Certified Penetration Testing Engineer (C)PTE)

Description

The Certified Penetration Testing Engineer (C)PTE) training builds on the knowledge gained in the C)PEH (Professional Ethical Hacker) course and takes your skills to a professional level. Where ethical hacking focuses on understanding attack techniques, penetration testing goes a step further: you will learn to use both technical and non-technical methods to breach security measures and assess an organization’s resilience.

The training is built around the proven methodology of Mile2’s international group of penetration testing consultants. You will work with current tools such as Metasploit, Kali Linux and Microsoft PowerShell, and complete a full penetration test from A to Z. The labs start with straightforward activities and build towards complex scenarios, guiding you step by step through a realistic penetration testing model.

In addition to technical skills, you will also learn the business side of penetration testing: how to justify testing activities to management, how to optimize security controls based on business risk, and how to produce a professional assessment report that provides immediate value to the client.

Learning Objectives

Upon completion of this training, you will be able to:

• Plan, execute and report on a full penetration test
• Perform passive and active reconnaissance to map target systems and networks
• Use automated scanning tools to identify and prioritize vulnerabilities
• Apply enumeration techniques to networks, systems and applications
• Perform exploitation techniques on Windows and Linux systems
• Apply advanced post-exploitation and evasion techniques
• Test web applications for security vulnerabilities, including SQL injection
• Assess wireless networks for vulnerabilities
• Produce a professional penetration testing report and communicate findings to stakeholders
• Optimize security controls based on test results and business risks

Prerequisites

The following prior knowledge is recommended:

• Mile2 Certified Professional Ethical Hacker (C)PEH) or equivalent knowledge
• A minimum of 12 months’ experience with networking technologies
• Sound knowledge of TCP/IP
• Knowledge of Microsoft products
• Basic knowledge of Linux is essential

Target Audience

• Penetration Testers
• Ethical Hackers
• Network Auditors
• Cybersecurity Professionals
• Vulnerability Assessors
• Cybersecurity Managers
• IS Managers

Topics

• Business and Technical Logistics of Pen Testing – Planning, scoping, Rules of Engagement and legal aspects of penetration testing
• Linux Fundamentals – Essential Linux commands and skills for penetration testing
• Information Gathering – Passive and active reconnaissance, OSINT techniques for gathering intelligence on targets
• Detecting Live Systems – Active network reconnaissance, host discovery and service identification
• Enumeration – Systematically mapping users, shares, services and vulnerabilities
• Vulnerability Assessments – Automated scanning, analysis and prioritization of vulnerabilities
• Malware Goes Undercover – Malware analysis, evasion techniques and detection bypass
• Windows Hacking – Exploiting Windows systems, privilege escalation and lateral movement
• Hacking UNIX/Linux – Attack techniques specific to UNIX and Linux environments
• Advanced Exploitation Techniques – Post-exploitation, pivoting and advanced persistence techniques
• Pen Testing Wireless Networks – Assessing and exploiting wireless networks
• Networks, Sniffing and IDS – Network analysis, packet capturing and bypassing intrusion detection systems
• Injecting the Database – SQL injection and database exploitation
• Attacking Web Technologies – Identifying and exploiting web application vulnerabilities
• Project Documentation – Professional reporting, communicating findings and producing recommendations

Follow-up Course

The Certified Penetration Testing Consultant (C)PTC) is the follow-up course.