Penetration Testing: Introduction

Reconnaissance: Advanced Information Gathering

Vulnerability Analysis: Identifying the Weakness and Logical Flaws

Exploitation: Network and Other Services or Applications Exploitation

Exploitation: Gaining the Initial Access

Exploitation: Generating Malicious Payloads for Exploitation

Exploitation: Automated and Manual Exploitation of System Vulnerabilities

Mitigate the Identified Vulnerabilities and Re-testing

Exploitation: Windows Privilege Escalation – Owning the Windows Server

Exploitation: Linux Privilege Escalation – Owning the Linux Server

Post Exploitation: Compromising the Network

Post Exploitation: Pivoting and Tunneling – Access the Hidden Corners of Network Securely

Post Exploitation: Controlling the Compromised Devices using C2 Server

Reporting and Remediation

Antivirus Evasion: Bypass the Security to Deliver Payloads

Active Directory: Exploiting the Infrastructure

Penetration Testing Standards (PTES)

NIST Cyber Security Framework

Payment Card Industry Data Security Standard (PCIDSS)

Mitre & ATTCK Framework