CompTIA PenTest PT0-003

What you will learn

• Plan, scope, and perform information gathering as part of a penetration test.
• Perform attacks that are aligned to and fulfill legal and compliance requirements.
• Perform each phase of a penetration test using and modifying appropriate tools and use the appropriate tactics, techniques, and procedures.
• Analyze the results of each phase of a penetration test to develop a written report, effectively communicate findings to stakeholders and provide practical recommendations.

Course outline

1. 1

   Lesson 1: Penetration Testing: Before You Begin

2. 2

   Lesson 2: Applying Pre-Engagement Activities

   • A penetration tester meticulously conducts pre-engagement activities to define the test's scope, objectives, and boundaries, to ensure alignment with regulations and industry standards. Establishing clear rules of engagement, securing agreements like NDAs, and selecting relevant targets are essential for an effective and legally compliant test. Different assessments—such as vulnerability, network, application, and API—will address specific security areas, providing a full view of potential risks. A clear shared responsibility model will help coordinate efforts between all parties, ensuring that each understands their role in securing the system. The PenTester must also uphold ethical and legal considerations, including obtaining authorization letters and adhering to reporting standards. Thorough documentation of these steps will lay the groundwork for a structured, transparent, and secure penetration testing process.
3. 3

   Lesson 3: Enumeration and Reconnaissance

   • Before any pentest can commence, the pentester should spend the time to gather as much information as possible on the target. The more information that is learned about the target prior to starting the pentest, the easier the test will be. Because having more information will lead to greater success in the pentest, the pentester should spend ample time in this phase of the pentest. The process of gathering this information is known as Enumeration and Reconnaissance.
4. 4

   Lesson 4: Scanning and Identifying Vulnerabilities

   • To gain access to a target device during the pentest, vulnerabilities will need to be identified. The pentester will then exploit these vulnerabilities in an attempt to gain access to the network resource. Using the information that was gathered during the reconnaissance and enumeration phases, the pentester will begin to scan for and identify potential vulnerabilities.
5. 5

   Lesson 5: Conducting Pentest Attacks

   • Once the pentester has gathered information on the target and identified potential vulnerabilities, they will need to prioritize which vulnerabilities they want to exploit. The prioritization will be based on the goals of the pentest and the network devices that the pentester has discovered. Once the pentester has determined which network resources to start exploiting, they will use the information that has been gathered to carry out their exploits on the target machines.
6. 6

   Lesson 6: Web-based Attacks

   • Many of the systems that the pentester will be exploiting use web applications and cloud resources to perform their specified functions. because of this, web applications and cloud resources are a prime target that can be exploited to gain access to the system. The pentester needs to be knowledgeable on the different attacks that can be carried out against these systems.
7. 7

   Lesson 7: Enterprise Attacks

   • When the pentester has identified their targets and researched and discovered potential vulnerabilities, they will begin attempting to exploit the targets. Depending on the resource, this can involve network based attacks or host based attacks. The pentester will want to attempt to authenticate themselves on the devices so they can navigate and carry out attacks as needed.
8. 8

   Lesson 8: Specialized Attacks

   • Oftentimes, the pentester will need to carry out specialized attacks against different targets. This can involve attacking the wireless network to sniff traffic, carrying out social engineering attacks to exploit the human element, or attempting to gain access to non-standard devices, such as vehicles. These systems are all integrated into the main network and can be exploited to gain access. The pentester needs to be aware of these systems and how to exploit them if they are to be successful.
9. 9

   Lesson 9: Performing Penetration Testing Tasks

   • Once the pentester has gained access to their targets, they will want to establish persistence. This simply means that a method is established that will allow the pentester to quickly and easily reconnect to the system at a later time. This may mean installing a backdoor into the system, adding a user account with appropriate credentials, or other methods. The pentester will use these methods to move throughout the network establishing connections and persistence across multiple machines so data can be exfiltrated safely and without detection. Once the pentester has completed their tasks, they will want to clear out any evidence that they were in the systems.
10. 10

    Lesson 10: Reporting and Recommendations

    • The next steps in preparing the report involve compiling all key components—executive summary, methodology, detailed findings, attack narrative, and tailored recommendations—to give stakeholders a clear understanding of the security assessment's results and suggested actions. The PenTester ensures that the report respects privacy and complies with legal standards while incorporating quality control measures and possibly AI tools to improve clarity and accuracy. The PenTester's recommendations will address vulnerabilities through technical measures like patch management, as well as administrative policies, operational safeguards, and physical controls, creating a multi-layered defense strategy to reduce attack risks and improve overall security.