PT0-003: CompTIA PenTest+

Curriculum For This Course

Introduction

2Lectures

Time 00:14:01

PenTesting Overview

7Lectures

Time 00:31:54

Pre-Engagement Activities

8Lectures

Time 00:50:40

Frameworks

11Lectures

Time 01:06:07

Information Gathering

7Lectures

Time 00:53:40

Open-Source Intelligence (OSINT)

8Lectures

Time 00:50:54

Scanning and Enumeration

12Lectures

Time 01:37:07

Recon and Enumeration Tools

10Lectures

Time 01:09:10

Nmap and NSE

5Lectures

Time 00:30:35

Scripting Basics

7Lectures

Time 00:47:12

Modifying Scripts

7Lectures

Time 00:52:01

Analyzing Scans

12Lectures

Time 01:16:01

Discovering Vulnerabilities

11Lectures

Time 00:58:37

Vulnerability Discovery Tools

8Lectures

Time 00:42:05

Social Engineering Attacks

10Lectures

Time 00:48:03

Wireless Attacks

10Lectures

Time 00:53:06

Network Attacks

13Lectures

Time 01:25:23

Authentication Attacks

9Lectures

Time 01:05:22

HostAttacks

12Lectures

Time 01:19:19

Web Application Vulnerabilities

9Lectures

Time 01:02:07

Web Application Attacks

12Lectures

Time 01:19:16

Cloud Atacks

11Lectures

Time 01:09:59

Attacking Specialized Systems

9Lectures

Time 01:09:13

Automated Attacks

11Lectures

Time 01:17:15

Persistence

10Lectures

Time 01:22:24

Lateral Movement

12Lectures

Time 01:27:34

Exfiltration

7Lectures

Time 00:29:12

Cleanup and Restoration

8Lectures

Time 00:50:43

Remediation Recommendations

11Lectures

Time 01:31:07

Penetration Test Reporting

8Lectures

Time 00:40:29

Conclusion

1Lectures

Time 00:09:51

Introduction
	1. Introduction	9:45
	2. Exam Tips	4:16

PenTesting Overview
	1. PenTesting Overview	3:33
	2. Planning the Engagement	5:17
	3. Information Gathering	5:34
	4. Attacks and Exploits	4:11
	5. Post-Exploitation	4:53
	6. Reporting	6:44
	7. Overview of a PenTest	1:42

Pre-Engagement Activities
	1. Pre-Engagement Activities (OBJ 1.1, 1.2)	3:50
	2. Regulations and Standards (OBJ 1.1, 1.2)	10:25
	3. Types of Assessments (OBJ 1.1)	5:51
	4. Types of Agreements (OBJ 1.1)	6:34
	5. Legal and Ethical Considerations (OBJ 1.1, 1.2)	6:14
	6. Rules of Engagement (OBJ 1.1, 1.2)	6:36
	7. Target Selection (OBJ 1.1)	4:33
	8. Shared Responsibility Model (OBJ 1.1)	6:37

Frameworks
	1. Frameworks (OBJ 1.3)	4:56
	2. MITRE ATT&CK (OBJ 1.3)	5:53
	3. OWASP (OBJ 1.3)	6:02
	4. MASVS (OBJ 1.3)	6:33
	5. PTES (OBJ 1.3)	8:57
	6. CREST (OBJ 1.3)	4:59
	7. OSSTMM (OBJ 1.3)	3:52
	8. STRIDE (OBJ 1.3)	8:54
	9. Purdue Model (OBJ 1.3)	4:44
	10. OCTAVE (OBJ 1.3)	4:31
	11. DREAD (OBJ 1.3)	6:46

Information Gathering
	1. Information Gathering (OBJ 2.1)	5:31
	2. Passive Reconnaissance (OBJ 2.1)	5:12
	3. Network Sniffing (OBJ 2.1)	7:36
	4. Active Reconnaissance (OBJ 2.1)	8:27
	5. Port and Protocol Scanning (OBJ 2.1)	10:51
	6. HTML Scraping and Cached Pages (OBJ 2.1)	7:07
	7. Banner Grabbing (OBJ 2.1)	8:56

