GIAC Penetration Tester (GPEN)

ÖVERSIKT

The Readynez GPEN Boot Camp focuses on training you with engaging interactive learning lectures and hands-on labs. Penetration testing is a foundational part of any organization’s security program and it is required by multiple regulations and standards.

Vad ingår

Your course package is designed to provide maximum learning and convenience. This is included in the price of your course:

• PRE-READING
• INSTRUKTÖRSLETT PROGRAM
• KURSMATERIAL
• CERTIFIERINGSGARANTI
• INSTRUKTÖRSLETT PROGRAM
• BOENDE
• KURSMATERIAL
• ALL MAT
• CERTIFIERINGSGARANTI

EXAMEN & CERTIFIERING

Your expert instructor will get you ready for the following exam and certification, which are not included in your course package.

• GIAC Penetration Tester (GPEN)

FÖRKUNSKAPER

- Firm understanding of the Windows operating system
- Basic understanding of Windows and Linux command line
- Working knowledge of computer networking and the TCP/IP protocols
- Basic understanding of cryptographic concepts

Agendan

Using our engaging learning methodology including a variety of tools, we’ll cover the entire curriculum.

Advanced Password Attacks
The candidate will be able to use additional methods to attack password hashes and authenticate.

Attacking Password Hashes
The candidate will be able to obtain and attack password hashes and other password representations.

Azure Applications and Attack Strategies
The candidate will demonstrate an understanding of Azure applications and the attacks against them including federated and single sign-on environments and Azure AD authentication protocols

Azure Overview, Attacks, and AD Integration
The candidate will demonstrate an understanding of Azure Active Directory implementation fundamentals, common Azure AD attacks, and Azure authentication techniques

Domain Escalation and Persistence Attacks
The candidate will demonstrate an understanding of common Windows privilege escalation attacks and Kerberos attack techniques that are used to consolidate and persist administrative access to Active Directory.

Escalation and Exploitation
The candidate will be able to demonstrate the fundamental concepts of exploitation, data exfiltration from compromised hosts and pivoting to exploit other hosts within a target network.

Exploitation Fundamentals
The candidate will be able to demonstrate the fundamental concepts associated with the exploitation phase of a Pentest.

Kerberos Attacks
The candidate will demonstrate an understanding of attacks against Active Directory including Kerberos attacks.

Metasploit
The candidate will be able to use and configure the Metasploit Framework at an intermediate level.

Moving Files with Exploits
The candidate will be able to use exploits to move files between remote systems.

Password Attacks
The candidate will understand types of password attacks, formats, defenses, and the circumstances under which to use each password attack variation. The candidate will be able to conduct password guessing attacks.

Password Formats and Hashes
The candidate will demonstrate an understanding of common password hashes and formats for storing password data.

Penetration Test Planning
The candidate will be able to demonstrate the fundamental concepts associated with pen-testing and utilize a process-oriented approach to penetration testing and reporting.

Penetration Testing with PowerShell and the Windows Command Line
The candidate will demonstrate an understanding of the use of advanced Windows command line skills during a penetration test and demonstrate an understanding of the use of advanced Windows Power Shell skills during a penetration test.

Reconnaissance
The candidate will understand the fundamental concepts of reconnaissance and will understand how to obtain basic, high level information about the target organization and network, often considered information leakage, including but not limited to technical and non-technical public contacts, IP address ranges, document formats, and supported systems.

Scanning and Host Discovery
The candidate will be able to use the appropriate technique to scan a network for potential targets, and to conduct port, operating system and service version scans and analyze the results.

Vulnerability Scanning
The candidate will be able to conduct vulnerability scans and analyze the results.