CompTIA PenTest+ Certification - Oman

CompTIA PenTest+ Certification Course Outline

Module 1: Engagement Management

• Planning and scoping
  • Defining Rules of Engagement
  • Testing Windows
  • Target Selection
• Legal and Ethical Compliance
  • Ensuring Authorisation Letters
  • Mandatory Reporting
  • Adherence to Regulations
• Collaboration and Communication
  • Aligning with Stakeholders through Peer Reviews
  • Escalation Paths
  • Risk Articulation
• Penetration Test Reports
  • Creating Reports with Executive Summaries
  • Findings
  • Remediation Recommendations

Module 2: Reconnaissance and Enumeration

• Active and passive reconnaissance
  • Gathering Information using Open-Source Intelligence (OSINT)
  • Network Sniffing
  • Protocol Scanning
• Enumeration Techniques
  • Performing DNS Enumeration
  • Service Discovery
  • Directory Enumeration
• Reconnaissance Tools
  • Using Tools Like Nmap
  • Wireshark
  • Shodan for Information Gathering
• Script Modification
  • Customizing Python
  • PowerShell
  • Bash Scripts for Reconnaissance and Enumeration

Module 3: Vulnerability Discovery and Analysis

• Vulnerability Scans
  • Conducting Authenticated
  • Unauthenticated
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
• Result Analysis
  • Validating Findings
  • Troubleshooting Configurations
  • Identifying False Positives
• Discovery Tools
  • Nessus, Nikto, and OpenVAS for Vulnerability Discovery

Module 4: Attacks and Exploits

• Network Attacks
  • Performing VLAN Hopping
  • On-Path Attacks
  • Service Exploitation
• Authentication Attacks
  • Executing Brute-Force Attacks
  • Pass-The-Hash
  • Credential Stuffing
• Host-Based Attacks
  • Conducting Privilege Escalation
  • Process Injection
  • Credential Dumping
• Web Application Attacks
  • Performing SQL Injection
  • Cross-Site Scripting (XSS)
  • Directory Traversal
• Cloud-Based Attacks
  • Exploiting Container Escapes
  • Metadata Service Attacks
  • Identity and Access Management (IAM) Misconfiguration
• AI Attacks
  • Explaining Prompt Injection
  • Model Manipulation Against Artificial Intelligence Systems

Module 5: Post-Exploitation and Lateral Movement

• Post-Exploitation Activities
  • Establishing Persistence
  • Performing Lateral Movement
  • Cleaning Up Artifacts
• Documentation
  • Creating Attack Narratives and Providing Remediation Recommendations

Who should attend this CompTIA PenTest+ Certification Course?

The CompTIA PenTest+ Coures is designed for Cybersecurity professionals who want to specialise in Penetration Testing or ethical hacking. This CompTIA PenTest+ Certification Training is especially beneficial for the following professionals:

• Penetration Testers
• Cybersecurity Professionals
• IT Professionals
• Security Analysts
• Information Security Managers
• Network Administrators
• IT Auditors

Prerequisites of the CompTIA PenTest+ Certification Course

There are no formal prerequisites for attending this CompTIA PenTest+ Course. However, it will be beneficial for delegates to have some prior experience or knowledge in network and system administration, as well as a foundational understanding of Information Security principles.

CompTIA PenTest+ Certification Course Overview

The CompTIA PenTest+ Training is tailored to empower Cybersecurity professionals with the essential knowledge and skills needed to proficiently conduct penetration testing and vulnerability assessments. Penetration testing, often referred to as pen testing, stands as a critical practice within cybersecurity, enabling organisations to proactively detect and address security vulnerabilities before they can be exploited by malicious individuals or groups.

This CompTIA PenTest+ Certification Training is specifically designed to cater to the needs of Cybersecurity Analysts, Ethical Hackers, Security Consultants, and IT Professionals who are keen on advancing their expertise in Cybersecurity. By attending the CompTIA PenTest+ Course, individuals can prioritise enhancing their capabilities in performing penetration tests, identifying security weaknesses, and offering recommendations to fortify an organisation's overall security posture.

This 4-day training by The Knowledge Academy equips delegates with a comprehensive understanding of penetration testing methodologies and techniques. Delegates will learn various facets of penetration testing, including meticulous planning and scoping, thorough information gathering, comprehensive vulnerability assessment, strategic exploitation, detailed post-exploitation analysis, and effective reporting practices.

Course Objectives

• To learn various Penetration Testing tools for identifying and exploiting security vulnerabilities
• To assess the risks associated with security vulnerabilities and recommend appropriate remediation measures
• To develop critical thinking and problem-solving skills
• To conduct penetration testing responsibly and ethically
• To write reliable Penetration Testing reports

Upon completing the CompTIA PenTest+ Certification, delegates will possess the knowledge, skills, and certification necessary to conduct penetration tests and vulnerability assessments effectively. They will be equipped to identify and address security weaknesses, enhance organisational security posture, and mitigate the risk of cyber threats, ultimately contributing to a more resilient and secure IT environment.

What’s included in this CompTIA PenTest+ Certification Course?

• World-Class Training Sessions from Experienced Instructors
• Digital Delegate Pack