Open-Source Intelligence (OSINT)
	1. Open-Source Intelligence (OSINT) (OBJ 2.1)	3:26
	2. Social Media and Job Boards (OBJ 2.1)	5:51
	3. Information Disclosures (OBJ 2.1)	5:52
	4. Cryptographic Flaws (OBJ 2.1)	9:22
	5. DNS Lookups (OBJ 2.1)	9:38
	6. Certificate Transparency Logs (OBJ 2.1)	5:07
	7. Search Engine Analysis (OBJ 2.1)	8:00
	8. Conducting OSINT (OBJ 2.1)	3:38

Scanning and Enumeration
	1. Scanning and Enumeration (OBJ 2.2)	4:30
	2. Enumerating Protocols (OBJ 2.2)	13:03
	3. Enumerating DNS (OBJ 2.2)	7:41
	4. Enumerating Directories (OBJ 2.2)	8:16
	5. Enumerating Hosts (OBJ 2.2)	12:52
	6. Enumerating Users (OBJ 2.2)	10:52
	7. Enumerating Email (OBJ 2.2)	5:08
	8. Enumerating Permissions (OBJ 2.2)	7:52
	9. Enumerating Wireless Devices (OBJ 2.2)	5:31
	10. Enumerating Secrets (OBJ 2.2)	5:37
	11. Enumerating the Web (OBJ 2.2)	9:08
	12. Attack Path Mapping (OBJ 2.2)	6:37

Recon and Enumeration Tools
	1. Reconnaissance and Enumeration Tools (OBJ 2.4)	4:06
	2. Wayback Machine (OBJ 2.4)	5:15
	3. theHarvester and Hunter.io (OBJ 2.4)	3:31
	4. OSINT Tools (OBJ 2.4, 4.8)	8:59
	5. nslookup and dig (OBJ 2.4)	1:23
	6. DNSdumpster and Amass (OBJ 2.4)	8:23
	7. Shodan and Censys.io (OBJ 2.4)	8:58
	8. tcpdump (OBJ 2.4)	8:36
	9. Wireshark (OBJ 2.4)	8:13
	10. Wireless Analysis Tools (OBJ 2.4)	11:46

Nmap and NSE
	1. Nmap and NSE (OBJ 2.4, 4.2)	2:54
	2. Nmap Discovery Scans (OBJ 2.4, 4.2)	8:38
	3. Nmap Port Scans (OBJ 2.4, 4.2)	7:59
	4. Nmap Fingerprinting (OBJ 2.4, 4.2)	9:09
	5. Nmap Scripting Engine (OBJ 2.4, 4.2)	1:55

Scripting Basics
	1. Scripting Basics (OBJ 2.3)	2:40
	2. Shells and Programming Languages (OBJ 2.3)	10:48
	3. Variables and Constants (OBJ 2.3)	5:48
	4. Loops (OBJ 2.3)	4:31
	5. Logic Control (OBJ 2.3)	6:31
	6. Data Structures (OBJ 2.3)	8:59
	7. Object Oriented Programming (OBJ 2.3)	7:55

Modifying Scripts
	1. Modifying Scripts (OBJ 2.3)	2:38
	2. Bash Fundamentals (OBJ 2.3)	10:06
	3. PowerShell Fundamentals (OBJ 2.3)	11:07
	4. Understanding a PowerShell Script (OBJ 2.3)	5:03
	5. Python Fundamentals (OBJ 2.3)	13:44
	6. Understanding a Python Script (OBJ 2.3)	5:30
	7. Modifying a Python Script (OBJ 2.3)	3:53

Analyzing Scans
	1. Analyzing Scans (OBJ 3.2, 4.1)	3:33
	2. Positive and Negative Results (OBJ 3.2)	5:56
	3. Validating Scan Results (OBJ 3.2)	5:30
	4. Using CVEs and CVSS (OBJ 4.1)	8:38
	5. Exploit Prediction Scoring System (OBJ 4.1)	5:13
	6. Target Prioritization (OBJ 4.1)	6:11
	7. Common Target Criteria (OBJ 4.1)	8:19
	8. Scripting for Result Validation (OBJ 3.2)	5:25
	9. Scan Validations (OBJ 3.2)	7:10
	10. Capability Selection (OBJ 3.2, 4.1)	7:13
	11. Documenting the Attack (OBJ 4.1)	7:33
	12. Other Attack Considerations (OBJ 4.1)	5:20

