Wesley Swann← All courses
The Hacking Coach course
Foundations of Penetration Testing: Scanning and Initial Access
Network scanning, vulnerability discovery and initial access, the first steps of a pentest.
Learning objectives
- Learning Objectives for "Foundations of Penetration Testing: Scanning and Initial Access"
- By the end of this course, you will be able to:
- Understand the principles and importance of penetration testing in modern cybersecurity.
- Perform comprehensive network scans using tools like Nmap and Masscan to identify hosts, ports, and services.
- Analyze vulnerabilities and misconfigurations to assess potential attack vectors.
- Execute initial access techniques, including password guessing and credential harvesting.
- Apply exploitation strategies using tools like Metasploit to simulate real-world attack scenarios.
Overview
This course is designed to equip aspiring penetration testers with the foundational knowledge and hands-on skills needed to excel in cybersecurity. You'll begin by exploring the role of penetration testing in safeguarding modern enterprises, along with the ethical and legal considerations involved.
The course dives into scanning techniques, including network sweeps, port scans, and OS fingerprinting, utilizing industry-standard tools like Nmap and Masscan. You'll learn to identify vulnerabilities, analyze misconfigurations, and execute initial access strategies through practical labs that mimic real-world scenarios.
By the end of the course, you'll be prepared to approach penetration testing systematically, leveraging scanning and exploitation techniques to uncover and address security risks. Whether you're starting your ethical hacking journey or looking to enhance your technical skills, this course provides the essential building blocks for success.
Curriculum
Learning time: 14 hours 25 minutes
Introduction to Enterprise Penetration Testing27 minutes
- Importance of Penetration Testing in Modern Securi…
- Ethics and Legal Considerations
- Course Roadmap Overview
In-Depth Scanning1 hour 27 minutes
- Scanning Goals and Types
- Tools and Techniques for Scanning
- Hands-on Labs: Conducting Effective Penetration Te…
- Network Sweeps
- Port Scanning
- OS Fingerprinting
- Version Scanning
- Advanced Nmap Scripting Engine (NSE)
- Lab 2.1: Using Nmap for Comprehensive Scanning
- Lab 2.2: Masscan for Large-Scale Environments
Vulnerability Scanning1 hour 24 minutes
- Understanding Vulnerabilities and Misconfiguration…
- Understanding How to Identify and Assess Vulnerabi…
- Advanced Techniques with Nmap NSE
- Integration with Vulnerability Scanners
- Common Types of Vulnerabilities
- Importance in the Penetration Testing Lifecycle
- Risks of False Positives and False Negatives
- Vulnerability Detection (e.g., SMB, HTTP, DNS scri…
- Automating Scans with Scheduled Tasks
- Interpreting Scan Results: Exploitable vs. Non-exp…
Initial Access Techniques58 minutes
- Real-World Examples of Initial Access (Case Studie…
- Strategies for Exploiting Discovered Vulnerabiliti…
- Common Techniques for Initial Access : Brute Force…
- Password Guessing and Credential Harvesting
- Hands-on Labs
- Exploiting Misconfigurations: Open SMB Shares
- Misconfigured Web Servers and APIs
Exploitation Techniques28 minutes
- Categories of Exploits
- Remote Code Execution
- Tools for Exploitation
Post-Exploitation and Lateral Movement1 hour 16 minutes
- Introduction to Post-Exploitation Goals: Access Pe…
- Privilege Escalation Tactics
- Lateral Movement within Networks
- Privilege Escalation Techniques: Windows Privilege…
- Windows Privilege Escalation: Exploiting Misconfig…
- Windows Privilege Escalation: Leveraging Kernel Ex…
- Linux Privilege Escalation: Misconfigured SUID/SGI…
- Linux Privilege Escalation: Kernel Exploits and Ex…
- Persistence Mechanisms
Command and Control1 hour 9 minutes
- Introduction to Command and Control Channels
- Establishing Command and Control (C2) Channels
