CompTIA PenTest+ Certification Training (Exam PT0-002)

Lesson 1: Planning and Scoping Penetration Tests

• Introduction to Penetration Testing Concepts
• Plan a Pen Test Engagement
• Scope and Negotiate a Pen Test Engagement
• Prepare for a Pen Test Engagement

Lesson 2: Conducting Passive Reconnaissance

• Gather Background Information
• Prepare Background Findings for Next Steps

Lesson 3: Performing Non-Technical Tests

• Perform Social Engineering Tests
• Perform Physical Security Tests on Facilities

Lesson 4: Conducting Active Reconnaissance

• Scan Networks
• Enumerate Targets
• Scan for Vulnerabilities
• Analyze Basic Scripts

Lesson 5: Analyzing Vulnerabilities

• Analyze Vulnerability Scan Results
• Leverage Information to Prepare for Exploitation

Lesson 6: Penetrating Networks

• Exploit Network-Based Vulnerabilities
• Exploit Wireless and RF-Based Vulnerabilities
• Exploit Specialized Systems

Lesson 7: Exploiting Host-Based Vulnerabilities

• Exploit Windows-Based Vulnerabilities
• Exploit *Nix-Based Vulnerabilities

Lesson 8: Testing Applications

• Exploit Web Application Vulnerabilities
• Test Source Code and Compiled Apps

Lesson 9: Completing Post-Exploit Tasks

• Use Lateral Movement Techniques
• Use Persistence Techniques
• Use Anti-Forensics Techniques

Lesson 10: Analyzing and Reporting Pen Test Results

• Analyze Pen Test Data
• Develop Recommendations for Mitigation Strategies
• Write and Handle Reports
• Conduct Post-Report-Delivery Activities

Upon successful completion of this course, students will learn to plan, conduct, analyze, and report on penetration tests, including the ability to:

• Plan and scope penetration tests
• Conduct passive reconnaissance
• Perform non-technical tests to gather information
• Conductive active reconnaissance
• Analyze vulnerabilities
• Penetrate networks
• Exploit host-based vulnerabilities
• Test applications Complete post-exploit tasks
• Analyze and report pen test results

To ensure your success in this course, you should have:

• Intermediate knowledge of information security concepts, including but not limited to identity and access management (IAM), cryptographic concepts and implementations, computer networking concepts and implementations, and common security technologies.
• Practical experience in securing various computing environments, including small to medium businesses, as well as enterprise environments.

• Penetration Tester 
• Vulnerability Tester
• Security Analyst (II)
• Vulnerability Assessment Analyst
• Network Security Operations
• Application Security Vulnerability