MODULE 1:

• Overview of Vulnerability Assessment & Penetration Testing.
• Why Penetration Testing is required?
• Offensive and Defensive face of Penetration Testing.
• Preparation for Penetration Testing Live test case.
• Identify weaknesses using Vulnerability Assessment tools.
• Automated calculate Vulnerability CVE, CVSS Scoring and Rating.

MODULE 2:

• Data Leakage Threats and Mitigation
• Identify data leakage entry points
• External and Internal data leakages
• Searching of Corporate Data Leakages
• Searching of Employee Data Leakages
• How attacker can exploit Corporate and Employee Data
• Security Testing Policy and Guidelines for Data Leakage

MODULE 3:

• Penetration Testing Methodology
• OSINT Penetration Testing Methodology
• OSSTMM Penetration Testing Methodology
• NIST Security Testing and Standards
• Penetration Testing Plan Template
• Security Assessment Plan Template
• Security Testing Plan Template
• Security White Paper and Research Paper

MODULE 4 :

• Operating System Escalating Privileges
• Understanding OS Kernel and File System
• Cracking Operating System Captured hash
• Dump Cleartext Password from memory
• Bypass Guest and Local Account Privileges
• Understanding PS tools for Windows Pentest
• Many OS Escalating Privileges Exploits test case

MODULE 5:

• Vulnerability Analysis
• Vulnerability Analysis using various tools
• Check Vulnerability status and Alerts
• Testing Exploit on Vulnerabilities
• Check false Vulnerabilities and exploits
• Find Patches and Hotfix with CVEs
• Preparing reports

MODULE 6 :

• Public or Private Exploits and CVE Exposures Tools
• Why Hackers Need Vulnerability Research
• Vulnerability Research Tools
• Vulnerability Research Websites
• Research Powerful Exploit tools
• Research Private exploits

MODULE 7:

• Network Scanning and Auxiliary Scanners
• Discover Network Connected Device & Servers
• Local area network Services Scanning
• Nmap Network and Service enumerations
• NetCat (Service Enumerations)
• NSE Scripts for vulnerability Analysis
• Different Port Scanning Techniques
• Firewall/IDS evasion Technique
• Discover and Exploit services using Auxiliary

MODULE 8:

• Metasploit Training for Pentester
• Staged vs. Non–Staged Payloads
• Meterpreter Payloads
• Experimenting with Meterpreter
• Reverse HTTPS Meterpreter
• Metasploit Exploit Multi Handler
• Revisiting Client Side Attacks
• Meterpreter and Post Exploitation
• Client-side Exploitation

MODULE 9:

• Bypassing Antivirus Software
• Encoding Payloads with Metasploit
• Crypting Known Malware with Software Protectors
• Using Custom/Uncommon Tools and Payloads

MODULE 10:

• Penetration Testing Reporting
• Collect Penetration Testing Scan Results
• Open Source reporting framework

MODULE 11:

• Infrastructure Security Maintenance checklists
• Data Loss Prevention Checklist
• All Server Hardening Checklists
• Complete Network Security Checklist
• Security Assessment Checklist
• Security Audit Checklist & more+++