Afriness/Advanced-Penetration-testing

A Step by Step Penetration Testing Sheet for Cyber Security Experts

Author: Karim Jaber
Project: Penetration Testing Comprehensive Sheet (MITRE ATT&CK FRAMEWORK)
Audience: Ethical Hackers, Cyber Security Experts and Researchers

Advanced Penetration Testing

Table of Content

• 1. Network Penetration Testing
• 1.1. Reconnaissance
• 1.2. Initial Access
• 1.3. Execution
• 1.4. Persistence
• 1.5. Defense Evasion
• 1.6. Credential Access
• 1.7. Collection
• 1.8. Command and Control
• 1.9. Exfiltration

---

1. Network Penetration Testing

As you might be performing both Internal and External Penetration Testings, you want to start by getting the Attack platform ready.
Below are the different tools and options to complete an advanced Attack Platform:

Attack Platform 1 (Recommended):

• Tools: Raspberry Pi 4 B 8GB; 100+GB Fast SD Card; Ethernet Cable; Mouse; Keyboard; and, a Monitor. If Wireless is included in the Penetration Testing: you should consider an Alfa Dual Band AC-1200 Dongle. (However, the Raspberry Pi 4 B has an integrated Wireless that can be used on a short range.)
  
• OS You Will Use: Kali Linux for Raspberry Pi. In the RaspberryPi Foundation Section of the download page, download Kali Linux RaspberryPi 2 (vX.X - Latest Version), 3, 4 and 400 (64-Bit) (img.xz).
  
• Software You Will Use: Balena Etcher to flash your SD Card in a very effective and viable way.
  

1.1. Reconnaissance