Take an in-depth look at Python for penetration testers.

In this learning path, we will begin by covering the basics of Python programming. This includes variables, loops, conditionals, exception handling and more. Next, we will explore some of the common vulnerabilities that Python can exploit. Moving on from common exploits, we will dive into using Python for network penetration testing: Open Source Intelligence (OSINT), scanning networks, building a Windows domain controller with Active Directory and attacking it with various Python hacking tools. Finally, we will learn how to use Python to attack web applications.

Learn the essentials for becoming a web app pentester.

The first course in the learning path covers workstation setup, including installation and configuration of Burp Suite with the Firefox web browser. Certificate installation and proxy configurations are covered in order to allow newcomers to start pentesting immediately. The second course makes up the bulk of this learning path and focuses on the OWASP Top Ten vulnerabilities. Many real-world vulnerabilities are showcased for each of the ten topics and various demos are given on how to solve related challenges in both OWASP Juice Shop and Portswigger’s Web Security Academy. The third course covers a variety of pentesting tools and Burp extensions such as Turbo Intruder, Intruder File Payload Generator, SQLMap and many more. The fourth course closes out the learning path with pentesting advice, a path recap and a look at the final project.

Learn about threat modeling with Rapid Threat Model Prototyping (RTMP).

Threat modeling is a process to identify security weaknesses in software design and architecture. In this path, you will explore five courses, starting with a background and top-level view of threat modeling. The second course will describe three core security frameworks that can be used with threat modeling to find threats and mitigations. The third course covers the “moving parts,” or elements of a threat model and their relationship with each other. The fourth course covers the basics of threat modeling, the fifth course introduces secure agile architecture concepts, and the sixth is a lab bringing it all together.

Learn repeatable, documentable cyber threat hunting methodologies.

This learning path teaches you the necessary skills to becoming a successful threat hunter. As you progress through six courses, you’ll build core hunting skills such as intelligence gathering, investigation techniques and remediation methods. Upon completion, you’ll have the knowledge and skills to carry out cyber threat hunting activities with an organization that will ultimately deliver proactive defenses against possible debilitating data compromise.

Learn about reverse engineering malware, ethical hacking, and Web app pen testing.

This learning path gives you an overview of several advanced security concepts. As you progress through four courses, you’ll learn about assembly language, system-level reversing, penetration testing methodologies, working with Linux, common Web application threats, popular security frameworks and how they help manage risk, and more. Upon completion, you’ll have a general understanding of some of the key security concepts needed to take your career and skills to the next level.

Learn the skills required for conducting security tests of mobile and Web apps.

This learning path builds your penetration testing skills and prepares you to earn your Certified Mobile and Web App Penetration Tester (CMWAPT) certification. As you progress through nine courses tied to the CMWAPT exam domains, you’ll build your skills around using pentesting methodologies and tools to conduct tests on Web and mobile apps and assess their security. Upon completion, you’ll be prepared to earn your CMWAPT certification and validate your pentesting knowledge.

Learn advanced hacking tools and techniques.

This learning path builds on your ethical hacking knowledge and skills by teaching you how to write and create exploits. As you progress through six courses, you’ll learn advanced reconnaissance techniques and stealth strategies, manual and automated techniques for discovering vulnerabilities, how to write exploits, how to use Metasploit’s interchangeable payloads and remote commands, and more. Upon completion, you’ll have increased confidence in your penetration testing skills and the knowledge of exploit creation needed to take your cybersecurity career to the next level.