Visão Geral

Este curso apresenta uma metodologia estruturada para execução de testes de intrusão, desde planejamento e reconhecimento até exploração controlada, pós-exploração, análise de evidências e elaboração de relatórios técnicos.

Objetivo

Após realizar este curso, você será capaz de:

• Planejar testes de intrusão
• Executar reconhecimento e enumeração
• Identificar e validar vulnerabilidades
• Realizar exploração controlada
• Elaborar relatórios técnicos

Publico Alvo

• Penetration Testers
• Profissionais de Cybersecurity
• Ethical Hackers
• Analistas de segurança

Pre-Requisitos

• Conhecimentos de redes TCP/IP
• Familiaridade com Linux
• Familiaridade com Windows
• Conhecimentos básicos de segurança
• Noções de scripting são recomendadas

Conteúdo Programatico

Module 1: Penetration Testing Methodology

1. Penetration testing concepts
2. Assessment methodologies
3. Rules of engagement
4. Scope definition
5. Test objectives
6. Risk management
7. Evidence handling
8. Testing limitations
9. Assessment lifecycle
10. Penetration testing documentation

Module 2: Reconnaissance

1. Passive reconnaissance
2. Active reconnaissance
3. OSINT concepts
4. DNS enumeration
5. Network discovery
6. Host discovery
7. Technology fingerprinting
8. Attack surface mapping
9. Information validation
10. Reconnaissance reporting

Module 3: Enumeration

1. Port scanning
2. Service enumeration
3. Operating system identification
4. Network service analysis
5. Web service enumeration
6. SMB enumeration
7. LDAP enumeration
8. Active Directory enumeration
9. Authentication service enumeration
10. Enumeration methodology

Module 4: Vulnerability Assessment

1. Vulnerability discovery
2. Automated vulnerability scanning
3. Manual validation
4. Configuration assessment
5. Authentication vulnerabilities
6. Authorization weaknesses
7. Network vulnerabilities
8. Application vulnerabilities
9. Exploitability assessment
10. Vulnerability prioritization

Module 5: Exploitation

1. Exploitation fundamentals
2. Initial access
3. Remote code execution concepts
4. Authentication bypass
5. Privilege escalation
6. Credential Access
7. Controlled exploitation
8. Exploit validation
9. Exploitation safety
10. Exploitation documentation

Module 6: Post-Exploitation

1. System enumeration
2. Privilege assessment
3. Credential exposure
4. Network discovery
5. Active Directory enumeration
6. Lateral Movement concepts
7. Persistence assessment
8. Security control evaluation
9. Evidence collection
10. Post-exploitation analysis

Module 7: Reporting and Remediation

1. Technical findings
2. Risk ratings
3. Evidence documentation
4. Attack path documentation
5. Business impact
6. Remediation recommendations
7. Executive summaries
8. Technical reports
9. Retesting
10. Final assessment reporting

Module 8: Practical Penetration Testing

1. Assessment preparation
2. Reconnaissance
3. Enumeration
4. Vulnerability identification
5. Controlled exploitation
6. Post-exploitation analysis
7. Evidence collection
8. Risk assessment
9. Reporting
10. Penetration testing case study