(SCTP Module) Penetration Testing (Offence)
About This Course
In the Penetration Testing module, learners will be introduced to the comprehensive process of penetration testing. The course covers information gathering techniques, such as WHOIS, DNS reconnaissance, and Shodan, as well as scanning and enumeration tools like Nmap and Nessus. learners will learn to exploit vulnerabilities using various methods and tools, including Metasploit and Burp Suite. Post-exploitation tactics, such as privilege escalation and persistence, will also be covered. Additionally, the module delves into web application security, teaching learners about common web attacks and defense mechanisms. By the end of this module, learners will be equipped with the skills to conduct thorough penetration tests and enhance the security of systems and applications.
What You'll Learn
1. Master the techniques of information gathering
2. Performing scanning using Nmap and Nessus to accurately assess and document system vulnerabilities
3. Learn the practical aspects of exploiting vulnerabilities in systems, focusing on methodologies for gaining access to systems, crafting and deploying payloads, and using tools like Metasploit
4. Gain knowledge of advanced post-exploitation tactics, including privilege escalation, persistence, and disabling security features
5. Delve into the security of web applications, understanding the various threats and vulnerabilities specific to web environments. They will learn about HTML basics, OWASP guidelines, SQL Injection, XSS, LFI/RFI, and other common web attack vectors.
Entry Requirements
Qualifications in Information and Digital Technologies, and/or Engineering at minimum ITE NITEC/Higher NITEC.