Advanced Penetration Testing

Advanced Penetration Testing

National Initiative for Cybersecurity Careers and Studies

Education & Training

Toggle submenu

Workforce Development

Toggle submenu

Cybersecurity & Career Resources

Toggle submenu

Breadcrumb

Education & Training

NICCS Education & Training Catalog

TrainACE

Advanced Penetration Testing

Understanding the Defender: IDS/IPS overview and bypasses, antivirus bypasses, binary evasion and packing binaries
Attacking from the Web: Cross-site scripting (XSS) attacks, SQL injection attack, remote file inclusion, local file inclusion
Exploiting the Network: Client side (browser) exploitation, Windows privilege escalation, Linux privilege escalation, re-purposing administrative tools
Post Exploitation: Windows persistence techniques, enabling RDP/VNC, Linux persistence techniques, backdooring SSH logins, post exploitation reconnaissance, data exfiltration techniques

Your Location
Providers
Courses
Course and Provider Quantity

Last Published Date: August 16, 2022
Official website of the Cybersecurity and Infrastructure Security Agency

A .gov website belongs to an official government organization in the United States.

A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Advanced Penetration Testing Training, or APT training, is an intense, hands-on training class that makes traditional pentesting training classes look like a Security+ class. The class was written by a conglomerate of IT security and security training's most respected professionals. This team of industry professionals were looking to create a course that dissects the art of hacking and creates professionals who deeply understand the why's of penetration testing / exploitation so that all traditional barriers can be broken. Our most advanced penetration testing is a class where you will experience real pentesting in high security environments. The course is a three-day intensive that focuses attacking and defending highly secured environments such as agencies, financial organizations, federal organizations, and large companies.
The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov (link sends email) .
CEH or 3 years experience or education within the cybersecurity field, familiar with Linux, Metasploit, and other basic security concepts. Confortable exploiting a system and/or network on your own.
7833 Walker Drive
Suite 520c
Greenbelt , MD 20770
45195 Research Pl
Suite 120
Ashburn , VA 20147
7880 Milestone Parkway
Main Floor
Hanover , MD 21076
TrainACE
7833 Walker Drive
Suite 520c
Greenbelt , MD 20770
National Initiative for Cybersecurity Careers and Studies
A Cybersecurity & Infrastructure Security Agency program
©2013-2022
You have been selected to participate in a brief survey about your experience today with National Initiative for Cybersecurity Careers and Studies.
Would you like to participate in our survey?
If you accept you will be leaving the National Initiative for Cybersecurity Careers and Studies website and going to a third party site.
That site may have different privacy, security and accessibility policies than the National Initiative for Cybersecurity Careers and Studies site.
National Initiative for Cybersecurity Careers and Studies does not endorse any commercial products, services, programs or content on the third party website.
Thank you for visiting our site. We hope your visit was informative and enjoyable.

Our site uses cookies. By continuing to use our site you are agreeing to our cookie policy .
Proud Partner of the Minnesota Wild
Access guides, checklists, e-books, and briefs
Comprehensive, risk-based methodology
Home > FAQs > Advanced Penetration Testing

Advanced Penetration Testing is built for organizations with existing, mature information security programs that regularity tests their security defenses and are looking to simulate real-world security threats.

Penetration testing uses largely manual testing methods to identify vulnerabilities in an organization's existing security defenses that could be exploited by attackers. A Red Team engagement (commonly referred to as Red Teaming) emulates all aspects of a real attack, giving organizations a true assessment of how well their defenses would hold up against an advanced threat actor.

A Red Teaming engagement includes the testing of physical security in addition to cyber security, and an Advanced Adversary Simulation tests only an organization's cyber security.

RedTeam Security uses the terms Advanced Adversary Simulation and Cyber Red Team interchangeably as both refer to an advanced, goal-oriented service offering that tests an organization's existing cyber security measures.

Good scoping is important to both the client and the testing organization because it means that the client gets the most bang for their buck by ensuring penetration testers are spending time seeking to exploit vulnerabilities surrounding their organizations’ most valuable data and physical assets. For example, if the client advises that they have 15 IPs, of which ten of them are phones and five of them are computers and fiber network devices (i.e., routers or switches), the testers have a better understanding of what needs to be tested and don’t need to spend time identifying proper test methodology for a specific platform.

