📚 Module Library
Complete cheatsheets and learning content for each CPTS module.
Fundamentals
6 modulesPenetration Testing Process
Understanding the phases of penetration testing: Planning, Information Gathering, Vulnerability Assessment, Exploitation...
Vulnerability Assessment
Identify and prioritize vulnerabilities using automated scanners and manual testing....
File Transfers
Methods to transfer files between attacker and target systems....
Getting Started
Set up your penetration testing environment, understand basic terminology, and learn fundamental concepts....
Documentation & Reporting
Professional penetration test documentation, note-taking, and report writing....
Attacking Enterprise Networks
Simulated real-world penetration test combining all skills - External to Internal to Domain Admin....
Enumeration
4 modulesNetwork Enumeration with Nmap
Master Nmap for host discovery, port scanning, service detection, and NSE scripts....
Footprinting
Gather information about target infrastructure including DNS, SMTP, FTP, SMB, NFS, SNMP, and more....
Vulnerability Scanning with Nessus
Using Nessus Professional for comprehensive vulnerability scanning and assessment....
Vulnerability Scanning with OpenVAS
Open-source vulnerability scanning with Greenbone/OpenVAS....
Web
12 modulesWeb Information Gathering
Techniques for web application reconnaissance including subdomain enumeration, directory fuzzing, and technology fingerp...
Using Web Proxies
Using Burp Suite and other proxies for web testing....
Attacking Web Apps with Ffuf
Directory and parameter fuzzing with ffuf....
Login Brute Forcing
Brute forcing web login forms and services....
SQL Injection Fundamentals
Understanding and exploiting SQL injection vulnerabilities....
SQLMap Essentials
Automated SQL injection with SQLMap....
Cross-Site Scripting (XSS)
Finding and exploiting XSS vulnerabilities....
File Inclusion
Local and Remote File Inclusion vulnerabilities....
File Upload Attacks
Bypassing file upload restrictions....
Command Injections
OS command injection techniques....
Web Attacks
SSRF, XXE, IDOR and other web attacks....
Attacking Common Applications
Exploiting CMS and common web applications....
Exploitation
4 modulesShells & Payloads
Creating and catching reverse shells, bind shells, and web shells....
Metasploit Framework
Using Metasploit for exploitation, post-exploitation, and pivoting....
Password Attacks
Techniques for password cracking, brute forcing, and credential attacks....
Attacking Common Services
Exploit techniques for FTP, SSH, SMB, RDP, SQL, and other services....
Post-Exploitation
1 modulesActive Directory
8 modulesActive Directory Enumeration
Enumerate AD environments to find attack paths....
Active Directory Attacks
Common AD attack techniques: Kerberoasting, AS-REP Roasting, Pass-the-Hash, DCSync....
LLMNR/NBT-NS Poisoning
Capture hashes via Link-Local Multicast Name Resolution and NetBIOS Name Service poisoning....
Pass the Ticket & Pass the Certificate
Lateral movement using Kerberos tickets and certificates....
ACL Abuse
Exploiting misconfigured Active Directory Access Control Lists....
Domain Trust Attacks
Exploiting trust relationships between domains and forests....
Constrained & Unconstrained Delegation
Abusing Kerberos delegation for privilege escalation and lateral movement....
AD CS Attacks
Exploiting Active Directory Certificate Services misconfigurations....