# Certified Penetration Testing Specialist (CPTS)

- [Introduction](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction.md)
- [Penetration Testing Process](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process.md): This module teaches the penetration testing process broken down into each stage and discussed in detail.
- [Penetration Testing Overview](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/penetration-testing-overview.md)
- [Laws & Regulations](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/laws-and-regulations.md)
- [Penetration Testing Process](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/penetration-testing-process.md)
- [Pre-Engagement](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/pre-engagement.md): Pre-engagement is the stage of preparation for the actual penetration test.
- [Information Gathering](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/information-gathering.md)
- [Vulnerability Assessment](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/vulnerability-assessment.md)
- [Exploitation](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/exploitation.md)
- [Post-Exploitation](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/post-exploitation.md)
- [Lateral Movement](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/lateral-movement.md)
- [Proof-of-Concept](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/proof-of-concept.md)
- [Post-Engagement](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/post-engagement.md)
- [Practice](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/practice.md)
- [Academy Module Layout](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/penetration-testing-process/academy-module-layout.md)
- [Getting Started with Hack The Box (HTB)](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/introduction/getting-started-with-hack-the-box-htb.md)
- [Reconnaissance, Enumeration & Attack Planning](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning.md)
- [Network Enumeration with Nmap](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/network-enumeration-with-nmap.md): This module covers fundamentals that will be needed to use the Nmap tool for performing effective network enumeration.
- [Enumeration & Introduction to Nmap](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/network-enumeration-with-nmap/enumeration-and-introduction-to-nmap.md)
- [Host Discovery](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/network-enumeration-with-nmap/host-discovery.md)
- [Host and Port Scanning](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/network-enumeration-with-nmap/host-and-port-scanning.md)
- [Saving The Results](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/network-enumeration-with-nmap/saving-the-results.md)
- [Service Enumeration](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/network-enumeration-with-nmap/service-enumeration.md)
- [Nmap Scripting Engine](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/network-enumeration-with-nmap/nmap-scripting-engine.md)
- [Scanning Performance](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/network-enumeration-with-nmap/scanning-performance.md)
- [Firewall and IDS/IPS Evasion](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/network-enumeration-with-nmap/firewall-and-ids-ips-evasion.md)
- [Footprinting](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/footprinting.md): This module covers techniques for footprinting the most commonly used services in almost all enterprise and business IT infrastructures.
- [Information Gathering - Web Edition](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/information-gathering-web-edition.md): This module covers techniques for identifying and analyzing an organization's web application-based attack surface and tech stack.
- [Introduction](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/information-gathering-web-edition/introduction.md)
- [Passive Information Gathering](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/information-gathering-web-edition/passive-information-gathering.md)
- [Active Information Gathering](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/information-gathering-web-edition/active-information-gathering.md)
- [Vulnerability Assessment](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/vulnerability-assessment.md): This module introduces the concept of Vulnerability Assessments.
- [File Transfers](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/file-transfers.md): This module covers file transfer techniques leveraging tools commonly available across all versions of Windows and Linux systems.
- [Shells & Payloads](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/shells-and-payloads.md): This module utilizes a fictitious scenario where the learner will place themselves in the perspective of a sysadmin trying out for a position on CAT5 Security's network penetration testing team.
- [Using the Metasploit Framework](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reconnaissance-enumeration-and-attack-planning/using-the-metasploit-framework.md): The Metasploit Framework is an open-source set of tools used for network enumeration, attacks, testing security vulnerabilities, evading detection, performing privilege escalation attacks, and perform
- [Exploitation & Lateral Movement](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/exploitation-and-lateral-movement.md)
- [Password Attacks](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/exploitation-and-lateral-movement/password-attacks.md): Passwords are still the primary method of authentication in corporate networks
- [Attacking Common Services](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/exploitation-and-lateral-movement/attacking-common-services.md): This module will cover how to enumerate each service and test it against known vulnerabilities and exploits with a standard set of tools.
- [Pivoting, Tunneling, and Port Forwarding](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/exploitation-and-lateral-movement/pivoting-tunneling-and-port-forwarding.md): Once a foothold is gained during an assessment, it may be in scope to move laterally and vertically within a target network.
- [Active Directory Enumeration & Attacks](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/exploitation-and-lateral-movement/active-directory-enumeration-and-attacks.md): Active Directory (AD) is the leading enterprise domain management suite, providing identity and access management, centralized domain administration, authentication, and much more.
- [Web Exploitation](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/web-exploitation.md)
- [Using Web Proxies](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/web-exploitation/using-web-proxies.md): This module will teach you two of the best frameworks: Burp Suite and OWASP ZAP.
- [Attacking Web Applications with Ffuf](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/web-exploitation/attacking-web-applications-with-ffuf.md): This module covers the fundamental enumeration skills of web fuzzing and directory brute forcing using the Ffuf tool.
- [Login Brute Forcing](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/web-exploitation/login-brute-forcing.md): Learn how to brute force logins for various types of services and create custom wordlists based on your target.
- [SQL Injection Fundamentals](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/web-exploitation/sql-injection-fundamentals.md): Databases are an important part of web application infrastructure and SQL (Structured Query Language) to store, retrieve, and manipulate information stored in them.
- [SQLMap Essentials](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/web-exploitation/sqlmap-essentials.md): The SQLMap Essentials module will teach you the basics of using SQLMap to discover various types of SQL Injection vulnerabilities, all the way to the advanced enumeration of databases to retrieve all
- [Cross-Site Scripting (XSS)](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/web-exploitation/cross-site-scripting-xss.md): This module will teach you how to identify XSS vulnerabilities and exploit them.
- [File Inclusion](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/web-exploitation/file-inclusion.md): File Inclusion is a common web application vulnerability, which can be easily overlooked as part of a web application's functionality.
- [File Upload Attacks](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/web-exploitation/file-upload-attacks.md): Arbitrary file uploads are among the most critical web vulnerabilities.
- [Command Injections](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/web-exploitation/command-injections.md): Arbitrary file uploads are among the most critical web vulnerabilities.
- [Web Attacks](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/web-exploitation/web-attacks.md): This module covers three common web vulnerabilities, HTTP Verb Tampering, IDOR, and XXE, each of which can have a significant impact on a company's systems.
- [Attacking Common Applications](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/web-exploitation/attacking-common-applications.md): It is important as an assessor to have a firm grasp of enumerating and attacking the common applications discussed in this module.
- [Post-Exploitation](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/post-exploitation.md)
- [Linux Privilege Escalation](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/post-exploitation/linux-privilege-escalation.md): This module aims to cover the most common methods emphasizing real-world misconfigurations and flaws that we may encounter in a client environment.
- [Windows Privilege Escalation](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/post-exploitation/windows-privilege-escalation.md): This module aims to cover the most common methods emphasizing real-world misconfigurations and flaws that we may encounter in a client environment.
- [Reporting & Capstone](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reporting-and-capstone.md)
- [Documentation & Reporting](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reporting-and-capstone/documentation-and-reporting.md): Proper documentation is paramount during any engagement. The end goal of a technical assessment is the report deliverable which will often be presented to a broad audience.
- [Attacking Enterprise Networks](/hackerkayra/archive-backup-bin/certified-penetration-testing-specialist-cpts/reporting-and-capstone/attacking-enterprise-networks.md): This module will guide students through a simulated penetration testing engagement, from start to finish, with an emphasis on hands-on testing steps that are directly applicable to real-world engageme