REDTEAM SECURITY

Site Map
Privacy Policy
Accessibility

CONTACT US

info@redteamsecure.com
Schedule a Free Consultation
Partner With RedTeam

Digital Presence Powered by Milestone Inc.
Proud Partner of the Minnesota Wild
Identify exploitable vulnerabilities in networks, web applications, physical facilities, and human assets to better understand susceptibility to security threats and cyberattacks.
Assess people, processes, and procedures through simulated email phishing attacks, telephone vishing, and onsite attempts to breach physical safeguards.
Execute goal-based attacks that leverage advanced tools and techniques to test an organization’s existing defenses, procedures, and responses to real-world cyberattacks.

National Initiative for Cybersecurity Careers and Studies

Education & Training

Toggle submenu

Workforce Development

Toggle submenu

Cybersecurity & Career Resources

Toggle submenu

Breadcrumb

Education & Training

NICCS Education & Training Catalog

SANS Institute

Advanced Penetration Testing, Exploit Writing, and Ethical Hacking

Advanced Penetration Testing, Exploit Writing, and Ethical Hacking

Online, Instructor-Led
Online, Self-Paced
Classroom

Perform fuzz testing to enhance your company's SDL process.
Exploit network devices and assess network application protocols.
Escape from restricted environments on Linux and Windows.
Test cryptographic implementations.
Model the techniques used by attackers to perform 0-day vulnerability discovery and exploit development.
Develop more accurate quantitative and qualitative risk assessments through validation.
Demonstrate the needs and effects of leveraging modern exploit mitigation controls.
Reverse-engineer vulnerable code to write custom exploits.

Your Location
Providers
Courses
Course and Provider Quantity

Last Published Date: August 16, 2022
Official website of the Cybersecurity and Infrastructure Security Agency

A .gov website belongs to an official government organization in the United States.

A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

SEC660: Advanced Penetration Testing, Exploit Writing, and Ethical Hacking is designed as a logical progression point for those who have completed SANS SEC560: Network Penetration Testing and Ethical Hacking, or for those with existing penetration testing experience. Students with the prerequisite knowledge to take this course will walk through dozens of real-world attacks used by the most seasoned penetration testers. The methodology of a given attack is discussed, followed by exercises in a hands-on lab to consolidate advanced concepts and facilitate the immediate application of techniques in the workplace. Each day of the course includes a two-hour evening boot camp to drive home additional mastery of the techniques discussed. A sample of topics covered includes weaponizing Python for penetration testers, attacks against network access control (NAC) and virtual local area network (VLAN) manipulation, network device exploitation, breaking out of Linux and Windows restricted environments, IPv6, Linux privilege escalation and exploit-writing, testing cryptographic implementations, fuzzing, defeating modern OS controls such as address space layout randomization (ASLR) and data execution prevention (DEP), return-oriented programming (ROP), Windows exploit-writing, and much more!
Attackers are becoming more clever and their attacks more complex. To keep up with the latest attack methods, you need a strong desire to learn, the support of others, and the opportunity to practice and build experience. This course provides attendees with in-depth knowledge of the most prominent and powerful attack vectors and furnishes an environment to perform these attacks in numerous hands-on scenarios. The course goes far beyond simple scanning for low-hanging fruit and shows penetration testers how to model the abilities of an advanced attacker to find significant flaws in a target environment and demonstrate the business risk associated with these flaws.
SEC660 starts off by introducing advanced penetration concepts and providing an overview to prepare students for what lies ahead. The focus of day one is on network attacks, an area often left untouched by testers. Topics include accessing, manipulating, and exploiting the network. Attacks are performed against NAC, VLANs, OSPF, 802.1X, CDP, IPv6, VOIP, SSL, ARP, SNMP, and others. Day two starts with a technical module on performing penetration testing against various cryptographic implementations, then turns to network booting attacks, escaping Linux restricted environments such as chroot, and escaping Windows restricted desktop environments. Day three jumps into an introduction of Python for penetration testing, Scapy for packet crafting, product security testing, network and application fuzzing, and code coverage techniques. Days four and five are spent exploiting programs on the Linux and Windows operating systems. You will learn to identify privileged programs, redirect the execution of code, reverse-engineer programs to locate vulnerable code, obtain code execution for administrative shell access, and defeat modern operating system controls such as ASLR, canaries, and DEP using ROP and other techniques. Local and remote exploits as well as client-side exploitation techniques are covered. The final course day is devoted to numerous penetration testing challenges that require students to solve complex problems and capture flags.
Among the biggest benefits of SEC660 is the expert-level hands-on guidance provided through the labs and the additional time allotted each evening to reinforce daytime material and master the exercises.
The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov (link sends email) .
This is a fast-paced, advanced course that requires a strong desire to learn advanced penetration testing and custom exploitation techniques. The following SANS courses are recommended either prior to or as a companion to taking this course:
Experience with programming in any language is highly recommended. At a minimum, students are advised to read up on basic programming concepts. Python is the primary language used during class exercises, while programs written in C and C++ code are the primary languages being reversed and exploited. The basics of programming will not be covered in this course, although there is an introductory module on Python.
You should also be well versed with the fundamentals of penetration testing prior to taking this course. Familiarity with Linux and Windows is mandatory. A solid understanding of TCP/IP and networking concepts is required. Please contact the author at stephen@deadlisting.com (link sends email) if you have any questions or concerns about the prerequisites.
2660 Woodley Road, NW
Washington , DC 20008
1919 Connecticut Ave. NW
Washington , DC 20009
555 North Point St.
San Francisco , CA 94133
1420 Stout Street
Denver , CO 80202
9801 International Drive
Orlando , FL 32819
10207 Wincopin Circle
Columbia , MD 21044
100 E Main Street
Norfolk , VA 23510
SANS Institute
8120 Woodmont Avenue
Suite 205
Bethesda , MD 20814
National Initiative for Cybersecurity Careers and Studies
A Cybersecurity & Infrastructure Security Agency program
©2013-2022
You have been selected to participate in a brief survey about your experience today with National Initiative for Cybersecurity Careers and Studies.
Would you like to participate in our survey?
If you accept you will be leaving the National Initiative for Cybersecurity Careers and Studies website and going to a third party site.
That site may have different privacy, security and accessibility policies than the National Initiative for Cybersecurity Careers and Studies site.
National Initiative for Cybersecurity Careers and Studies does not endorse any commercial products, services, programs or content on the third party website.
Thank you for visiting our site. We hope your visit was informative and enjoyable.

