| Section | Objectives |
|---|
| Topic 1: Internet Information Gathering and Reconnaissance | - DNS, domain enumeration, and reconnaissance techniques
- Public information sources, search engines, and information leakage
|
| Topic 2: Soft Skills and Assessment Management | - Law, compliance, ethics, and professional responsibilities
- Engagement lifecycle and penetration testing methodologies
- Reporting, communication, and assessment management
|
| Topic 3: Virtualisation and Containerisation | - Virtualisation platforms, virtual machine security, and escape risks
- Containers, Docker, Kubernetes, and container security
|
| Topic 4: Web Technologies | - Sessions, cookies, cryptography, APIs, and application logic flaws
- Injection vulnerabilities, XSS, request forgery, and input validation
- Web architecture, application reconnaissance, and authentication
|
| Topic 5: Networks and Network Services | - Common network services, authentication, and configuration weaknesses
- Network protocols, scanning, enumeration, and service discovery
|
| Topic 6: Cloud Security | - Cloud services, exposure risks, and security controls
- Cloud infrastructure, identity and access management, and misconfigurations
|
| Topic 7: Physical Security | - Disk encryption, recovery mechanisms, and authentication
- Locks, tamper detection, platform integrity, and boot security
|
| Topic 8: Linux and UNIX Security Assessment | - Linux and UNIX exploitation, privilege escalation, and post-exploitation
- Host discovery, network enumeration, and file permissions
|
| Topic 9: Microsoft Windows Security Assessment | - Active Directory, privilege escalation, and post-exploitation
- Windows enumeration, permissions, and password security
|
| Topic 10: Secure Development Operations | - Infrastructure as Code and code repository security
- Secure coding practices and development lifecycle security
|
| Topic 11: Databases | - SQL injection, NoSQL injection, and database security weaknesses
- Database technologies, authentication, permissions, and configuration
|
| Topic 12: Core Technical Skills | - Common attack techniques and security controls
- Security principles, vulnerability assessment, and testing tools
|
| Topic 13: Social Engineering and macOS Security Assessment | - macOS reconnaissance, permissions, passwords, and exploitation
- Phishing, vishing, and related social engineering techniques
|
$908.00
66%OFF
0 Customer Reviews
0
0
0
0
