Vulnerability Assessment Penetration Testing (VAPT)

Module 1 – VAPT Fundamentals & Methodologies 3 lessons - 3h 33m

1. Understanding Vulnerability Assessment vs Penetration Testing 1h 5m
2. 1.2 & 1.3 VAPT Engagement Lifecycle Overview & Scope Definition and Rules of Engagement 1h 10m
3. 1.4 Core Standards Used in VAPT (OWASP, PTES, NIST) 1h 18m

Module 2 - Understanding and working on Kali Linux 7 lessons - 8h 11m

1. Introduction to Kali Linux 59m
2. Essential Linux Commands for Pen testing 1h 1m
3. 2.3 – User & Permission Management for VAPT 1h 21m
4. 2.4 – Package & Tool Management in Kali 1h 6m
5. 1 – Bash Scripting for VAPT Workflows(Part-1) 1h 13m
6. 2.5.2 – Bash Scripting for VAPT Workflows(Part-2) 1h 11m
7. 2.6 & 2.7 – Networking & Services in Kali & Working with Logs 1h 20m

Python and Automation in Kali 7 lessons - 7h 15m

1. Python Essentials for Pen testers 1h 6m
2. Python Networking Foundations 1h
3. Working with Files & OS 57m
4. Python for Automation in VAPT (Windows + Kali Workflow)(Part-1) 55m
5. Python for Automation in VAPT (Windows + Kali Workflow)(Part-2) 1h 5m
6. 3.5 Introduction to Exploit Development Concepts 1h 31m
7. 3.6 Building Small Pentesting Utilities 41m

Information Gathering & Enumeration 7 lessons - 6h 19m

1. Network Discovery & Asset Identification 42m
2. Service and Port Enumeration 47m
3. 4.2.2 Network Services and Port Enumeration 55m
4. 4.3 DNS, Subdomain & Infrastructure Enumeration 48m
5. 4.4 Banner Grabbing and Service Fingerprinting.docx - Google Docs 1h 2m
6. 4.5 Identifying Technology Stack & Software Versions 1h 3m
7. 4.6 Building an Attack Surface Overview 1h 2m

Module 5 – Vulnerability Assessment Techniques 6 lessons - 6h 24m

1. 5.1 Using Automated Scanners for Initial Assessment 54m
2. 5.2 Identifying Misconfigurations & Weak Services 1h 3m
3. 5.3 Version-Based Vulnerability Detection 1h 7m
4. Manual Verification of Scanner Output 54m
5. Validating Findings and Removing False Positives 1h 9m
6. Prioritizing Vulnerabilities Based on Impact 1h 17m

Module 6 – Network Penetration Testing 4 lessons - 4h 20m

1. Identifying Weak Network Services 1h 1m
2. Password Attacks on Common Services (SSH, FTP, SMB) 1h 1m
3. 6.2 & 6.3 Basic Exploitation of Network-Level Vulnerabilities 1h 18m
4. 6.4, 6.5 & 6.6 Intro to Metasploit for Network Exploits 1h

Module 7 – Web Application VAPT (Level 1) 4 lessons - 4h 11m

1. Mapping Web Application Structure 1h 4m
2. Input-Based Vulnerabilities (XSS, SQL Injection, Command Injection) 59m
3. 7.3 & 7.4 File Upload Issues & Directory Traversal and Authentication & Session Weakness Basics 1h 7m
4. 7.5 & 7.6 Testing for Broken Access Controls & Using Burp Suite for Manual Testing (Core Features) 1h 1m

Module 8 – Web Application VAPT (Level 2) 6 lessons - 1m

1. Directory Enumeration & Hidden File Discovery 1m
2. Testing for Sensitive Data Exposure 1m
3. CSRF & Logic-Based Vulnerabilities 1m
4. API Testing Basics (Endpoints & Common Weaknesses) 1m
5. Weak Configurations & Default Settings in Web Stacks 1m
6. Simple Manual Exploitation for Confirmed Vulnerabilities 1m