Capability Development / Cyber Security
Penetration Testing
This advanced program builds practical skills to assess, exploit, and secure modern IT environments. It covers reconnaissance, vulnerability assessment, exploitation, privilege escalation, web attacks, cloud testing, and Active Directory attacks, all reinforced through hands-on labs. Participants learn to identify security weaknesses, validate risk with proof of concept, apply exploitation techniques responsibly, and deliver professional, remediation-focused reports.
Program Overview
This advanced program builds practical skills to assess, exploit, and secure modern IT environments. It covers reconnaissance, vulnerability assessment, exploitation, privilege escalation, web attacks, cloud testing, and Active Directory attacks, all reinforced through hands-on labs. Participants learn to identify security weaknesses, validate risk with proof of concept, apply exploitation techniques responsibly, and deliver professional, remediation-focused reports.
Audience Profile
Penetration testers and red team practitioners; Security consultants and offensive security engineers; SOC and blue team members expanding into offensive testing; Candidates preparing for advanced pen testing certifications; and Prior scripting/programming and networking experience recommended.
Course Syllabus
Module 1: Testing Foundations - Linux, Scripting & Python
Topics
- Linux for penetration testing
- Scripting for pen-testing
- Python for pen-testing
- Penetration testing overview and benefits
- Types and methodologies of penetration testing
- Law, compliance, planning, and reporting
Module 2: OSINT, Reconnaissance & Enumeration
Topics
- OSINT foundations and core skills
- File metadata and reverse image analysis
- People investigations and SOCMINT
- Domain and IP investigations
- Dark web and Tor-based OSINT
- DNS zone transfers and port scanning
- Null sessions and Enum4Linux
- Capture the flag OSINT exercises
Module 3: Exploitation with Metasploit & Security Bypass
Topics
- Metasploit framework and auxiliary modules
- Exploit modules and payload types
- Multi handler and Meterpreter sessions
- Password attacks and hash cracking
- Antivirus evasion with MSFvenom
- Bypassing network filters, pfSense, IDS/IPS
Module 4: Buffer Overflow & Advanced Windows Exploitation
Topics
- Stack overflows, DEP, ASLR, and CFG
- Controlling EIP and SEH exploitation
- Heap overrun/overflow
- Win32 APIs and Windows registry
- Malicious macros and Office phishing
- PowerShell and VBA shellcode runners
- Credential replay and discovery
Module 5: Hashing, Credential & Latest Vulnerability Exploitation
Topics
- Pass the Hash (PTH) and Pass the Ticket (PTT)
- Kerberoasting and AS-REP Roasting
- FOLLINA, Log4j, and Spring4Shell exploitation
Module 6: Privilege Escalation & Persistence
Topics
- Windows privilege and integrity levels
- UAC bypass techniques
- Insecure file permissions and unquoted service paths
- Windows kernel vulnerability exploitation
- Linux privilege escalation techniques
- Cron and /etc/passwd misconfiguration abuse
Module 7: Web Application Attacks
Topics
- Burp Suite traffic inspection
- Session hijacking and riding
- Authentication bypass and RCE
- Server-side template injection
- Advanced XSS exploitation
- Cookie deserialization RCE
- RCE hunting techniques
Module 8: Cloud Testing, Active Directory Attacks & Reporting
Topics
- Entra ID and external reconnaissance
- Azure permission and user enumeration
- Conditional access management
- Kerberoasting and Golden/Silver Tickets
- Kerberos delegation abuse and DCSync
- Executive summaries and risk rating
- Proof of concept and report automation
Labs / Practice
- Use phishing frameworks to bypass MFA
- Perform device-code phishing attacks
- Build an Azure blob hunting lab
- Enumerate users and Azure permissions with AAD Internals, O365Spray, EvilGinx, and GraphSpy