ADVANCED

Advanced Penetration Testing

Learn memory corruption, AV evasion, and advanced web exploitation techniques.

Your Progress

0%

Syllabus

1

Advanced Penetration Testing

2

Bypassing Antivirus (AV) and EDR

3

Memory Corruption: Buffer Overflows

4

Web Application Firewalls (WAF) Evasion

5

Reverse Engineering Basics

6

Advanced Nmap Scripting Engine

7

Fuzzing with Boofuzz

8

Exploit Development: ROP Chains

9

Exploit Development: SEH Overwrites

10

Bypassing ASLR and DEP in Windows

11

Linux Kernel Exploitation

12

Advanced SQL Injection: Error-Based

13

Advanced SQL Injection: Blind Time-Based

14

NoSQL Injection Vectors

15

Server-Side Template Injection (SSTI)

16

XML External Entities (XXE) Advanced OOB

17

Insecure Deserialization in Java

18

Insecure Deserialization in .NET

19

Attacking OAuth 2.0 Implementations

20

Attacking SAML Single Sign-On

21

Advanced CSRF Bypasses

22

SSRF to Cloud Metadata Exfiltration

23

WebSocket Vulnerabilities

24

GraphQL Introspection and Exploitation

25

API Pentesting: Mass Assignment

26

API Pentesting: BOLA (IDOR)

27

Android APK Reverse Engineering

28

iOS App Decryption and Hooking

29

Frida for Mobile Dynamic Instrumentation

30

Wireless: Cracking Enterprise WPA2

31

Wireless: EAP-TLS Downgrade Attacks

32

SDR (Software Defined Radio) Hacking

33

Hardware Hacking: UART and JTAG

34

Firmware Extraction and Analysis

35

Cloud Security: AWS IAM Privilege Escalation

36

Cloud Security: Azure Entra ID Attacks

37

Docker Container Escapes

38

Kubernetes RBAC Exploitation

39

Active Directory: BloodHound Analysis

40

Active Directory: AS-REP Roasting

41

Active Directory: Silver Tickets

42

Active Directory: Delegation Attacks

43

Windows Privilege Escalation: Unquoted Service Paths

44

Windows Privilege Escalation: DLL Hijacking

45

Linux Privilege Escalation: Wildcard Injection

46

Linux Privilege Escalation: Capabilities

47

Writing Custom Shellcode (x86)

48

Writing Custom Shellcode (x64)

49

Antivirus Evasion: Shellcode Obfuscation

50

Antivirus Evasion: In-Memory Execution

51

Creating Custom Metasploit Modules

52

Python for Offensive Security

53

Golang for Malware Development

54

Advanced Phishing: Evilginx2

55

Bypassing Multi-Factor Authentication (MFA)