What a penetration test is, the methodologies and standards that shape it, and the authorisation and scope that make it lawful.
Learning Objectives
스터디홀 모듈
Introduction to Penetration Testing
Learn how authorised penetration testers find and prove the weaknesses in an organisation's systems, and how they do it lawfully. You follow a test from end to end: agreeing scope and authorisation, gathering information, scanning and enumerating services, confirming vulnerabilities, demonstrating impact with care, escalating privilege, and writing a report the client can act on. A hands-on lab has you test an authorised staging server from first scan to findings. A starting point for anyone moving into offensive security.
학습 내용
1 Penetration testing and the law
학습 목표
- Explain what a penetration test is and how it differs from vulnerability scanning, red teaming and bug bounties.
- Describe the main types of test and the black, grey and white box approaches.
- Outline the published methodologies and the phases a test moves through.
- Describe the UK assurance schemes and the standards that require testing.
- Explain why written authorisation matters under the Computer Misuse Act 1990.
- Define a scope and rules of engagement, including systems a client does not own.
이 주제의 내용
- What is penetration testing?
- Methodologies and standards
- Scoping, authorisation and rules of engagement
2 Reconnaissance and enumeration
How a tester learns about a target, from public sources to active scanning, and identifies the services it runs.
Learning Objectives
학습 목표
- Distinguish passive from active reconnaissance and explain why passive comes first.
- Build a picture of a target from DNS, WHOIS, certificate transparency and archives.
- Discover live hosts and scan their ports with Nmap, and read the results.
- Explain the difference between a connect scan and a SYN scan, and when each is used.
- Enumerate services to confirm the software and version behind each open port.
- Record enumeration findings in a form the next phase can use.
이 주제의 내용
- Passive reconnaissance
- Host discovery and port scanning
- Service enumeration
3 Finding and validating vulnerabilities
How a tester turns services into a list of real weaknesses, and proves their impact without harming the client.
Learning Objectives
학습 목표
- Match software versions to known vulnerabilities using CVE and the National Vulnerability Database.
- Explain what a vulnerability scanner does well, and where false positives and negatives arise.
- Confirm a finding by hand before acting on it.
- Explain what exploitation proves and how to choose the safest demonstration.
- Describe the role of exploitation frameworks and the duty of care they demand.
- Find and safely test weak, default and leaked credentials.
- Recognise common web application flaws using the OWASP Top 10.
이 주제의 내용
- From services to vulnerabilities
- Exploitation in a controlled test
- Weak and default credentials
- Web application testing basics
4 Post-exploitation and reporting
What a tester does after gaining access: raising privilege, assessing impact, cleaning up, and reporting findings the client can act on. The topic ends with a hands-on lab.
Learning Objectives
학습 목표
- Explain privilege escalation and the common Linux and Windows misconfigurations that allow it.
- Assess the impact of a foothold while staying in scope.
- Gather evidence safely and clean up so the client is left no worse off.
- Describe the structure of a penetration test report and its audiences.
- Rate the severity of a finding and write a finding an engineer can fix.
- Explain why a retest closes an engagement and why a test is only a snapshot.
- Apply the whole testing process to an authorised staging server in a lab.
이 주제의 내용
- Privilege escalation
- Post-exploitation and clean-up
- Reporting and retesting
- Lab: Testing a staging server
- Lab walkthrough: Testing a staging server
