💡 Advanced Offensive Security Certification

PenTest+ is the most comprehensive exam covering hands-on penetration testing and vulnerability assessment skills. It’s the only penetration testing exam with both hands-on performance-based questions and management skills coverage.

Module 1: Planning and Scoping (14%)

• Engagement Planning and Scoping
• Compliance and Legal Requirements
• Rules of Engagement
• Target Lists and Scope Verification
• Testing Methodologies (OWASP, PTES, NIST)
• Risk Management and Communication

Module 2: Information Gathering and Vulnerability Scanning (22%)

• Passive Reconnaissance Techniques
• Active Reconnaissance and Enumeration
• OSINT Gathering and Analysis
• Vulnerability Scanning with Nessus and OpenVAS
• Network Mapping and Service Detection
• Analyzing Vulnerability Scan Results
• Wireless Network Discovery

Module 3: Attacks and Exploits (30%)

• Network-Based Attacks and Exploitation
• Web Application Testing (SQLi, XSS, CSRF)
• Wireless Attacks and WPA/WPA2 Cracking
• API and Cloud-Based Attacks
• Physical Security Testing
• Social Engineering Techniques
• Password Attacks and Credential Harvesting

Module 4: Reporting and Communication (18%)

• Report Writing and Documentation
• Risk Rating and Prioritization
• Remediation Recommendations
• Executive Summary Creation
• Technical Findings Documentation
• Post-Engagement Activities
• Communication Best Practices

Module 5: Tools and Code Analysis (16%)

• Metasploit Framework
• Burp Suite and Web Proxies
• Nmap and Network Tools
• Scripting for Penetration Testing
• PowerShell and Python Exploitation
• Analyzing Scripts and Code
• Custom Tool Development