Skip to main content
back to List back
on this page

Advanced Penetration Testing

live online
price $3,200
Yasser
Advanced
5 Days
Penetration Testing
Sun 22 Nov - Thu 26 Nov
price $3,200
Register


Online, Available in English and Arabic

Overview

Advanced Penetration Testing is a red team operations course covering the complete attack chain used in enterprise engagements, from initial access through full Active Directory compromise. Students run a single, continuous engagement against a custom lab environment, applying defense evasion, privilege escalation, lateral movement, and Active Directory attack techniques within a professional red team methodology.

Each phase follows the structure of a real engagement: Rules of Engagement and Scope of Work first, technical execution second, and a client-ready report at the end. Students leave with a repeatable methodology, working payload templates, and a complete attack chain they can apply directly on their next engagement

Topics:

  • Client-side attacks & phishing
  • Custom payload development (C#, PowerShell, VBA)
  • Defense evasion (AV/EDR/AMSI bypass, fileless techniques)
  • Active Directory exploitation & lateral movement
  • Pivoting, tunneling & C2 infrastructure
  • Advanced web attacks & payload obfuscation
    Who Should Take This Course:
  • Penetration Testers
  • Red Teamers
  • Offensive Security Consultants
  • Security Researchers
  • Application Security Testers

Tareget Audience

This course is intended for penetration testers, red teamers, and security consultants with existing offensive security experience who want to operationalize advanced techniques into a coherent red team methodology. It is not an introductory course.

Prerequisites:

  • Solid understanding of Windows and Active Directory internals
  • Working knowledge of PowerShell and basic scripting (Python or similar)
  • Prior exposure to a C2 framework, or equivalent red team tooling experience
  • OSCP or equivalent practical experience strongly recommended

By the end of this course, the participant will be able to:

  • Scope and structure a red team engagement with a defensible Rules of Engagement and Scope of Work
  • Craft phishing payloads using weaponized macros that bypass modern endpoint security controls
  • Bypass AMSI and signature-based AV detection using JScript and reflected PowerShell execution, entirely in memory
  • Implement process injection, process hollowing, and DLL injection for defense evasion
  • Encrypt and stage shellcode to bypass network-layer filtering and inspection
  • Escalate privileges across Windows and Linux targets
  • Move laterally using Pass-the-Hash and Pass-the-Ticket
  • Execute Kerberoasting, AS-REP Roasting, and delegation abuse to achieve full domain compromise
  • Write a professional, client-ready penetration test report that communicates impact and remediation clearly