Offensive Ops - SEC560: Enterprise Pen Testing

Conduct professional penetration tests that find vulnerabilities before attackers do. This course delivers the skills required for enterprise penetration testing through hands-on labs attacking realistic targets.

Penetration testing remains the most effective way to evaluate security posture when done correctly. SEC560 teaches the methodology, tools, and techniques that separate amateur scanning from professional adversary simulation.

Master the complete penetration testing process:

Planning and Reconnaissance

• Scope engagements appropriately
• Gather intelligence through passive and active reconnaissance
• Map attack surfaces and identify high-value targets
• Document findings for maximum client impact

Exploitation and Post-Exploitation

• Exploit web applications, networks, and systems
• Escalate privileges on Windows and Linux
• Move laterally through enterprise networks
• Maintain access while avoiding detection

Reporting and Remediation Guidance

• Document vulnerabilities with clear reproduction steps
• Prioritize findings by actual business risk
• Recommend practical remediation strategies
• Present results to technical and executive audiences

30+ hands-on labs cover password attacks, Metasploit Framework, web application exploitation, Active Directory attacks, privilege escalation, pivoting, and persistence techniques.

Work in a realistic enterprise lab environment with Windows domains, Linux systems, web applications, and network infrastructure.

Earn GIAC GPEN certification (exam sold separately). 36 CPEs across 6 intensive days.