Ethical Hacking and Penetration Testing

What this unit covers

The page follows a penetration test from start to finish. Reconnaissance comes first, then scanning and enumeration, then attacking systems and web applications, and finally reporting and methodology. Over 200 resources sit here, made by GoConqr users rather than by GoConqr itself.

Where to start

Begin with the mind maps for the big picture. Pentest - 5 stages and Ethical Hacking Fundamentals give you the shape of the work. Then look at the methodology maps: OSSTMM, ISSAF and ISSAF assessment layers. The ISSAF layers map splits information gathering into active and passive methods, and covers network mapping steps such as finding live hosts.

Notes for hands-on topics

Several notes follow a numbered, chapter-style layout. They include Linux Buffer Overflow Exploitation, Working with Exploits, File Transfers, Privilege Escalation and Client-Side Attacks. The buffer overflow notes move from setting up the environment through crashing Crossfire to controlling EIP. The privilege escalation notes give Linux and Windows examples, then configuration issues. There are also notes on The Metasploit Framework and Bypassing Anti-Virus Software.

Quizzes and flashcards

Quizzes make up most of the page. Many follow CEH v9 study guides and practice tests, split into sets of ten or so questions. The quiz CEHv9 Chapter 2 asks which tool suits footprinting restricted URLs and OS information, and the answer is Netcraft. Other sets cover scanning and enumeration, web-based hacking, trojans, social engineering and the full pen test. Flashcard decks such as OSCP, CEH and Module 2: Recon suit quick recall.

Using maps and quizzes together

1. Read a mind map on one stage, such as Reconnaissance.
2. Take a short quiz on the same stage.
3. Note what you missed and check the matching notes.
4. Return to the flashcards a few days later.

This unit sits in the Offensive Security strand of Cybersecurity. Choose one stage today and try its quiz.