Network Penetration Testing

Module 1: Network Pentesting Methodology

• Network penetration testing scope and rules of engagement
• PTES and NIST SP 800-115 methodology
• External vs. internal network testing
• Network pentest deliverables and report structure
• Legal and ethical considerations

Module 2: Network Discovery and Enumeration

• Host discovery: Nmap, Masscan, Angry IP Scanner
• Port scanning techniques and evasion
• Service enumeration: Netcat, Nmap NSE scripts
• SNMP enumeration: SNMPwalk, snmp-check
• SMTP, DNS, NFS enumeration

Module 3: Vulnerability Scanning

• Nessus Professional for network scanning
• OpenVAS configuration and tuning
• Qualys VMDR overview
• Vulnerability prioritisation with CVSS
• Authenticated vs. unauthenticated scanning

Module 4: Network Service Exploitation

• Exploiting SMB: EternalBlue (MS17-010), MS08-067
• Exploiting RDP vulnerabilities
• FTP, Telnet, and SSH exploitation
• Database services: MySQL, MSSQL, Oracle exploitation
• VNC and RDP brute force attacks

Module 5: Credential Attacks

• Password spraying across network services
• Credential stuffing with previously leaked credentials
• Hydra and Medusa for network service brute forcing
• NTLM relay attacks: Responder, ntlmrelayx
• LLMNR/NBT-NS poisoning

Module 6: Man-in-the-Middle Attacks

• ARP poisoning with Arpspoof and Ettercap
• SSL stripping attacks
• MITM with Bettercap
• Capturing and analysing credentials in transit
• MITM defences and detection

Module 7: Firewall and IDS Evasion

• Firewall rule analysis and bypass techniques
• Fragmentation and decoy scanning
• Protocol tunnelling: DNS, ICMP, HTTP tunnels
• IDS/IPS evasion with Nmap and custom payloads
• Traffic obfuscation techniques

Module 8: VPN and Remote Access Testing

• VPN technology testing: IPSec, SSL VPN
• Identifying VPN vulnerabilities
• Pulse Secure, Citrix, and Fortinet VPN testing
• Remote access credential attacks
• VPN hardening recommendations

Module 9: Network Device Testing

• Cisco router and switch security testing
• Default credentials and SNMP community strings
• Cisco IOS vulnerabilities and exploitation
• Juniper and Palo Alto device testing overview
• Network device hardening benchmarks (CIS)

Module 10: Wireless Network Testing

• Aircrack-ng suite mastery
• WPA2 PSK cracking: Handshake capture and offline cracking
• WPA2 Enterprise: PEAP downgrade attacks
• Evil twin and rogue AP setup
• Post-wireless exploitation

Module 11: Pivoting and Post-Exploitation

• Network pivoting: SSH tunnels, Metasploit route, sshuttle
• Proxychains for network pivoting
• Dual-homed host exploitation
• Internal network scanning through pivot
• Persistence on network devices

Module 12: Reporting and Capstone

• Network penetration test report writing
• Risk rating and remediation recommendations
• Full network pentest simulation in lab
• Certification preparation: OSCP, eJPT, CompTIA PenTest+
• Network pentester career roadmap

Experience in the Industry Learn from network penetration testers with active professional experience conducting internal and external network assessments for enterprises and government clients.

Backgrounds at the Top Our instructors hold OSCP, CEH, and eJPT certifications, with backgrounds in network security testing at IT security consultancies and large enterprises across India.

Clear & Effective Teaching Network attack techniques are demonstrated live in isolated lab environments with clear methodology, helping students build a structured approach to network assessments.

Hands-On Learning Focus Students perform real network scans, exploit services, conduct NTLM relay attacks, pivot through networks, and produce professional-grade pentest reports.

Up-to-Date Knowledge Instructors update course content with new network vulnerabilities, updated Nessus policies, Responder improvements, and the latest network device CVEs.