Penetration testing – detecting and exploiting vulnerabilities Training Course

How to Test Network and Service Security

• Penetration Testing – What is it?
• Penetration test vs. Audit – similarities, differences, what is appropriate?
• Practical problems – what can go wrong?
• Scope of tests – i.e., what do we want to check?
• Sources of best practices and recommendations

Penetration Testing – Reconnaissance

• OSINT – i.e., gathering information from open sources.
• Passive and active methods of network traffic analysis.
• Identification of services and network topology.
• Security systems (firewalls, IPS/IDS systems, WAF, etc.) and their impact on tests.

Penetration Testing – Vulnerability Scanning

• System and version recognition.
• Searching for vulnerabilities in systems, infrastructure, and applications.
• Vulnerability assessment – i.e., "will it hurt"?
• Sources of exploits and possibilities for their adaptation.

Penetration Testing – Attack and Gaining Control

• Types of attacks – how are they carried out and what are the results?
• Attacking with remote and local exploits.
• Attacks on network infrastructure.
• Reverse shell – how to manage a compromised system.
• Privilege escalation – i.e., how to become an administrator.
• Ready-made "hacking tools".
• Analysis of a compromised system – interesting files, saved passwords, private data.
• Special cases: web applications, WiFi networks.
• Social engineering – i.e., how to "break" a person if systems cannot be broken.

Penetration Testing – Cover-up and Maintaining Access

• Logging and activity monitoring systems.
• Cleaning logs and erasing traces.
• Backdoor – i.e., how to leave yourself an open entrance.

Penetration Testing – Summary

• Preparation of the report and its structure.
• Delivery and consultation of the report.
• Verification of recommendation implementation.