Penetration Testing (2020)

The intent of the Penetration Testing Knowledge Unit is to provide students with methods of discovering ways of exploiting vulnerabilities to gain access to a system.

Outcomes

1. Students should be able to plan, organize and perform penetration testing on a simple network.

Topics

1. Flaw Hypothesis Methodology
2. Other methodologies (e.g., OSSTMM)
3. Identifying flaws from documentation
4. Identifying flaws from source code analysis
5. Vulnerability Scanning
6. Understanding families of attacks
7. Understanding flaws that lead to vulnerabilities
8. Enumeration, foot printing
9. Attack Surface Discovery
10. Attack Vectors

NICE Framework Categories

Protect and Defend (PR)

Analyze (AN)

Collect and Operate (CO)

Investigate (IN)

CSEC 2017 Categories

System Security

Specialization Areas

• Network Security Administration, Specialization Area
• Network Security Engineering

See also

Related Knowledge Units

• Penetration Testing (2014)

Reference ID

PTT