Network Penetration Testing Training in Kraków, Poland

This course provides an in-depth, hands-on understanding of network penetration testing (ethical hacking). Participants will learn methodologies, tools, and techniques to identify, exploit, and secure vulnerabilities in enterprise networks. Using industry frameworks such as PTES (Penetration Testing Execution Standard) and OWASP Testing Guide, the training covers reconnaissance, scanning, exploitation, post-exploitation, and reporting. The program emphasizes real-world attack simulations to prepare participants for red-team/blue-team operations.

Introduction & Reconnaissance

1. Introduction to Penetration Testing

   • Penetration Testing Execution Standard (PTES)

   • Rules of engagement & legal considerations

2. Reconnaissance & Information Gathering

   • Passive reconnaissance (WHOIS, DNS, OSINT, Shodan)

   • Active reconnaissance (Nmap, banner grabbing, SNMP enumeration)

3. Scanning & Enumeration

   • Port scanning & service detection

   • SMB, FTP, SMTP, SNMP, LDAP enumeration

   • Identifying live hosts and services

Vulnerability Assessment & Exploitation

1. Vulnerability Scanning

   • Nessus, OpenVAS, Nikto

   • Manual validation of vulnerabilities

2. Exploitation Techniques

   • Exploiting weak services (FTP, SMB, RDP, Telnet)

   • Password attacks (Hydra, Medusa, John the Ripper, Hashcat)

   • Web-based network exploitatio

Post-Exploitation & Privilege Escalation

1. Post-Exploitation Basics

   • Maintaining access

   • Covering tracks

2. Privilege Escalation Techniques

   • Windows privilege escalation (UAC bypass, misconfigurations)

   • Linux privilege escalation (SUID, kernel exploits)

3. Pivoting & Lateral Movement

   • Using compromised hosts to access internal networks

   • Port forwarding & tunneling techniques

Advanced Techniques & Evasion

1. Firewall, IDS, and IPS Evasion

   • Packet crafting with Scapy

   • Proxy chaining & tunneling

   • Using encrypted channels (SSH, stunnel, VPNs)

2. Wireless Network Penetration Testing (Optional)

   • Wi-Fi reconnaissance & cracking

   • WPA/WPA2 attacks with Aircrack-ng

   • Rogue AP and Evil Twin attacks

Reporting, Defense, and Final Project

1. Reporting & Documentation

   • Writing penetration testing reports

   • Mapping vulnerabilities to CVSS & MITRE ATT&CK

   • Providing remediation recommendations

2. Defensive Strategies

   • Hardening network services

   • Monitoring and incident response

Hands-on Exercises

Summary and Conclusion