EC-Council
EC-Council Certified Penetration Tester (CPENT)
Hands-on, multi-discipline penetration testing.
5 daysIntermediate14 modulesEC-Council Certified Penetration Tester (CPENT)
About this course
Hands-on, multi-discipline penetration testing. Over five days you will scope engagements, gather OSINT, test people, external and internal networks, perimeter devices, web apps, wireless, IoT, OT and cloud, analyse and exploit binaries, and write professional reports, preparing for CPENT.
Curriculum
14 modules
- Penetration Testing Concepts
- LPT Penetration Testing Methodology
- Guidelines and Recommendations for Penetration Testing
- Request for Proposal
- Preparing Response Requirements for Proposal Submission
- Setting the Rules of Engagement
- Establishing Communication Lines
- Timeline
- Time/Location
- Frequency of meetings
- Time of Day
- Identifying Personnel for Assistance
- Handling Legal Issues in Penetration Testing Engagement
- Preparing for the Test
- Handling Scope Creeping During Pen Testing
- OSINT through the WWW
- OSINT through Website Analysis
- OSINT through DNS Interrogation
- Automating the OSINT Process using Tools/Frameworks/Scripts
- Social Engineering Penetration Testing Concepts
- Social Engineering Penetration Testing Using E-mail Attack Vector
- Social Engineering Penetration Testing Using Telephone Attack Vector
- Social Engineering Penetration Testing Using Physical Attack Vector
- Reporting and Countermeasures/Recommendations
- Port Scanning
- OS and Service Fingerprinting
- Vulnerability Research
- Exploit Verification
- Footprinting
- Network Scanning
- OS and Service Fingerprinting
- Enumeration
- Vulnerability Assessment
- Windows Exploitation
- Unix/Linux Exploitation
- Other Internal Network Exploitation Techniques
- Automating Internal Network Penetration Test Effort
- Post Exploitation
- Advanced Tips and Techniques
- Assessing Firewall Security Implementation
- Assessing IDS Security Implementation
- Assessing Security of Routers
- Assessing Security of Switches
- Discover Web Application Default Content
- Discover Web Application Hidden Content
- Conduct Web Vulnerability Scanning
- Test for SQL Injection Vulnerabilities
- Test for XSS Vulnerabilities
- Test for Parameter Tampering
- Test for Weak Cryptography Vulnerabilities
- Tests for Security Misconfiguration Vulnerabilities
- Test for Client-Side Attack
- Tests for Broken Authentication and Authorization Vulnerabilities
- Tests for Broken Session Management Vulnerabilities
- Test for Web Services Security
- Test for Business Logic Flaws
- Test for Web Server Vulnerabilities
- Test for Thick Clients Vulnerabilities
- Wordpress Testing
- Wireless Local Area Network (WLAN) Penetration Testing
- RFID Penetration Testing
- NFC Penetration Testing
- IoT Attacks and Threats
- IoT Penetration Testing
- OT/SCADA Concepts
- Modbus
- ICS and SCADA Pen Testing
- Cloud Penetration Testing
- AWS Specific Penetration Testing
- Azure Specific Penetration Testing
- Google Cloud Platform Specific Penetration Testing
- Binary Coding Concepts
- Binary Analysis Methodology
- Penetration Testing Report: An Overview
- Phases of Report Development
- Report Components
- Penetration Testing Report Analysis
- Penetration Testing Report Delivery
- Post-Testing Actions for Organizations
Who it's for
Experienced ethical hackers and penetration testers.
Before you start
No formal prerequisites. Bring curiosity and a willingness to practise.
Prepares for
Related courses
More in EC-Council →Foundation
Artificial Intelligence Essentials (AIE)
EC-Council
View course →Intermediate
Certified AI Program Manager (CAIPM)
EC-Council
View course →Intermediate
Certified Offensive AI Security Professional (COASP)
EC-Council
View course →Intermediate
Certified Responsible AI Governance & Ethics (CRAGE)
EC-Council
View course →Intermediate
EC-Council Certified Application Security Engineer (CASE).NET
EC-Council
View course →Intermediate
EC-Council Certified Chief Information Security Officer (C|CISO)
EC-Council
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.