Penetration Testing Methodology & Reporting
Plan, scope and structure an authorised penetration test using recognised methodologies, map activity to MITRE ATT&CK, recognise privilege-escalation misconfigurations safely, and produce a professional report that gets findings fixed. Reporting quality is what turns a test into risk reduction for a government organisation.
- Level
- Intermediate
- Study time
- 8 hours
- Lessons
- 6
- Practice labs
- 4
- Assessments
- 2
- Format
- Self-paced, online
What you will learn
By the end of this course you will be able to:
- Compare PTES, NIST SP 800-115 and the OWASP Web Security Testing Guide and choose an appropriate methodology
- Check a test plan against a rules-of-engagement document and identify scope, technique and time-window violations
- Map engagement activity to MITRE ATT&CK tactics and techniques
- Recognise common Linux privilege-escalation misconfigurations from safe enumeration output and recommend fixes
- Review and correct a draft finding for severity, evidence, scope and remediation quality
- Explain retesting and responsible disclosure practice
Before you start
Course: Reconnaissance, OSINT & Vulnerability Assessment (or equivalent Nmap and scanning experience)
Tools you will use
Course outline
6 lessons in 2 modules.
Module 1: Planning and methodology
- Penetration testing methodologies
- Scoping and rules of engagement
- Attack phases and MITRE ATT&CK
Module 2: Findings and reporting
- Recognising privilege-escalation misconfigurations
- Writing findings and the final report
- Retesting and responsible disclosure
Practice labs and assessments
Labs run in the browser as simulations. They never touch a real system.
4 practice labs
- Rules-of-engagement check Beginner, 25 min
- Map the engagement to ATT&CK Intermediate, 30 min
- Safe privilege-escalation enumeration (simulated) Intermediate, 35 min
- Review the draft finding Advanced, 40 min, final lab
2 assessments
- Methodology and reporting: knowledge check
- Penetration testing methodology and reporting: final quiz
The pass mark is 70%. You can retake an assessment.
Take Penetration Testing Methodology & Reporting
Request access and your instructor will set up your account.