98ÌÃapp

Course Details

Course Name: Advanced Penetration Testing - Enterprise Focused
Course Dates:
January 7 - 18, 2025, Test Day: January 20, 2025
April 7 - 18, 2025, Test Day: April 21, 2025

Duration: 9 am - 2 pm
Credit Hours: 55 hours
Location: AIU Campus

Overview

This advanced course dives deep into penetration testing techniques customized for large-scale enterprise environments. Participants will learn to conduct sophisticated attack simulations, aiming to identify critical security flaws within complex organizational infrastructures.

The course covers topics such as advanced network exploitation, privilege escalation, bypassing endpoint defenses, and lateral movement across networked systems. Participants will gain hands-on experience using tools and frameworks like PowerShell Empire, Cobalt Strike, and Burp Suite Pro to simulate real-world cyberattacks against enterprise defenses. Emphasis is placed on understanding regulatory compliance, documenting findings, and offering remediation guidance to secure high-value assets. This course is ideal for seasoned security professionals seeking advanced skills in enterprise security testing.

Who is this course for?

• Experienced penetration testers and red teamers.
• Cybersecurity professionals aiming for advanced offensive security roles.
• Those targeting certifications like OSCE, GPEN, or eCPPT.

Key Benefits

• Master advanced attack techniques tailored for enterprise environments.
• Gain expertise in bypassing modern defenses like EDRs and firewalls.
• Learn to perform sophisticated attacks against corporate systems.
• Simulate real-world APT (Advanced Persistent Threat) scenarios.

Program Outline

1. Advanced Reconnaissance

• Deep-dive into OSINT tools and techniques.
• Social engineering at an enterprise level.

2. Advanced Exploitation Techniques

• Exploiting Active Directory and enterprise applications.
• Attacking cloud infrastructures and virtual environments.

3. Bypassing Defenses

• Evading detection by antivirus and EDR solutions.
• Using custom scripts and payloads.

4. Post-Exploitation

• Lateral movement, persistence, and data exfiltration.
• Attack chain simulation and pivoting strategies.

5. Advanced Reporting and Strategic Remediation

• Crafting C-level and technical reports.
• Recommendations for enterprise-level security improvement.