GIAC Penetration Tester (GPEN)

Advanced Password Attacks 

Use additional methods to attack password hashes and authenticate. 

Attacking Password Hashes 

Obtain and attack password hashes and other password representations. 

Command Shell vs. Terminal Access 

Learn the benefits, limitations, and distinguishing characteristics of command shell and terminal access. 

Enumerating Users 

Enumerate users through different methods. 

Exploitation Fundamentals 

Demonstrate the fundamental concepts associated with the exploitation phase of a pentest. 

General Web Application Probing 

Use tools and proxies to understand and exploit web application weaknesses. 

Initial Target Scanning 

Conduct port, operating system and service version scans and analyse the results. 

Metasploit 

Use and configure the Metasploit Framework at an intermediate level. 

Moving Files with Exploits 

Use exploits to move files between remote systems. 

Password Attacks 

Understand types of password attacks, formats, defenses, and the circumstances under which to use each password attack variation. You will be able to conduct password guessing attacks. 

Pen-testing Foundations 

Demonstrate the fundamental concepts associated with pen-testing. 

Pen-testing Process 

Utilise a process-oriented approach to pentesting and reporting. 

Pen-Testing via the Command Line 

Use advanced Windows command line skills during a pen test. 

Reconnaissance 

Understand the fundamental concepts of reconnaissance and will understand how to obtain basic, high level information about the target organisation and network, often considered information leakage, including but not limited to technical and non technical public contacts, IP address ranges, document formats, and supported systems. 

Scanning for Targets 

Use the appropriate technique to scan a network for potential targets. 

Vulnerability Scanning 

Conduct vulnerability scans and analyse the results. 

Web Application Attacks 

Utilise common web application attacks. 

Wireless Crypto and Client Attacks 

Utilise wireless cryptographic and client attacks including but not limited to hijacking and key attacks. 

Wireless Fundamentals 

Understand the fundamental concepts associated with wireless networks.