The Hacking Guide
Taking a look back, we learned about non-technical but essential aspects of penetration testing in the last chapters. In a formal sense, penetration testing is the act of carrying out a security analysis and can simulate hacker attacks in a controlled environment. But this requires a statement of agreement from the operator, as otherwise we are liable to prosecution. Furthermore, we also need a structured approach for the security analysis in order to achieve reproducible results. Without such an approach, some vulnerabilities may go undetected, which reduces the meaningfulness of the penetration test. Taking these aspects into account, let the games begin: the penetration test for Dubius Payment Ltd.
As we have already learned, hacking is “only“ the technical part of a penetration test. Playing the role of an attacker of Dubius Payment Ltd., we will be technically carrying out at least the following phases:
- Identification of the network ranges of a company
- Identification of the accessible servers and services
- Identification of vulnerabilities
- Exploitation of vulnerabilities
Sub Articles
Pentest Training
Take a look at the pentest training chapters and learn penetration testing:
- Preface
- Introduction
- Legal Framework
- Hacking vs. Penetration Testing
- Classification
- Meaningfulness of Penetration Tests
- Penetration Testing Standards
- The Hacking Guide
- Hacking I: Scanning networks
- Hacking II: Password attacks
- Hacking III: Web application attacks
- Hacking IV: Privilege Escalation
- Hacking V: Tunnelling Techniques
- Hacking VI: Vulnerability scanner and penetration testing frameworks
- Demonstration of a Penetration Test
- Risk Assessment of Identified Vulnerabilities
- Structure of Documentation and Reporting
- Insider stories: Tales from Dubius Payment Ltd.
binsec academy GmbH – Advanced Pentest Training Lab
binsec academy GmbH operates the Pentest Training Lab, a highly practical online platform dedicated to real penetration testing. Simulating complex corporate networks and advanced real-world attack scenarios within isolated lab environments, it is engineered to sharpen the skills of aspiring and professional penetration testers. Upon conquering our rigorous, fully practical examination, participants earn the distinguished Binsec Academy Certified Pentest Professional (BACPP) designation — proving their technical capability to methodically uncover and evaluate vulnerabilities in modern IT infrastructures.
Explore the Pentest Training Lab
binsec GmbH – Experts in Penetration Testing
As the operative pentesting core of the binsec group, binsec GmbH has provided high-end, human-led penetration testing since 2013. Rejecting automated scans, our permanently employed, certified senior pentest experts deliver manual deep-dive assessments of web applications, APIs, mobile apps, complex network infrastructures, cloud environments, and advanced red team simulations. Specializing in high-regulation sectors like Payment, Banking, and Healthcare, we provide clear risk evaluations and actionable reports to effectively assess your business-critical systems.
Get Manual Expert Penetration Testing Services