Discovering Vulnerabilities
	1. Discovering Vulnerabilities (OBJ 3.1)	2:51
	2. Application Scanning (OBJ 3.1)	6:05
	3. Software Analysis (OBJ 3.1)	5:51
	4. Host-Based Scanning (OBJ 3.1)	5:38
	5. Network Scanning (OBJ 3.1)	5:43
	6. Mobile Scanning (OBJ 3.1)	7:51
	7. Container Scanning (OBJ 3.1)	2:31
	8. Scanning IaC (OBJ 3.1)	6:27
	9. ICS Vulnerability Discovery (OBJ 3.1)	6:36
	10. Wireless Scans (OBJ 3.1)	5:52
	11. Static Code Analysis (SonarQube) (OBJ 3.1)	3:12

Vulnerability Discovery Tools
	1. Vulnerability Discovery Tools (OBJ 3.1)	2:45
	2. Nikto (OBJ 3.1)	3:51
	3. Trivy (OBJ 3.1)	5:17
	4. BloodHound (OBJ 3.1)	6:04
	5. PowerSploit (OBJ 3.1)	5:21
	6. Grype (OBJ 3.1)	7:08
	7. Kube-Hunter (OBJ 3.1)	6:12
	8. TruffleHog (OBJ 3.1)	5:27

Social Engineering Attacks
	1. Social Engineering Attacks (OBJ 4.8)	2:49
	2. Methods of Influence (OBJ 4.8)	5:20
	3. Phishing Campaigns (OBJ 4.8)	5:38
	4. Gophish (OBJ 4.8)	4:53
	5. Impersonation (OBJ 4.8)	5:39
	6. Surveillance Techniques (OBJ 4.8)	5:48
	7. Watering Hole (OBJ 4.8)	4:38
	8. Evilginx (OBJ 4.8)	5:04
	9. Tailgating and Piggybacking (OBJ 4.8)	4:02
	10. Browser Exploitation Framework (BeEF) (OBJ 4.8)	4:12

Wireless Attacks
	1. Wireless Attacks (OBJ 4.7)	2:53
	2. Wireless Security (OBJ 4.7)	7:48
	3. Wireless Signal Exploitation (OBJ 4.7)	4:39
	4. Aircrack-ng (OBJ 4.7)	8:29
	5. Wireless Hacking (OBJ 4.7)	2:31
	6. WPS PIN Attacks (OBJ 4.7)	2:41
	7. Captive Portal Attacks (OBJ 4.7)	5:01
	8. Evil Twin (OBJ 4.7)	5:10
	9. Kismet (OBJ 4.7)	5:47
	10. Wi-Fi Protocol Fuzzing (OBJ 4.7)	8:07

Network Attacks
	1. Network Attacks (OBJ 4.2, 4.3, 4.5)	4:21
	2. Stress Testing (OBJ 4.2)	8:32
	3. Bypassing Segmentation (OBJ 4.2)	7:12
	4. MAC Spoofing (OBJ 4.2)	6:11
	5. NAC Bypass (OBJ 4.2)	6:05
	6. Session-Based Attacks (OBJ 4.2)	5:35
	7. Service Exploitation (OBJ 4.2)	6:49
	8. Packet Crafting (OBJ 4.2)	7:37
	9. Netcat (OBJ 4.2)	6:12
	10. Using Ncat (OBJ 4.2)	7:54
	11. LLMNR/NBT-NS Poisoning (OBJ 4.2)	7:22
	12. ARP Poisoning (OBJ 4.2)	6:21
	13. Intro to Metasploit (OBJ 4.2)	5:12

Authentication Attacks
	1. Authentication Attacks (OBJ 4.2, 4.3, 4.5)	3:47
	2. Types of Password Attack (OBJ 4.3)	5:08
	3. Credential Attacks (OBJ 4.3)	9:22
	4. Credential Passing Attacks (OBJ 4.3)	7:02
	5. Directory Service Attacks (OBJ 4.2, 4.3)	11:20
	6. CrackMapExec (CME) (OBJ 4.3)	3:47
	7. SAML Attacks (OBJ 4.3)	8:51
	8. OpenID Connect (OIDC) Attacks (OBJ 4.3)	8:58
	9. Hash Attacks (OBJ 4.5)	7:07

