Domain

Description

Information Gathering & Reconnaissance 

Focuses on techniques for discovering and enumerating target systems, services, and potential vulnerabilities through port scanning, service enumeration, and information gathering.

Initial Access

Assesses the candidate’s ability to gain initial access to target systems through techniques like username enumeration, password spraying, brute-force attacks, and exploiting vulnerabilities in web applications and services.

Web Application Penetration Testing

Evaluates the candidate’s skills in identifying and exploiting common web application vulnerabilities such as SQL injection, cross-site scripting (XSS), command injection, and outdated software components.

Exploitation & Post-Exploitation

Tests the candidate’s ability to identify and exploit vulnerabilities or misconfigurations in services, perform privilege escalation, dump and crack password hashes, and locate locally stored unsecured credentials.

Exploit Development

Assesses the candidate’s skills in developing or modifying exploit code for initial access and post-exploitation, with a focus on identifying and exploiting memory corruption vulnerabilities like stack and buffer overflows.

Active Directory Penetration Testing

Evaluates the candidate’s proficiency in performing Active Directory enumeration, identifying weak or empty passwords, performing AS-REP roasting to steal Kerberos tickets, conducting lateral movement techniques like pass-the-hash and pass-the-ticket, and ultimately obtaining domain admin privileges.