Introduction to Pen Testing for Cybersecurity Professionals

Course details

You've likely done everything you can to logically secure your systems. But how can you be sure that you’re fully protected from an attack? This course provides an overview of one of the most important skills for today’s IT security professional: penetration testing, the process of testing a computer, system, network, or application to evaluate its ability to withstand an attack. Cybersecurity expert Lisa Bock reviews the key differences between known and unknown tests, manual and automated tests, announced and unannounced tests, and more. Gather tips and pointers designed to help you get up and running, so you can choose the types of tests that will work best for you. Along the way, learn how to wield cutting-edge reconnaissance tools like scanners, password crackers, search engines, list makers, and APIs to deliver consistent, time-sensitive test results. By the end of this course, you’ll be equipped with new techniques and testing blueprints for Wi-Fi, networks, websites, email, VoIP, cloud-native services, mobile infrastructure, human firewalls, and beyond.

Concepts

0. Introduction

01 - Testing an organization's defenses
02 - Getting the most out of this course

1. Organizational Penetration Testing

03 - Understanding penetration testing
04 - Auditing security mechanisms
05 - Managing risk
06 - Analyzing risk
07 - Recognizing the attack surface

2. Types of Penetration Testing

08 - Comparing different environments
09 - Checking from the outside in
10 - Looking inside the organization
11 - Determining testing methods
12 - Discovering pen testing tools
13 - Challenge - Explain the NIST five framework core functions
14 - Solution - Explain the NIST five framework core functions

3. Penetration Testing Techniques

15 - Following a structured plan
16 - Planning the pen test
17 - Footprinting the target
18 - Escalating privileges
19 - Attacking the system
20 - Delivering the results
21 - Outlining remediation strategies

4. Penetration Testing Blueprint

22 - Checking physical security
23 - Identifying wireless vulnerabilities
24 - Testing the website
25 - Leaking data via email or VoIP
26 - Safeguarding cloud services
27 - Assessing the mobile infrastructure
28 - Hacking the human

5. Outsourcing Penetration Testing

29 - Contracting the pen test
30 - Defining the project scope
31 - Hiring consultants
32 - Agreeing on terms
33 - Creating the contracts

Conclusion

34 - What's next

Introduction to Pen Testing for Cybersecurity Professionals

Authors

Lisa Bock