Certified Penetration Testing Engineer Certification Cyber Security Training Course is built firmly upon proven, hands-on, Penetration Testing methodologies utilized by our international group of vulnerability consultants.
The CPTE presents information based on the 5 Key Elements of Pen Testing; Information Gathering, Scanning, Enumeration, Exploitation and Reporting. The latest vulnerabilities will be discovered using these tried and true techniques. This Cyber Security Training Course also enhances the business skills needed to identify protection opportunities, justify testing activities and optimize security controls to reduce risk associated to working with the internet. Besides utilizing ethical hacking methodologies, be prepared to learn penetration testing using advanced persistent threat techniques.
The CPTE was developed around principles and behaviors used to combat malicious hackers and focuses on professional penetration testing rather than “ethical hacking.”
With this in mind, the CPTE certification Cyber Security Training Course is an up-grade to the EC-Council CEH!
Prerequisites:
The knowledge and skills that the learner should have before attending this course are as follows:
- A minimum of 12 months experience in networking technologies
- Sound knowledge of TCP/IP
- Knowledge of Microsoft packages
- Network+, Microsoft, Security+
- Basic Knowledge of Linux is essential
Course Objectives:
Upon completion, Certified Penetration Testing Engineer students will be able to establish industry acceptable auditing standards with current best practices and policies. Students will also be prepared to competently take the C)PTE exam.
Course Outline:
- Module 1: Business and Technical Logistics of Pen Testing
- Module 2: Linux Fundamentals
- Module 3: Information Gathering
- Module 4: Detecting Live Systems
- Module 4 Lab Detecting Live Systems
- Module 5: Enumeration
- Module 6: Vulnerability Assessments
- Module 7: Malware Goes Undercover
- Module 8: Windows Hacking
- Module 9: Hacking UNIX/Linux
- Module 10: Advanced Exploitation Techniques
- Module 11: Pen Testing Wireless Networks
- Module 12: Networks, Sniffing and IDS
- Module 13: Injecting the Database
- Module 14: Attacking Web Technologies
- Module 15: Project Documentation
Lab Outline:
Labs are designed to assure learners a whole practical experience, through the following practical activities:
Lab 1: Getting Set Up
- Naming and subnet assignments
- Discovering your class share
- VM Image Preparation
- Discovering the Student Materials
- PDF Penetration Testing Methodologies review
Lab 2: Linux Fundamentals
- ifconfig
- Mounting a USB Thumb Drive
- Mount a Windows partition
- VNC Server
- Preinstalled tools in BackTrack 5
Lab 3: Information Gathering
- Google Queries
- Footprinting Tools
- Getting everything you need with Maltego
- Using Firefox for Pen Testing
- Documentation of the assigned tasks
Lab 4: Detecting Live Systems
- Look@LAN
- Zenmap
- Zenmap in BackTrack 5
- NMAP Command Line
- Hping2
- Unicornscan
- Documentation of the assigned tasks
Lab 5: Reconnaissance
- Banner Grabbing
- Zone Transfers
- SNMP Enumeration
- LDAP Enumeration
- Null Sessions
- SMB Enumeration
- SMTP Enumeration
- Documentation of the assigned tasks
Lab 6: Vulnerability Assessment
- Run Nessus for Windows
- Run Saint
- Documentation of the assigned tasks
Lab 7: Malware
- Netcat (Basics of Backdoor Tools)
- Exploiting and Pivoting our Attack
- Creating a Trojan
- Documentation of the assigned tasks
Lab 8: Windows Hacking
- Cracking a Windows Password with Linux
- Cracking a Windows Password with Cain
- Covering your tracks via Audit Logs
- Alternate Data Streams
- Stegonagraphy
- Understanding Rootkits
- Windows 7 Client Side Exploit (Browser)
- Windows 2008 SMBv2 Exploit
- Documentation of the assigned tasks
Lab 9: Hacking UNIX/Linux
- Setup and Recon Do you remember how?
- Making use of a poorly configured service
- Cracking a Linux password
- Creating a backdoor and covering our tracks
- Documentation of the assigned tasks
Lab 10: Advanced Vulnerability and Exploitation Techniques
- Metasploit Command Line
- Metasploit Web Interface
- Exploit-DB.com
- Saint
- Documentation
Lab 11: Attacking Wireless Networks
- War Driving Lab
- WEP Cracking Lab (classroom only)
- Documentation
Lab 12: Networks, Sniffing and IDS
- Capture FTP Traffic
- ARP Cache Poisoning Basics
- ARP Cache Poisoning – RDP
- Documentation
Lab 13: Database Hacking
- Hacme Bank Login Bypass
- Hacme Bank Verbose Table Modification
- Hacme Books Denial of Service
- Hacme Books Data Tampering
- Documentation of the assigned tasks
Lab 14: Hacking Web Applications
- Input Manipulation
- Shoveling a Shell
- Hacme Bank Horizontal Privilege Escalation
- Hacme Bank Vertical Privilege Escalation
- Hacme Bank Cross Site Scripting
- Documentation of the assigned tasks
Lab 15: Cryptography
- Caesar Encryption
- RC4 Encryption
- IPSec Deployment Post-Class
Lab 16: Core Impact
- Core Impact
The primary audience for this course is as follows:
- Pen Testers
- Ethical Hackers
- Network Auditors
- Cyber Security Professionals
- Vulnerability Assessors
- Cyber Security