CompTIA Penetration Tester+

• Introduction to Penetration Testing Concepts
• Plan a Pen Test Engagement
• Scope and Negotiate a Pen Test Engagement
• Prepare for a Pen Test Engagement

CONDUCTING PASSIVE RECONNAISSANCE

• Gather Background Information
• Prepare Background Findings for Next Steps

PERFORMING NON-TECHNICAL TESTS

• Perform Social Engineering Tests
• Perform Physical Security Tests on Facilities

CONDUCTING ACTIVE RECONNAISSANCE

• Scan Networks
• Enumerate Targets
• Scan for Vulnerabilities
• Analyze Basic Scripts

ANALYZING VULNERABILITIES

• Analyze Vulnerability Scan Results
• Leverage Information to Prepare for Exploitation

PENETRATING NETWORKS

• Exploit Network-Based Vulnerabilities
• Exploit Wireless and RF-Based Vulnerabilities
• Exploit Specialized Systems

EXPLOITING HOST-BASED VULNERABILITIES

• Exploit Windows-Based Vulnerabilities
• Exploit *nix-Based Vulnerabilities

TESTING APPLICATIONS

• Exploit Web Application Vulnerabilities
• Test Source Code and Compiled Apps

COMPLETING POST-EXPLOIT TASKS

• Use Lateral Movement Techniques
• Use Persistence Techniques
• Use Anti-Forensics Techniques

ANALYZING AND REPORTING PEN TEST RESULTS

• Analyze Pen Test Data
• Develop Recommendations for Mitigation Strategies
• Write and Handle Reports
• Conduct Post-Report-Delivery Activities