Truephers Certified Penetration Tester Course Certification
60 Hours of Advanced Training’s Course Content
Each module contains subtopics in it, expand to see. The Time duration for this course is 1.5 months.
Students who want to enroll for TCPT must have basic knowledge equivalent to TCSP 1.0 course. Truephers offers 60 hours of comprehensive advanced-level Ethical Hacking, Penetration Testing Industrial training course at Chandigarh, Mohali. Truephers focuses more on practical than theoretical.TCPT 2.0 course is for those who thrive to learn and want to drive their career in CyberSecurity. There is no age limitation for the student who can join this course. You can be a teen, a school going, or a college pursuing student, an employee in a public or a private sector, a technology lover, or an enthusiast, who wants to be Cybersecurity and Penetration Testing Professional. We at Truephers impart, learning with the latest tools, and most of the time is given to the practicals at Truephers Chandigarh. In TCPT 2.0, we teach students the advanced concepts of Penetration Testing. The student will learn how to do real-world Penetration Testing. This course requires a high level of self-study and self-research.
Course Content
Kali Linux
- Introduction to Kali Linux
- Installing Kali Linux
- File Structure
- Installing and Configuring SSH, FTP, TFTP, Apache, Tomcat, Postgresql, Python, and other important services and daemons in Kali Linux
- Installing and Configuring Kali Pen testing Tools
- Bash/Shell Scripting
- Essential Tools – Netcat, Ncat, SOCAT, Wireshark, tcpdump
Google Hacking Database
- Using Google Dorks
- Finding files, pages for particular Website
- Finding Open Cameras
- Finding Routers
- Exploit-DB GHDB
- SHODAN (Search Engine for IoT)
System Hacking & Password Attacks
- Windows/ Linux password hashing
- Windows SAM Database
- Linux passwd/ shadow files
- Windows Password Cracking
- Linux Password Cracking
- Brute-forcing
- Rainbow tables
- Ophcrack
- Cain and Able
- bkhive, samdump2
- Password Hashing and Encryption
- Password profiling with CUPP
- Password generator tools
- Hydra
- Hashcat
- John The Ripper
- HTTP – FTP – Telnet – RDP – RAR – ZIP – MD5 – SHA – LM/ NTLM password hashes and cracking with different tools and techniques
Active Information Gathering/ Enumeration
- Active Information Gathering
- OS Fingerprinting
- Port Scanning
- Banner Grabbing.
- Different Port Scanning tools and types.
- Port Scanning with Nmap
- Nmap Scripting Engine
- Netcat/ Zenmap
- Domain Name WHOIS lookup
- Reverse hostname lookup
- SMB Enumeration
- SMTP Enumeration
- SNMP Enumeration
Vulnerability Assessment, Scanning
- Vulnerability Scanners
- Configuring and Installing Vulnerability Scanners
- Nessus
- Nexpose
- OpenVAS
- Web Vulnerability Scanners
- Acunetix Vulnerability Scanner
- Nikto
- Dirbuster
Passive Information Gathering/ Enumeration
- Passive Information Gathering
- Google Hacking Database
- Google Dorks
- Online Email Finder
- Online Active ports scanners
- Reverse hostname lookup
- Netcraft
- DNS Zones
- Zone transfer
- Wayback Machine
- Uptime Monitoring
- Online Domain tools
Wireless Hacking and Security
- Wireless USB adapters
- Monitor mode and Promiscuous mode
- WEP Encryption
- WEP Password Cracking
- WPA/ WPA2 Password Cracking
- WPS Cracking
- Configuring and Finding Hidden SSID’s
- Beating Black-list/ White-list MAC filtering
- Using other tools
Web Application Penetration Testing
- Configuring Vulnerable Web Application for Learning and Testing
- Burp-Suite
- OWASP ZAP
- Nikto
- Dirbuster Dirb
- SQLmap
- Cross-Site Scripting XSS
- SQL Injection
- RFI/ LFI
- Insecure Sensitive files (password, backup files)
- OS Command Injections
- Insecure File Uploads
- And their Mitigations
Client-Side Attacks
- Browser-based client-side attacks
- Java signed applet attacks
- SMB based client-side
- PDF, Excels, Word documents based client-side attacks
- Responder
Buffer Overflow Exploitation
- Fuzzing
- Debugger
- DEP ASLR
- Crashing
- Registers
- Controlling EIP
- Bad Characters
- Space for Shellcodes
- Finding Return address
- Generating a shellcode with msfvenom
- Getting Shell on the box
Metasploit Framework
- Installing or updating
- User Interfaces
- Exploring Auxiliary module
- Exploring Exploit module
- Metasploit Payload module
- Searchsploit Exploit-DB
- Staged vs. Non-staged payloads
- Meterpreter
Web Shells | MsfVenom | Malware frameworks
- Web Shells
- Uploading and Executing different types of web shells
- ASP, PHP, Java, Cold-fusion, Perl Web Shells
- Payload Generators
- MSFVenom
Port Redirection and Tunneling
- Port forwarding and redirections
- SSH tunneling
- Local port, Remote Port and Dynamic port forwarding
- HTTP Tunneling benefits
- Proxychains (Chaining multiple proxies)
- Metasploit port forwarding
- Plink
- Other proxy tools
Privilege Escalation
- Linux and Windows Privilege Escalation
