PTSv4 is entirely self-paced, with interactive slides and videos students can access online without restriction. Students have lifetime access to the training materials and can take the course from home, from the office or anywhere with an internet connection.
Practice-Oriented
PTS provides several penetration testing exercises in the most advanced virtual lab environment, through Hera Labs.
Adapted for Beginners
PTS starts from the fundamentals and covers the networking and programming skills every penetration tester should have.
The Course at a Glance
- For those new to IT security
- Minimal prerequisites
- Learn about: routing, forwarding and TCP/IP; information gathering; scanning; vulnerability assessment; buffer overflows; XSS; SQL injection; system and network attacks; and basic web application penetration testing
- Learn how to: analyse traffic with Wireshark, exploit vulnerable hosts, move laterally, manipulate traffic, crack passwords and exfiltrate data
- Develop penetration testing tools in C and Python
- Learn how to use tools such as Nmap, Nessus, Hydra, Metasploit and Burp Suite
- Preparation for the Penetration Testing Professional (PTP) course
Course Material
- Over 5.5 hours of HQ video training material
- 1800+ slides
- 16 comprehensive Hera labs and 3 black-box penetration tests
Course Delivery
- Self-paced / HTML5, PDF, MP4
- Offline access available
- Access from PC, tablet and smartphone
Curriculum
Section: Preliminary Skills – Prerequisites
Module 1: Introduction
The student is first introduced to the field of information security, then examines how cryptography and virtual private networks work; the module closes with a section on binary arithmetic. This gives them the background needed to connect to Hera Lab for the first time and carry out their first hands-on labs.
Module 2: Networking
Computer networks are what make the internet run and are a fundamental asset for almost every business. Understanding networking protocols means being able to spot misconfigurations and vulnerabilities. Moreover, a penetration tester with strong networking fundamentals can configure tools and scanners properly to get the best results.
Module 3: Web Applications
Web applications are more complex and more widespread than many people think. This module explains the protocols and technologies behind web applications and prepares students for web application penetration testing topics. Students will also learn how to examine a web application and how to use the information gathered to reach attacks.
Module 4: Penetration Testing
In this module we will answer fundamental questions such as: who carries out a penetration test? How do they perform their work? Which methodology do they follow? Skill and methodology are what separate a true professional from an amateur. This module explains which methodology to use during an engagement, from the initial engagement phase through to final reporting and advisory.
Section: Preliminary Skills – Programming
Module 1: Introduction
This module explains the fundamental concepts of programming and typical programming constructs. Every programming language resembles the others in certain respects. This module demonstrates those universal similarities and what programming is used for in general.
Module 2: C++
This module explains C++ fundamentals. C++ uses features typical of the language, such as pointers and predefined variables. At the end of the module, students can test their knowledge by building a simple remote data theft tool in C++.
Module 3: Python
This module explains the fundamentals of Python and shows how to set up a Python development environment properly. Students will also learn how simple custom penetration testing tools are written in Python.
Module 4: Command Line Scripting
This module explains the fundamentals of command line scripting and environment setup from both a Windows and a Linux perspective. Students will also learn how to automate simple daily tasks using bash scripting.
Section: Penetration Testing
Module 1: Information Gathering
Information gathering is the most important phase of a typical penetration testing engagement. A penetration tester will use the information gathered in this phase to map the attack surface and increase their chances of breaching the organisation, just as criminals do. Students will see how to use different sources to carry out the information gathering phases.
Module 2: Footprinting and Scanning
This module covers infrastructure information gathering. Remotely identifying operating systems, server applications and clients is of great importance in expanding the attack surface and preparing the penetration tester for the vulnerability assessment activity and the subsequent exploitation phase.
Module 3: Vulnerability Assessment
Vulnerability assessment is the process by which a penetration tester uncovers all the security flaws in a computer system or application. This module explains how vulnerability assessment can be carried out using automated tools or manual review.
Module 4: Web Attacks
This module detects and explains the most common web application vulnerabilities. Students will examine the most common web application attacks, from the information gathering phase through to exploitation. Students will learn to attack manually and then to automate using the most frequently used tools.
Module 5: System Attacks
From malware to password cracking attacks to buffer overflows, students will learn the most common attack vectors used against computer systems today. They will learn which malware they can use during an engagement. In the password attacks section we explain how to recover passwords from a compromised machine. We then complete the module with a section devoted to buffer overflows, one of the most widely used attack vectors against applications and operating systems.
