Competências avaliadas

• Password cracking with John the Ripper
• Post-test cleanup procedures
• Nmap SYN scanning and analysis
• XSS vulnerability detection
• Social engineering testing
• Pentest documentation with Kali
• Attack prevention via encoding
• SELinux/AppArmor hardening
• Focused vulnerability scanning
• Post-exploitation techniques
• Penetration testing methodologies
• SQL injection attacks
• Reconnaissance and OSINT
• ARP spoofing
• Risk mitigation strategies
• Regulatory compliance
• ICS systems security
• Targeted phishing attacks
• Android SAST analysis
• NIST SP 800-115 methodology
• Web application testing
• ASP/MSSQL exploitation
• Exploit chaining
• Windows hash security
• Pivoting techniques
• Attack surface reduction
• E-commerce application attacks
• Switched network sniffing
• SSH service exploitation
• Token authentication bypass
• Credentialed/non-credentialed scanning
• Risk quantification
• Objective-based testing
• Lateral movement techniques
• Directory brute force attacks
• SMB enumeration
• Scan tool configuration
• Confidentiality agreements
• Vulnerability analysis tools
• Exploit string manipulation
• Test environment preparation
• Vulnerability validation
• Clickjacking attacks
• Legal documentation
• Malicious DNS response creation
• Wireless network attacks
• Passive reconnaissance techniques