- Vertical Privilege Escalation
- Horizontal Privilege Escalation
- Misconfigured File permissions
- Kernel Exploits
- Automated scripts to privilege escalation
System Hardening
- Securing Windows
- Windows Password profiling
- Updating and Patching Windows
- Files Permissions
- User Access Control
- Linux Server Hardening
- Securing sensitive and configuration files
- Updating and Patching system and services
- Configuring Secure CMS
Report Generation
- Sample Reports
- Report generation tools
- Maintaining Important links and texts in report generation
Miscellanies
- Making Bootable Pen-drive
- GNS3
- USB Password Sniffing APK
Why Truephers’ Training
Goodies Takeaway
Our Students’ Reviews
Frequently asked Questions
This course is not for everyone, this course requires a very high understanding of how computers work and their logic, a burning desire to be a hacker and to learn continuously. In Cyber Security, you should possess these things, a burning desire to be a hacker of all times, passions while learning and doing, reading habit, problem-solving rather than leaving, and always learning nature. If you possess these qualities then you are ready to go.
This course does require knowledge equivalent to our level 1 course of cybersecurity. In this course, you will learn all the advanced things that are required for actual penetration testing. In this course, you will learn the shell/bash scripting, advanced information gathering and scanning, vulnerability assessment, and its exploitation. We will learn web app penetration testing, network & WiFi penetration testing, and basic stack/buffer overflow.
The answer to this question is big no, just kidding. But many young aspirants enter into this field and they think, there are some techniques and tools that they should use to hack into any available machine on this planet, but this is wrong. Penetration Testing requires a very deep understanding, a lot of learning and research work with computers to reap the fruit of pawning systems and applications. The course we are providing is very much sufficient to provide you a job if only you dedicate yourself to it. We are guaranteed you to get a job in Cyber Security, but it all depends on your hard work, learning ability, and a burning desire.
The short answer is YES, you should require to learn at least one coding language like C, C++, or Python. It does not require to be an expert in coding, but at least an understanding of how to code basically is a must. There is a big reason behind it, that implements in all worldly work, it is if you don’t know how the thing works at the back then you don’t even know how to make, repair or HACK it. For example, if you know how to code basic PHP pages, then only you understand some web application bugs like RFI, LFI, PHP object injections, and SQL injections.
Post COVID-19 would be a Cyber Security era. Everyone during COVID-19 is making their business to run online, this must require them to make their businesses and clients make and feel safe online. There is a huge scope in Cyber Security as we can see that online hacking, online frauds, and online security awareness demands a lot of manpower. The more and new cyber risks are evolving daily, a lot of new attack vectors and malware or ransomware attacks are increasing daily. The more business went online, the more manpower it will require to comply with cyberattacks also 80% of cyber attacks happened on small and medium-sized businesses.
Your complete journey with us would be like this. Simply register online with us by filling the online Google form and submitting the required documents at info [AT] truephers.com email id and submit the INR 1000/- as a registration amount through our online payment page. We will contact you by email or telephonically to announce the batch starting date and timings. The classes can be online or offline at the student’s choice. The classes will be led by certified ethical hackers only. The classes can be from Monday to Friday of up to 2 hours or from Saturday & Sunday of up to 5 hours each day. You will be provided with a highly detailed and specially crafted book for your full course to make you more comfortable during learning. There would be an online quiz after completing each module. After completing the full course you will be asked for an online exam date. The online practical examination is the real way to find your ability to hack. You can email for further questions on the online practical exam at info [AT] truephers.com. After the completion of the online exam, you will be rewarded with the Truephers Certified Penetration Tester exam certificate. Our relation with the student does not end here, we will provide full job assistance through our online portal and our online social media pages. The learning penetration testing and cybersecurity would be great fun for you as the teaching is for us.
