certification. It is also suitable for those involved in offensive security operations and bug bounty programs.

• Proficiency in Python
• Basic command-line tools and Linux operating system experience

Course Outline

Module 1: Information Gathering

• Passive information gathering techniques
• Network scanning with Host and Nmap
• Enumeration techniques (SMB, SMTP, SNMP)
• Lab: Information Gathering and Network Scanning

Module 2: Web Application Attacks

• Web application assessment tools
• Common web attacks and shell exploitation
• Lab: Web Application Attacks and Shell Exploitation

Module 3: Exploitation Techniques

• Locating public exploits
• Cracking SSH, RDP, and web passwords
• Exploiting privilege escalation vulnerabilities
• Lab: Exploitation and Privilege Escalation

Module 4: Automation and Scripting

• Automated enumeration tools
• Leveraging PowerShell and Windows services
• Lab: Automation and Scripting for Penetration Testing

Module 5: Advanced Exploitation

• DLL hijacking, scheduled tasks exploitation
• UAC attacks, SeImpersonate and SeBackup privileges
• Lab: Advanced Exploitation Techniques

Module 6: Linux Exploitation

• Enumerating and exploiting Linux systems
• Kernel vulnerabilities and cron job exploitation
• Lab: Linux Exploitation Techniques

Module 7: Tunneling and Lateral Movement

• Port redirection and tunneling techniques (Ligolo NG, Chisel, SSH, HTTP)
• Active directory enumeration and exploitation
• Lab: Tunneling and Lateral Movement

Module 8: Bug Bounty Automation

• Bug bounty tools and automation (ReconFTW, NucleiFuzzer, Magic Recon, Subzy)
• Authentication bypass techniques
• Lab: Bug Bounty Automation and Exploitation

Module 9: Defensive Security

• Introduction to defensive security
• Overview of cybersecurity and OSI model
• Lab: Implementing Defensive Security Measures

Module 10: Mobile App Pentesting

• Mobile app pentesting process (Android and iOS)
• Tools and techniques for mobile app security
• Lab: Mobile App Pentesting

Module 11: OWASP Top 10

• Overview and implementation of OWASP Top 10 security practices
• Lab: OWASP Top 10 Security Practices

Module 12: AWS Security

• Securing AWS environments
• Best practices for DDOS protection and IAM management
• Lab: AWS Security Best Practices

Module 13: Certification Preparation

• Preparation for OSCP certification
• Practice test and exam strategies
• Lab: OSCP Certification Practice

Training Material Provided:

Yes (Digital format)