Ethical Hacking Penetration Testing Computer Forensics Network Security/ Network Defense Incident Handling SOC Analyst/ Threat Intelligence Executive Management (CCISO) Security Awareness Cyber Range Challenge Secure Coding Blockchain Disaster Recovery Web Application Security Cloud Security Cybersecurity Technician

Please confirm by checking the box below that you consent to EC-Council contacting you regarding the product interest you have indicated above. Your information will not be shared with any third party. Please see our full privacy policy here .

If no, allow them to submit the form.

If yes, trigger the following question with a text box for response. This should be a mandatory field: Please indicate the nature of the requested content exchange.

Cybersecurity has become critical as the need to protect digital infrastructure, personal data, and business operations grows. Cybersecurity professionals are always in demand, but to stay ahead of the curve, they need to keep up with the latest technologies, including advanced penetration testing techniques. This article will discuss some of the next-generation penetration testing techniques taught in EC-Council’s Certified Penetration Testing Professional (C PENT) certification program.
Penetration testing attempts to exploit vulnerabilities in a system or network to identify security issues. It is used to assess the security posture of a system or network and can help organizations find and fix weaknesses before attackers exploit them. Penetration testing should be part of any organization’s cybersecurity program, particularly if malicious actors have previously compromised its systems.
Many industries are at risk of cyberattacks. Some of the most commonly targeted sectors include the following.
In addition, certain technologies are also particularly appealing to malicious hackers.
EC-Council’s CPENT certification course covers the latest techniques used in penetration testing.
This module covers advanced attacks against Windows systems. It deals with topics such as Active Directory exploitation, Kereberoasting, and Pass-the-Hash attacks.
This module focuses on attacks against IoT devices and systems and includes topics such as embedded device hacking and wireless attacks.
This module looks at techniques for bypassing firewalls or other network security measures. It covers topics such as port forwarding, tunneling, and DNS cache poisoning.
This module covers the assessment of operational technology (OT) systems. It deals with topics such as SCADA system security, industrial control systems (ICS) and SCADA malware, and OT network analysis.
This module looks at the use of double pivoting to access hidden networks. It covers topics such as using two pivot points for reconnaissance and using Metasploit to pivot through two systems.
This module covers penetration testing techniques for escalating privileges on a system. It covers topics such as Windows and Linux privilege escalation and how to use Metasploit to escalate privileges.
This module covers the use of Metasploit to create and deliver exploits. It covers topics such as creating payloads, setting up listeners, and delivering exploits.
This module covers the assessment of cloud-based systems. It includes topics such as assessing cloud security, attacking cloud applications, and detecting malicious activity in the cloud.
This module covers the assessment of wireless networks. It covers topics such as wireless network discovery and cracking WEP/WPA/WPA-PSK keys.
This module covers the analysis of flawed binaries, including static analysis, dynamic analysis, and reverse engineering.
The CPEN
Double Penetration Porn Com
Overwatch Workshop Aim
Naked Bent

Advanced Penetration Testing

Report Page