Manage Risk and Conduct Penetration Testing Exercises
About This Course
In this module, participants will learn the comprehensive process of conducting penetration testing engagements, from scoping and planning to execution and reporting. The module covers both passive and active information gathering techniques, enabling learners to identify and analyze potential vulnerabilities in target systems. Through practical exercises and real-world scenarios, participants will develop the skills necessary to conduct thorough and effective penetration tests, ensuring they can provide valuable insights and recommendations to clients.
What You'll Learn
LO2: Accurately scope projects to meet client requirements, including timescale and resource planning.
LO3: Utilize search engines, newsgroups, mailing lists, and web site analysis to gather information about a target.
LO4: Analyze mail and news headers, and interpret registration records (WHOIS) for information leakage.
LO5: Map networks and identify targets using network sweeping techniques and route analysis.
LO6: Conduct OS fingerprinting using both active and passive techniques.
LO7: Fingerprint applications and evaluate unknown services based on application banners and network responses.
LO8: Interpret output from port scanners, network sniffers, and other enumeration tools to identify potential vulnerabilities.
Entry Requirements
Language: Obtained at least Grade C6 in GCE 'O' Level English Language, or
Be able to listen, speak, read and write English at a proficiency level equivalent to WSQ Workplace Literacy (WPLN) Level 5. Academic: Obtained at least Grade C6 in 3 GCE ‘O’ Level Subject, or Higher NITEC or equivalent.