Penetration Testing and Offensive Security

A map of the labo-pentest GitHub repository: ten Docker projects and two platform guides. Clone it today, then come back to it with every chapter.

Overview of the offensive security course: 15 penetration testing steps, an isolated Docker lab, hands-on labs, and the legal framework.

Build an isolated pentest lab in under an hour: Kali Linux as the attacker machine and vulnerable targets launched with Docker.

Cinq exploits guidés qui marchent en une ligne sur le laboratoire : injection SQL, injection de commande, XSS stocké, contournement d'authentification et cassage de mot de passe. Effet garanti.

Compare HackTheBox Academy and TryHackMe for legal hands-on practice: VPN access, the CPTS path, and concrete benchmarks to help you choose a platform.

Discover the pentester profession, black, grey, and white box tests, and red and blue teams, then get hands-on with Kali Linux and the Linux shell.

Structure a penetration testing engagement: pentest phases, scope definition, written authorizations, and drafting the rules of engagement.

Map an organization's attack surface without ever touching it: Google dorking, DNS, WHOIS, data leaks, and OSINT tools.

Scan ports and services with Nmap: version detection, OS fingerprinting, share enumeration, and how to read the results correctly.

Turn discovered services into exploitable flaws: CVE and NVD databases, CVSS scores, automated scanners, and risk prioritization.

Comprenez les leviers psychologiques du phishing, menez une campagne simulée en labo isolé, puis apprenez à détecter et bloquer ces attaques.

Exploitez les failles du OWASP Top 10 : injection SQL, XSS, inclusion de fichiers, upload malveillant, injection de commandes et leur remédiation.

Review the first seven steps and gauge your level: a revision quiz, a timed hands-on challenge against a lab target, and a self-assessment grid.

Industrialisez l'exploitation avec Metasploit : modules, payloads, shells directs et inverses, Meterpreter et scripts d'automatisation en Bash.

Passez d'un accès limité à root ou SYSTEM : cassage de mots de passe avec John et Hashcat, extraction d'identifiants avec Mimikatz, binaires SUID, règles sudo et services Windows faibles.

Rebondissez dans un réseau compromis : pivoting, tunnels SSH, transferts de fichiers, attaques Active Directory et exfiltration discrète de données.

Adaptez vos tests aux surfaces modernes : buckets de stockage exposés, identités cloud mal configurées, applications mobiles et objets connectés.

Write a professional pentest report: expected structure, evidence, impact rating, and prioritized recommendations for the client.

Read and understand offensive scripts before running them: Bash and Python code analysis, spotting booby-trapped code, and best practices.

Run an end-to-end engagement as a mini-CTF, from reconnaissance to report delivery, and measure how far you've come since the first step.

Assignment and grading rubric for the first graded lab: produce a complete reconnaissance dossier on an authorized target, with no exploitation whatsoever.

Énoncé et grille du deuxième travail noté : construire une chaîne d'exploitation web jusqu'à un accès initial, puis documenter la remédiation.

Assignment and grading rubric for the final graded project: produce the engagement report that consolidates reconnaissance, exploitation, and client recommendations.

Charter to sign before any access to targets: authorized scope, prohibited actions, data handling, and penalties for violations.

Run a classroom capture the flag: CTF types, flag format, scoring scale, Docker infrastructure, and a complete session plan.

Mapping of the 28 modules in the HTB Academy Penetration Tester path to the course's 15 weeks, with a direct link for each module.