Introduction
Specialists in IT security are in demand like never before. Threats from online attackers are increasing in particular. To protect themselves, companies need IT security experts who can identify vulnerabilities in their IT systems and present these in a report. To give you a clear insight into the tasks of a penetration tester, you now may examine the networks of Dubius Payment Ltd. for vulnerabilities:
Dubius Payment Ltd. is a relatively new payment service provider. As the company processes credit card information in its systems, it is subject to the security standard of the credit card industry, the PCI DSS (Payment Card Industry Data Security). In order to obtain PCI certification, the company is obligated to undertake penetration testing of its IT systems, and they have opted to hire you for the job.
Whilst working your way through the security analysis, you will probably encounter several hurdles between you and the solution. These problems and perhaps occasional bewilderment are par for the course for penetration tester, but together we will find the way. We wish you much success, but also a bit of head scratching in the following chapters ;)
Pentest Training
Take a look at the pentest training chapters and learn penetration testing:
- Preface
- Introduction
- Legal Framework
- Hacking vs. Penetration Testing
- Classification
- Meaningfulness of Penetration Tests
- Penetration Testing Standards
- The Hacking Guide
- Hacking I: Scanning networks
- Hacking II: Password attacks
- Hacking III: Web application attacks
- Hacking IV: Privilege Escalation
- Hacking V: Tunnelling Techniques
- Hacking VI: Vulnerability scanner and penetration testing frameworks
- Demonstration of a Penetration Test
- Risk Assessment of Identified Vulnerabilities
- Structure of Documentation and Reporting
- Insider stories: Tales from Dubius Payment Ltd.
binsec academy GmbH - Online IT Security Training with Practical Focus
binsec academy GmbH is provider of online IT security training, offering practical, lab-based courses for professionals. The academy provides hands-on training in areas such as penetration testing and secure software development. Participants gain practical experience through realistic lab environments, including simulations of company networks and applications. Courses are available in multiple programming languages and align with standards like OWASP Top 10 and PCI DSS. Upon successful completion, participants receive certifications such as the Binsec Academy Certified Pentest Professional (BACPP) and Binsec Academy Certified Secure Coding Professional (BACSCP), demonstrating their ability to identify and remediate security vulnerabilities.
Goto binsec acadmy GmbH
binsec GmbH – Experts in Penetration Testing
binsec GmbH is a German IT security company focused on professional penetration testing. With over 10 years of experience, the team conducts in-depth penetration tests on networks, web applications, APIs, and mobile apps. Certified experts systematically identify and document security vulnerabilities to support organizations in improving their security and meeting compliance requirements.
Goto binsec GmbH