Vulnerability Assessment & Penetration Testing – VAPT

Vulnerability Assessment and Penetration Testing (VAPT) are two types of vulnerability testing. … Penetration tests attempt to exploit the vulnerabilities in a system to determine whether unauthorized access or other malicious activity is possible and identify which flaws pose a threat to the application.

Instructor Zybeak Technologies

Updated December 23, 2021

Overview
Curriculum
Instructor

- Overview of Vulnerability Assessment & Penetration Testing

- Why Penetration Testing is required?
- Offensive & Defensive face of Penetration Testing
- Preparation for Penetration Testing Live test-case
- Identify weaknesses using Vulnerability Assessment tools

- Data Leakage Threats and Mitigation

- Identify data leakage entry points
- External| Internal data leakages
- Searching of Corporate Data Leakages
- Searching of Employee Data Leakages
- How attacker can exploit Corporate | Employee Data
- Security Testing Policy | Guidelines for Data Leakage

- Penetration Testing Methodology

- OSINT Penetration Testing Methodology
- OWASP Penetration Testing Methodology
- NIST Security Testing & Standards
- Penetration Testing Plan Template
- Security Assessment Plan Template
- Security Testing Plan Template
- Security White Paper & Research Paper

- Vulnerability Analysis

- Vulnerability Analysis using various tools
- Check Vulnerability status & Alerts
- Testing Exploit on Vulnerabilities
- Check false Vulnerabilities & exploits
- Find Patches & Hotfix with CVEs
- Preparing reports

- Exploit & CVE Expose Tools

- Why Hackers Need Vulnerability Research
- Vulnerability Research Tools
- Vulnerability Research Websites
- Research Powerful Exploit tools
- Research Private exploits

- Network Scanning & Auxiliary Scanners

- Discover Network Connected Device & Servers
- Local area network Services Scanning
- Nmap Network & Service enumerations
- NetCat (Service Enumerations)
- NSE Scripts for vulnerability Analysis
- Different Port Scanning Techniques
- Firewall / IDS evasion Technique
- Discover & Exploit services using Auxiliary