- The Lifecycle of C2 Channels
- Types of C2 Channels: Network-Based Channels, Http…
- File-Based Channels: Using Email Attachments or Sh…
- In-Memory Channels: Fileless Malware and Memory In…
- Techniques for Evasion and Covert Communications
- Hands-on Labs
Advanced Topics in Penetration Testing1 hour 6 minutes
- Domain Domination
- Azure Cloud Exploitation
- Security Implications in Hybrid Environments
- Achieving Control of Active Directory (AD) Environ…
- Techniques: Kerberoasting, DCSync Attacks, and Gol…
- Attacking Trust Relationships
- Exploiting Misconfigurations in Cross-Domain Trust…
- Tools: BloodHound for AD Analysis and Rubeus for C…
Reporting and Communication26 minutes
- Structuring Findings and Recommendations
- Crafting Executive and Technical Reports
- Communicating Risks to Stakeholders
Vulnerability Scanning Part 21 hour 6 minutes
- Introduction to Vulnerability Scanners: OpenVAS, N…
- Comparing Output from Different Tools
- Strengths and Weaknesses of Automated Tools
- Compliance-Driven Scanning – Meeting Standards (e.…
- 🛠 Prioritizing Findings Based on Compliance Impac…
- Lab 3.1: Advanced NSE Usage 🚀 Discover Services a…
- Lab 3.2: Integrating 🖥️ OpenVAS or Nessus with 🔍…
- Reporting Vulnerabilities for Stakeholder Communic…
Initial Access Techniques Part 21 hour 8 minutes
- Social Engineering: Phishing Emails 🎣
- Physical Security Bypasses
- Understanding Hydra
- Leveraging Burp Suite for Web Exploitation
- Introduction to Exploiting Common Vulnerabilities
- Advanced Techniques Exploiting Known Vulnerabiliti…
- Bypassing Multi-Factor Authentication
- Gaining Access via Supply Chain Exploits
Command and Control (C2) Part 21 hour 15 minutes
- Techniques for Establishing C2 – Deploying Backdoo…
- Exploiting Remote Desktop Protocol (RDP)
- Utilizing Reverse Shells
- Advanced Techniques: Covert Channels via Steganogr…
- Advanced Techniques: IoT Device Exploits
- Evasion Strategies – Bypassing Firewalls and Intru…
- Understanding Obfuscation in C2 Traffic
- Obfuscating C2 Traffic: Randomizing Packet Timing
- Using Legitimate Tools and Protocols (e.g., PowerS…
Post-Exploitation and Lateral Movement Part 21 hour 15 minutes
- Lateral Movement Strategies Using Credentials Harv…
- Exploiting Trust Relationships Between Systems
- Pass-the-Hash and Pass-the-Ticket Attacks
- Exploiting Remote Services:
- RDP, SSH, SMB Exploits
- Moving to Domain Controllers in Active Directory E…
- Data Extraction and Persistence – Extracting and A…
- Data Extraction: Focus on Critical Business Assets…
- Maintaining Access: Installing Backdoors and Sched…
Post-Exploitation and Lateral Movement- Evasion and Countermeasures Part 359 minutes
- Techniques to Avoid Detection
- Clearing Logs and Hiding Processes
- Tools and Frameworks: Mimikatz, Cobalt Strike
- Hands-on Labs: Lab 5.1 – Privilege Escalation on W…
- Lab 5.2: Lateral Movement in Active Directory
- Lab 5.3: Persistent Backdoors 🐾
Prerequisites and equipment
Prerequisites:
- Basic understanding of networking concepts (IP addresses, ports, and protocols).
- Familiarity with using a command-line interface (CLI) is helpful but not mandatory.
- A strong interest in cybersecurity and ethical hacking.
- Required
- Equipment:
- Hardware:
- A computer with at least 8 GB of RAM and a dual-core processor (16 GB RAM recommended for smoother operation).
- Software:
- Virtualization software such as VMware Workstation, VMware Fusion, or VirtualBox.
- A penetration testing lab setup, including a virtualized environment with tools like Kali Linux and Windows virtual machines.
- Tools:
- Nmap, Masscan, and Metasploit (freely available and will be covered in the course setup).
- Text editor (e.g., Visual Studio Code or Notepad++).
- Network:
- Stable internet connection for downloading tools, virtual machines, and accessing course resources.
Ready to start Foundations of Penetration Testing: Scanning and Initial Access?
Self-paced, on The Hacking Coach.
Enroll now ↗