HostAttacks
	1. Host Attacks (OBJ 4.4)	3:32
	2. Privilege Escalation (OBJ 4.4)	7:50
	3. Credential Harvesting (OBJ 4.4)	7:37
	4. Misconfigured Endpoints (OBJ 4.4)	5:20
	5. Unquoted Service Paths (OBJ 4.4)	6:31
	6. Disabling Security Software (OBJ 4.4)	9:18
	7. Payload Obfuscation (OBJ 4.4)	6:31
	8. User-Controlled Access Bypass (OBJ 4.4)	8:05
	9. Shell and Kiosk Escapes (OBJ 4.4)	6:34
	10. Library and Process Injection (OBJ 4.4)	1:38
	11. Log Tampering (OBJ 4.4)	5:59
	12. Living Off the Land (OBJ 4.4)	10:24

Web Application Vulnerabilities
	1. Web Application Vulnerabilities (OBJ 4.3, 4.5)	3:33
	2. Race Conditions (OBJ 4.5)	7:22
	3. Buffer Overflows (OBJ 4.5)	7:52
	4. Authentication Flaws and Insecure References (OBJ 4.5)	5:41
	5. Improper Error Handling (OBJ 4.5)	6:08
	6. Improper Headers (OBJ 4.5)	7:21
	7. Code Signing (OBJ 4.5)	5:30
	8. Vulnerable Components (OBJ 4.5)	10:15
	9. Software Composition (OBJ 4.5)	8:25

Web Application Attacks
	1. Web Application Attacks (OBJ 4.5)	3:22
	2. Directory Traversals (OBJ 4.5)	6:56
	3. Directory Traversal Tools (OBJ 4.5)	3:07
	4. Cross-Site Scripting (XSS) (OBJ 4.5)	6:56
	5. Request Forgeries (OBJ 4.5)	6:56
	6. SQL Injections (OBJ 4.5)	8:23
	7. Injection Attacks (OBJ 4.5)	8:22
	8. File Inclusions (OBJ 4.5)	7:46
	9. Arbitrary Code Execution (OBJ 4.5)	8:30
	10. Web Application Session Hijacking (OBJ 4.5)	7:20
	11. Abusing APIs (OBJ 4.5)	4:52
	12. OWASP ZAP (OBJ 4.5)	6:46

Cloud Atacks
	1. Cloud Attacks (OBJ 4.6 )	3:32
	2. Identity and Access Management (IAM) Misconfigurations (OBJ 4.6 )	5:18
	3. Resource Misconfigurations (OBJ 4.6 )	6:25
	4. Logging Information Exposures (OBJ 4.6 )	5:31
	5. Metadata Service Attacks (OBJ 4.6 )	5:51
	6. Image and Artifact Tampering (OBJ 4.6 )	7:21
	7. Supply Chain Attacks (OBJ 4.6 )	6:14
	8. Container Exploits and Attacks (OBJ 4.6 )	6:11
	9. Trust Relationship Abuse (OBJ 4.6 )	7:58
	10. Third-party Integration Exploits (OBJ 4.6 )	8:18
	11. Cloud Security Testing (OBJ 4.6 )	7:20

Attacking Specialized Systems
	1. Attacking Specialized Systems (OBJ 4.9)	3:13
	2. Mobile Device Attacks (OBJ 4.9)	14:24
	3. Tools for Mobile Device Attacks (OBJ 4.9)	8:36
	4. Bluetooth Attacks (OBJ 4.9)	5:29
	5. NFC and RFID Attacks (OBJ 4.9)	6:41
	6. AI Attacks (OBJ 4.9)	6:29
	7. Operational Technology (OT) (OBJ 4.9)	7:42
	8. OT Attacks (OBJ 4.9)	8:48
	9. Testing OT Systems (OBJ 4.9)	7:51

Automated Attacks
	1. Automated Attacks (OBJ 4.10)	3:40
	2. Automating Attacks with Bash (OBJ 4.10)	5:30
	3. Empire/PowerSploit (OBJ 4.10)	8:27
	4. PowerView (OBJ 4.10)	7:39
	5. PowerUpSQL (OBJ 4.10)	10:00
	6. AD Search (OBJ 4.10)	8:48
	7. Impacket (OBJ 4.10)	5:19
	8. Scapy (OBJ 4.10)	8:09
	9. Caldera (OBJ 4.10)	8:02
	10. Infection Monkey (OBJ 4.10)	5:56
	11. Atomic Red Team (OBJ 4.10)	5:45

