Turn what you know into an opportunity and reach millions around the world.

Your cart is empty.

CompTIA PenTest+ بالعربي

Your Way To succeed & Your Way To Pass The Exam

Created byAbdallah Elsokary

Last updated 10/2019

Arabic

What you'll learn

PenTest+ Complete Course
Practical Tests
Complete Practical Lab

Course content

14 sections • 230 lectures • 38h 31m total length

Introduction2:16

Intro3:07
What Is Penetration Testing4:16
Cybersecurity Goals5:54
Reasons for Penetration Testing6:14
Threat Hunting3:49
Regulatory Requirements for Penetration Testing4:42
CompTIA Penetration Testing Process2:38
Cyber Kill Chain15:33
Reconnaissance Tools9:27
Vulnerability Scanners&Social Engineering Tools4:17
Credential-Testing&Debuggers Tools10:25
Software Assurance&Network Testing8:30
Remote Access&Exploitation Tools8:57
Questions20:14

intro2:37
Footprinting and Enumeration4:15
MITRE9:54
Location and Organizational Data & Electronic Documents23:37
Financial Data & domains8:06
DNS and Traceroute Information & Zone Transfers8:11
IP Ranges & Security Search Engines9:04
Active Reconnaissance and Enumeration5:36
Nmap Port Scanning29:11
Network Topology & wireshark & zenmap12:03
email address gathering6:18
Defenses Against Active Reconnaissance&Preventing Passive Information Gathering5:35
Questions12:53

Intro4:51
Regulatory Environment6:46
PCIDSS5:04
FISMA10:27
Determining Scan Frequency9:46
Scanner Software&Scanner Maintenance&Scan Perspective6:28
Supplementing Network Scans&Vulnerability Plug-In Feeds4:48
SCAP3:24
Analyzing and Testing Code3:36
Fuzzing&Web Application Vulnerability Scanning6:45
Database Vulnerability Scanning2:18
Developing a Remediation Workflow&Testing and Implementing Fixes4:08
OpenVas Installation3:15
OpenVas Scanning13:37
Nessus10:12
web app vulnerability scanning47:35
Questions11:22

Intro5:21
CVSS & Access Vector & Access Complexity Metrics10:39
Confidentiality & Integrity & Availability Metrics3:19
Exploitability score, impact score, and impact function13:35
False Positives3:23
Informational Results & Reconciling Scan Results with Other Data Sources4:56
Trend Analysis & Server and Endpoint Vulnerabilities & Missing Patches7:13
Buffer Overflows & Privilege Escalation4:57
Arbitrary Code Execution & Hardware Flaws & Firmware Vulnerabilities6:17
Spectre and Meltdown4:27
Point-of-Sale System Vulnerabilities & Insecure Protocol Use5:59
Debug Modes&Network Vulnerabilities5:37
Missing Firmware Updates & SSL and TLS Issues & Outdated SSLTLS Versions10:17
Certificate Problems5:12
Domain Name System (DNS) & Internal IP Disclosure8:34
Virtualization Vulnerabilities26:08
Virtual Host Patching4:44
Internet of Things (IoT)7:47
Web Application Vulnerabilities3:56
Questions9:08

Intro3:42
Exploit Databases7:51
Developing Exploits & Proof-of-Concept Development & Exploit Chaining8:43
Metasploit & PowerSploit & RPC-DCOM & PsExec4:26
PS Remoting & WinRM & WMI & Scheduled Tasks and cron Jobs8:17
SMB & RDP & VNC & X-Server Forwarding11:56
SSH5:53
Common Post-Exploit Attacks3:15
Privilege Escalation9:27
Social Engineering6:08
Inetd Modification & Scheduled Jobs3:06
Daemons and Services & Back Doors & new users3:54
Pivoting & Covering Your Tracks4:57
Questions13:45

Intro3:26
Vlans Hopping9:39
ProxyChains15:15
MITM34:07
SMB Relay Attack19:46
ntlmrelayx19:51
Downgrade Attacks4:31
NAC Bypass4:44
DoS Attacks and Stress Testing28:43
NetBIOS Name Resolution Exploits & SMB Exploits21:25
SNMP Exploits3:26
FTP Exploits & SMTP Exploits7:26
Samba & SSH Exploits6:17
symfonos-1 CTF58:30
SOWSNIFF CTF35:34
Wireless Exploits10:46
wifite12:54
airmon & ariodump & aircrack7:40
Airgedoon27:19
Bluetooth Attacks3:42
RFID Cloning4:46
Questions10:06

Intro3:46
Entering Facilities5:32
Piggybacking and Tailgating5:39
Bypassing Locks and Entry Control Systems11:10
Bypassing Perimeter Defenses and Barriers6:43
Information Gathering3:02
Social Engineering_12:26
Social Engineering_28:27
In-Person Social Engineering & Elicitation4:07
Interrogation and Interviews& Impersonation5:55
Quid Pro Quo & Shoulder Surfing& USB Key Drops5:33
Bribery & Phishing Attacks5:14
Website-Based Attacks5:21
setoolkit29:17
BEEF13:37
Questions20:11

Intro6:05
Input Validation26:59
WAF12:56
SQL Injection1:10:22
Command Injection33:36
Password Authentication4:57
Session Attacks13:02
Unvalidated Redirects9:36
Kerberos Exploits6:22
Common Kerberos attacks4:21
Insecure Direct Object References6:03
Directory Traversal2:58
File Inclusion21:28
Cross-Site Scripting (XSS)19:21
Cross-Site Request Forgery (CSRF/XSRF)18:40
Clickjacking3:01
Source Code Comments13:49
Error Handling4:15
Hard-Coded Credentials3:58
Race Conditions5:15
Unprotected APIs&Unsigned Code6:32
SAST&DAST7:04
burpsuite27:07
owasp zap5:55
Fuzzing2:26
Debuggers & Mobile Tools4:14
Questions16:40

Requirements

english
pc

Description

الكورس شامل كل المنهج سواء عملي أو نظري بالاضافة إلي عدد كبير من الاسئلة تأهلك للامتحان

ينقسم المنهج إلي 12 فصل يتم شرح كل فصل علي حدي مع حل أسئلة خاصة به

في 6 أقسام الاولي يتكلم المنهج بشكل نظري بحت أما أخر 6 أقسام يتكلم المنهج عن الجزء العملي بشكل مكثف

وفي النهاية يتم مراجعة جميع الاسئلة في إمتحان منفرد مع مراجعة أهم وأجدد الاسئلة المقترحة أو المطروحة في التحديثات

Chapter 1 Penetration Testing

Chapter 2 Planning and Scoping Penetration Tests

Chapter 3 Information Gathering

Chapter 4 Vulnerability Scanning

Chapter 5 Analyzing Vulnerability Scans

Chapter 6 Exploit and Pivot

Chapter 7 Exploiting Network Vulnerabilities

Chapter 8 Exploiting Physical and Social Vulnerabilities

Chapter 9 Exploiting Application Vulnerabilities

Chapter 10 Exploiting Host Vulnerabilities

Chapter 11 Scripting for Penetration Testing

Chapter 12 Reporting and Communication

Who this course is for:

مبتدأ
متوسط
محترف