Vulnerability Assessment & Penetration Testing (VAPT)

Overview of VAPT

• VAPT Overview

• Roles and Responsibilities in VAPT

• Functions of VAPT

• Key Roles in VAPT

• Responsibilities of a VAPT Professional

• Commonly Used VAPT Tools

Networking Concepts

• Introduction to Networking Fundamentals

• Types of Networks: LAN, WAN, VPN

• IP Addressing

• Types of IP Addresses

• Common Ports and Associated Services

• Service Communication Through Ports

• Well-Known Ports

• Risks Associated with Ports and Services

• TCP vs UDP

• Differences Between TCP and UDP

• Applications and Use Cases

• TCP Three-Way Handshake

• UDP Connectionless Communication

System Pentesting

• Host Discovery with Nmap

• Windows and Linux Exploitation

• Malware Development with WinSpy

• Persistence Attacks with Malware

• Brute-Force Attacks with Hydra

• Advanced VAPT: Microsoft Active Directory

• Active Directory Attacks

• LLMNR Poisoning Using Responder

• Pass-the-Hash Using NTLM and Responder

Web Application Hacking

• Web Application Attacks and Security

• Cross-Site Scripting (XSS)

• Parameter Tampering

• HTML Injection

• DoS Attacks

• File Upload Vulnerabilities

• File Inclusion Vulnerabilities

• Command Injection

• Cross-Site Request Forgery (CSRF)

• SQL Injection

Network Security / Wireless Security

• Wireless Terminology

• Wireless Networks

• Wireless Encryption

• Wireless Threats

• Wi-Fi Encryption Cracking

• WEP/WPA/WPA2 Cracking Mechanisms

• Deauthentication Attacks

• Evil Twin Attacks

Cryptography

• Introduction to Cryptography

• Encryption Algorithms

• DES — Manual Explanation with Practical Message

• Understanding Ciphers

• Disk Encryption

• Cryptography Tools