CONTENTS
Chapter 1 Planning and Preparation
Penetration Testing Methodologies
Penetration Testing Execution Standard
NIST Technical Guide to Information Security Testing and Assessment
Open Source Security Testing Methodology Manual
OWASP Web Security Testing Guide
Other Pre-engagement Documentation
Network Basics and Not-So-Basics
Lab 3-3: Vulnerability Scanning with Nessus
Web Application Penetration Testing
Web Application Vulnerabilities
Lab 3-9: Blind SQLi and Sqlmap
Declaring Methods and Variables
Lab 4-1: Navigating the MSFconsole
Lab 4-2: Exploiting SMB with Metasploit
Lab 4-3: Exploiting ProFTPD with Metasploit
Lab 4-4: Upgrading to a Meterpreter Shell
Chapter 5 Persistence, Privilege Escalation, and Evasion
Lab 5-2: Configuring a Callback via Windows Services
Lab 5-3: Persistence with PowerShell Empire
Lab 5-4: Linux Privilege Escalation
Lab 5-5: Windows Information Gathering and Privilege Escalation
Lab 5-6: Windows Defender Evasion
NTLM Challenge-Response Protocol
Exfiltration from the Local Host
Lab 6-1: Extract SAM from the Windows Registry
Lab 6-3: Dump Credentials from Memory
Chapter 7 Discovery and Lateral Movement
Lab 7-3: Information Gathering with SharpHound
Lab 7-7: Lateral Movement, Owning the Domain
Chapter 8 Data Collection and Exfiltration
Data from Information Repositories
Data Exfiltration with Frameworks
Lab 8-1: Exfilling Data with Metasploit
Lab 8-2: Exfilling Data with Empire
Data Exfiltration with Operating System Tools
Lab 8-3: Exfilling Data Using Linux Cron Jobs
Lab 8-4: Exfilling Data Using Windows Scheduled Tasks
Chapter 9 Writing and Communicating the Pentest Report
Appendix A Penetration Testing Tools and References
Penetration Testing Frameworks
Vulnerability and Exploitation Research
Appendix B Setting Up a Basic GPEN Lab
Home Base (Host Machine) and Domain Controller
Exercise Three: Exploit Chaining
Exercise Four: Exploit Chaining Redux
Exercise Three: Exploit Chaining
Exercise Four: Exploit Chaining Redux
Exercise Three: Exploit Chaining
Exercise Four: Exploit Chaining Redux
Appendix D About the Online Content
Your Total Seminars Training Hub Account