Persistence
	1. Persistence (OBJ 5.1)	2:59
	2. Command and Control (OBJ 5.1)	8:44
	3. Automating Persistence (OBJ 5.1)	9:31
	4. Remote Shells (OBJ 5.1)	7:33
	5. Using Remote Shells (OBJ 5.1)	8:09
	6. Backdoor (OBJ 5.1)	7:54
	7. Remote Access Trojans (OBJ 5.1)	11:32
	8. Account Credentials (OBJ 5.1)	9:26
	9. Browser-Based Persistence (OBJ 5.1)	7:06
	10. Security Control Tampering (OBJ 5.1)	9:30

Lateral Movement
	1. Lateral Movement (OBJ 5.2)	3:36
	2. Pivoting and Relaying (OBJ 5.2)	7:23
	3. Using ProxyChains (OBJ 5.2)	7:29
	4. Enumerating for Lateral Movement (OBJ 5.2)	7:16
	5. Service Discovery (OBJ 5.2)	7:41
	6. Protocol Discovery (OBJ 5.2)	6:04
	7. Remote Access Discovery (OBJ 5.2)	7:11
	8. Printer Discovery (OBJ 5.2)	5:32
	9. Discovering Internal Websites (OBJ 5.2)	9:52
	10. Living Off the Land Tools (OBJ 5.2)	7:53
	11. sshuttle (OBJ 5.2)	8:48
	12. Covenant (OBJ 5.2)	8:49

Exfiltration
	1. Exfiltration (OBJ 5.3)	2:21
	2. Covert Channels (OBJ 5.3)	7:38
	3. Steganography (OBJ 5.3)	2:54
	4. Covert Channel Using DNS (OBJ 5.3)	2:14
	5. Covert Channel Using ICMP (OBJ 5.3)	0:49
	6. Alternate Data Streams (ADS) (OBJ 5.3)	6:37
	7. Exfiltrating Data (OBJ 5.3)	6:39

Cleanup and Restoration
	1. Cleanup and Restoration (OBJ 5.4)	2:52
	2. Persistence Removal (OBJ 5.4)	7:41
	3. Revert Configuration Changes (OBJ 5.4)	5:58
	4. Created Credentials Removal (OBJ 5.4)	6:36
	5. Removal of Testing Tools (OBJ 5.4)	5:55
	6. Decommission Testing Infrastructure (OBJ 5.4)	7:15
	7. Artifact Preservation (OBJ 5.4)	5:31
	8. Secure Data Destruction (OBJ 5.4)	8:55

Remediation Recommendations
	1. Remediation Recommendations (OBJ 1.5)	2:52
	2. System Hardening (OBJ 1.5)	9:07
	3. User Input Sanitization (OBJ 1.5)	9:15
	4. Network and Infrastructure Controls (OBJ 1.5)	7:50
	5. Authentication Recommendations (OBJ 1.5)	8:40
	6. Encryption Recommendations (OBJ 1.5)	10:45
	7. Patch Management (OBJ 1.5)	9:02
	8. Process Level Remediation (OBJ 1.5)	7:43
	9. Administrative Controls (OBJ 1.5)	10:41
	10. Physical Controls (OBJ 1.5)	8:46
	11. Operational Controls and Policies (OBJ 1.5)	6:26

Penetration Test Reporting
	1. Penetration Test Reporting (OBJ 1.4)	3:19
	2. Executive Summary Process (OBJ 1.4)	5:23
	3. Root Cause Analysis (OBJ 1.4)	5:45
	4. Report Components (OBJ 1.2, 1.4)	5:47
	5. Risk Scoring and Prioritization (OBJ 1.4)	4:39
	6. Definitions in the Report (OBJ 1.4)	3:46
	7. Limits and Assumptions (OBJ 1.2, 1.4)	5:14
	8. Special Considerations (OBJ 1.2, 1.4)	6:36

Conclusion
	1. Conclusion	9:51

Free PT0-003 Exam Questions & CompTIA PT0-003 Dumps
	Downloads: 70	Size: 43.76 KB
	Downloads: 202	Size: 43.76 KB
	Downloads: 421	Size: 43.76 KB

Student Feedback

5.0

Excellent

49%

51 %

Add Comments

Name:^*

E-mail:^*

Comment:^* Comment will be moderated and published within 1-4 hours

Verification:^*

Type the characters from the picture.

Rate Course:^*

Curriculum For This Course

Free PT0-003 Exam Questions & CompTIA PT0-003 Dumps

Student Feedback

Add Comments

Get Premium Membership