CompTIA PenTest+ (Preparation for Exam PT0-002)

After completing the CompTIA PenTest+ (Preparation for Exam PT0-002) course, students will be able to:

• Plan and scope penetration tests.
• Conduct passive reconnaissance.
• Perform non-technical tests to gather information.
• Conduct active reconnaissance.
• Analyze vulnerabilities.
• Penetrate networks.
• Exploit host-based vulnerabilities.
• Test applications.
• Complete post-exploit tasks.
• Analyze and report pen test results.

This course is designed for IT professionals who want to develop penetration testing skills to enable them to identify information-system vulnerabilities and effective remediation techniques for those vulnerabilities. Target students who also need to offer practical recommendations for action to properly protect information systems and their contents will derive those skills from this course. This course is also designed for individuals who are preparing to take the CompTIA PenTest+ certification exam PT0-002, or who plan to use PenTest+ as the foundation for more advanced security certifications or career roles. Individuals seeking this certification should have three to four years of hands-on experience performing penetration tests, vulnerability assessments, and vulnerability management.
 

To ensure their success in this course, students should have: Intermediate knowledge of information security concepts, including but not limited to identity and access management (IAM), cryptographic concepts and implementations, computer networking concepts and implementations, and common security technologies. Practical experience in securing various computing environments, including small to medium businesses, as well as enterprise environments. For this course, students will need one Windows Server® 2016 computer and one Kali Linux™. All Computers:
• 2 gigahertz (GHz) 64-bit processor that supports the VT-x or AMD-V virtualization instruction set and Second Level Address Translation (SLAT).
• 8 gigabytes (GB) of Random Access Memory (RAM).
• 80 GB storage device or larger.
• Super VGA (SVGA) or higher resolution monitor capable of a screen resolution of at least 1,024 × 768 pixels, at least a 256-color display, and a video adapter with at least 4 MB of memory.
• Bootable DVD-ROM or USB drive.
• Keyboard and mouse or a compatible pointing device.
• Gigabit Ethernet adapter (10/100/1000BaseT) and cabling to connect to the classroom network.
• Wireless network adapter for the Kali Linux computer.
• IP addresses that do not conflict with other portions of your network.
• Internet access (contact your local network administrator).
Additional Hardware:
• Mobile devices running Android™ version 4.0 or higher.
This is required for students to fully key through the optional activity 'Exploiting Android Devices' in the 'Penetrating Networks' lesson. Ideally, each student would have their own mobile device.
 

Lesson 1: Planning and Scoping Penetration Tests

• Topic A: Introduction to Penetration Testing Concepts
• Topic B: Plan a Pen Test Engagement
• Topic C: Scope and Negotiate a Pen Test Engagement
• Topic D: Prepare for a Pen Test Engagement

Lesson 2: Conducting Passive Reconnaissance

• Topic A: Gather Background Information
• Topic B: Prepare Background Findings for Next Steps

Lesson 3: Performing Non-Technical Tests

• Topic A: Perform Social Engineering Tests
• Topic B: Perform Physical Security Tests on Facilities

Lesson 4: Conducting Active Reconnaissance

• Topic A: Scan Networks
• Topic B: Enumerate Targets
• Topic C: Scan for Vulnerabilities
• Topic D: Analyze Basic Scripts

Lesson 5: Analyzing Vulnerabilities

• Topic A: Analyze Vulnerability Scan Results
• Topic B: Leverage Information to Prepare for Exploitation

Lesson 6: Penetrating Networks

• Topic A: Exploit Network-Based Vulnerabilities
• Topic B: Exploit Wireless and RF-Based Vulnerabilities
• Topic C: Exploit Specialized Systems

Lesson 7: Exploiting Host-Based Vulnerabilities

• Topic A: Exploit Windows-Based Vulnerabilities
• Topic B: Exploit *nix-Based Vulnerabilities

Lesson 8: Testing Applications

• Topic A: Exploit Web Application Vulnerabilities
• Topic B: Test Source Code and Compiled Apps

Lesson 9: Completing Post-Exploit Tasks

• Topic A: Use Lateral Movement Techniques
• Topic B: Use Persistence Techniques
• Topic C: Use Anti-Forensics Techniques

Lesson 10: Analyzing and Reporting Pen Test Results

• Topic A: Analyze Pen Test Data
• Topic B: Develop Recommendations for Mitigation Strategies
• Topic C: Write and Handle Reports
• Topic D: Conduct Post-Report-Delivery Activities

Appendix A: Taking the Exams Appendix B: Mapping Course Content to CompTIA® PenTest+® (Exam PT0-002)