Module 6: Network Attacks
This module offers a comprehensive explanation of the most common and historically significant remote attacks. Students will learn attack techniques against authentication services, Windows file sharing and network devices. Each attack technique can be tested in a hands-on lab. The final two sections explain, in theory and in practice, how to use Metasploit and Meterpreter to automate attacks and penetration testing techniques.
Module 7: Next Steps
This module is a summary of the course. It contains useful advice and information on how to continue learning in the field of IT security in the most productive way. Students can also test their skills against dedicated lab challenges that closely resemble real-life penetration testing scenarios.
Prerequisites
- Fundamentals of computers and computer science
- Fundamentals of computer security topics, although not mandatory
Who Can Attend
- IT staff and students
- IT security enthusiasts
- Junior penetration testers
Labs
The PTS course is a practice-based curriculum. Integrated with Hera Lab, the most advanced virtual lab in IT security, this product offers an unmatched practical learning experience. Hera is the only virtual lab that provides each student with fully isolated access to every real-world network scenario on the platform. Students can access Hera Lab from anywhere over VPN.
The modules are accompanied by numerous hands-on labs in which the student will:
- Learn to use penetration testing tools
- Build and use custom tools and scripts
- Exploit vulnerabilities
- Test their skills against real-life vulnerable environments
Lab 1
HTTP(S) Traffic Sniffing — In this lab you will intercept some traffic with Wireshark, a common sniffing tool. You will then capture and analyse packets in order to find authentication information.
Lab 2
Find the Hidden Server — In this lab you will learn how network routes work and how they can be added manually in order to reach different networks.
Lab 3
Exfiltrating Data — Find clever ways to steal information from a remote machine even though a firewall is in place.
Lab 4
Burp Suite Fundamentals — Use Burp’s tools like an intruder to audit a web application for possible vulnerabilities.
Lab 5
Burp Suite — A local police department has hired you to keep their website safe. They had a new website built by a web development company and want to be sure everything is secure and in order.
Lab 6
C++-Powered Exploitation — Build short programs with basic malware functionality. Can you use them to steal data from a remote machine?
Lab 7
Python-Powered Exploitation — Try writing your own Python tools to speed up target research.
Lab 8
Scanning and OS Fingerprinting — In this lab you will connect to a corporate network with a number of clients and servers. Your task is to map the network.
Lab 9
Nessus — In this lab you will need to use and configure Nessus to run a vulnerability scan against the target machine. However, you are not told where the target machine is on the network. You only know it is on the lab network you are connected to.
Lab 10
Dirbuster — You are a penetration tester hired by the company AwdMgmt to carry out security testing on their internal web application and machines. You are asked to perform the penetration test at the client’s premises. During this test you are not given a well-defined scope. You are connected directly to the client network.
Lab 11
XSS — In this lab you can practise XSS attacks against a web application hosted at 192.168.99.10. Because the application allows registered users to add comments, we have already created an account for you.
Lab 12
SQL Injection — In this lab you can practise the SQL injection techniques and tools covered during the course. You can reach the target web application at 10.124.211.96.
Lab 13
Bruteforce and Password Cracking — In the first part of the lab you will need to use different network authentication cracking techniques and tools against the services offered on the target machine. Once valid credentials are found, it is time to download the passwords stored on the remote system and use John the Ripper to crack them.
Lab 14
Null Sessions — In this lab you can apply different techniques and tools against a machine that is open to null sessions.
Lab 15
ARP Poisoning — In this lab you are connected to a switched network. Try to intercept network traffic and steal telnet credentials by carrying out an ARP poisoning attack.
Lab 16
Metasploit — In this lab you will need to use Metasploit and Meterpreter against a real machine, which will help you become familiar with the Metasploit framework and its features.
Lab 17
Black-Box Penetration Test #1 — The first black-box penetration testing lab is against a heterogeneous network. As this lab progresses, your Windows command line scripting skills will come in useful.
Lab 18
Black-Box Penetration Test #2 — For the second black-box penetration testing lab, make sure you remember the fundamentals of how DNS works.
Lab 19
Black-Box Penetration Test #3 — When attacking the third black-box penetration testing lab, make sure you remember your networking fundamentals.