Skip to main content
back to List back
on this page

Penetration Testing Fundamentals

live online
price $1,900
Yasser
Beginner / Intermediate
3 Days
Penetration Testing
Tue 24 Nov - Thu 26 Nov
price $1,900
Register


Online, Available in English and Arabic

Overview

Penetration Testing Fundamentals is an entry-level offensive security course covering the core methodology, tools, and techniques used in professional penetration testing engagements. Students learn to assess web applications, enterprise networks, and Active Directory environments using the same process applied in real client engagements, from scoping through reporting.

The course combines structured instruction with hands-on lab exercises, giving students direct experience with the testing workflow, tooling, and documentation standards expected in a professional engagement

Topics:

  • Penetration testing methodology, phases, and workflow
  • Passive and active reconnaissance techniques
  • Network scanning and enumeration with Nmap
  • Exploitation using Metasploit Framework and privilege escalation (Windows & Linux)

Target Audience

This course is intended for aspiring and early-career penetration testers, security analysts transitioning into offensive security, and IT professionals seeking a structured introduction to professional penetration testing methodology.

Prerequisites:

  • Basic understanding of networking (TCP/IP, HTTP, DNS)
  • Familiarity with common web application concepts
  • Comfort working from a Linux command line
  • No prior penetration testing certification required

By the end of this course, the participant will be able to:

  • Apply standard penetration testing methodologies and engagement phases used in professional consulting
  • Differentiate Black Box and White Box testing approaches and select the right one for a given engagement
  • Collect and document technical evidence to a professional evidentiary standard
  • Intercept and manipulate HTTP traffic using Burp Suite to evaluate web application attack surface
  • Identify and exploit core web vulnerabilities: SQL Injection, XSS, IDOR, LFI/RFI, and file upload flaws
  • Perform network scanning and service fingerprinting with Nmap to map exposed services and misconfigurations
  • Match discovered services against known CVEs to identify high-risk exploitation paths
  • Explain Active Directory architecture, authentication protocols, and the role of the Domain Controller
  • Map attack paths and enumerate access control lists using BloodHound
  • Approach an assumed-breach scenario from an initial low-privileged foothold
  • Draft executive-ready web application and enterprise network/AD penetration test reports