Take Your Hacking Skills to the Next Level

Penetration Testing Training (Live-Online)
Part-time for 5 Weeks

Register Now

Practical Penetration Testing TRACK

This training is 5-weeks of immersive and hands-on training, delivered remotely through live instruction, recorded lectures and lab tutorials. Students will gain the knowledge to deliver a full penetration test at the network and application layer, from scoping, threat modeling and discovery to vulnerability scanning, exploitation and reporting. Each lab is created based off real world situations encountered by Evolve Security pen-testers. There are no capture the flag exercises, made up scenarios or silly puzzles.

Info Session + DEMO

5-Weeks

June 24th - July 25th

Part-Time

M, T, W, TH (7-9pm CST)

CPEs

50 hours

Tuition

$3,200

Level

Intermediate

Live Online

Lab Heavy

Ryan Le

Full Stack Software Developer

"This course took my hacking skills to the next level.  I feel more confident as a software developer. I can build more secure apps now that I really know how to break into them."

Additional Information

Overview

This training is 5-weeks of immersive and hands-on training, delivered remotely through live instruction, recorded lectures and lab tutorials. Students will gain the knowledge to deliver a full penetration test at the network and application layer, from scoping, threat modeling and discovery to vulnerability scanning, exploitation and reporting. Each lab is created based off real world situations encountered by Evolve Security penetration testers. There are no capture the flag exercises, made up scenarios or silly puzzles.

This training is designed for anyone who wants to become a penetration tester or who is interested on how hacker breaches an organization. The training will be challenging but rewarding. The only difference between a junior pen tester and a senior pen tester is experience. Sign up for this training to get a truly unique experience.

Time Commitment: 2 hours a week watching pre-recorded lectures. 8 hours a week attending live online sessions. 5-10 hours a week spent outside of class researching and digging deeper into the lab environments.

Topics Covered

  • Approaches to Penetration Testing & Legality
  • Scoping & Rules of Engagement
  • Threat Modeling
  • The Methodology
  • Information Gathering / Discovery
  • Vulnerability Scanning, Analysis and Its Limitations
  • Phishing & Social Engineering
  • Web Application and API Testing / Exploitation
  • Windows and Linux Environment Testing / Exploitation
  • Password Cracking / Brute Force
  • Evasion Techniques
  • Post Exploitation, Pivoting and Persistence
  • Reporting and Remediation

Tools Covered

  • Nessus Vulnerability Scanner
  • Burp Suite
  • Nmap
  • Metasploit
  • Wireshark / tcpdump
  • Netcat
  • Powershell
  • Hydra
  • Nikto
  • Mimikatz
  • Kali Linux

Prerequisites

This training is designed for anyone who wants to become a penetration tester or understand how a hacker breaches an environment. This training is designed to be challenging, no matter what your technical background is. If you do not have a technical background, then you will just have to spend more time outside of class performing open source research. If you are more technically advanced, then you will benefit from exposure to practical lab environments that have actually been seen by our security consultants on the job. The difference between a junior penetration tester and senior penetration tester is experience and quality of findings and reporting.

A basic knowledge of TCP/IP and Linux command line is highly recommended. Programming knowledge is not required for the course.

Recommended resources to getting started:

- Network+ Study Guide by Mike Myers

- Red Team Field Manual

- Evolve Security Academy Prep Exercises

Pre-qualified for course if you have completed the Evolve Security Academy bootcamp, a bachelor’s or master’s degree in information security, or have any of the following certifications: CompTIA Security+, CompTIA CSA+, Certified Ethical Hacker (CEH), or an equivalent written security or penetration testing certification. This course is also suited for individuals with a networking or computer science background.

Frequently Asked Questions (FAQs)

When does the next Penetration Testing Advanced Track training take place?

The upcoming training options are: 

  • Pentesting /03: June 24 - July 25 (5-weeks), Monday-Thursday from 7 pm - 9 pm CST
  • Pentesting /04: October 7 - November 7 (5 weeks), Monday-Thursday from 7 pm - 9 pm CST

Who is the instructor?

Meet, Jim Holcomb! Jim is a Senior Security Consultant at Evolve Security. Prior to Evolve, Jim was a web developer and passionate about integrating security into the development life cycle in order to identify potential threats at the application level prior to deployment. As a member of the Evolve Security Team, he has been utilizing his extensive background in Web Technologies and programming to mitigate application vulnerabilities for clients as well as continuing to develop Evolve's internal suite of security tools.

This training is a big investment of time and money, how is this training different from others out there?

The true value of this training comes from your exposure to a seasoned penetration testing professional, as well as access to relevant and practical lab environments.

The biggest problem with current penetration testing training is it teaches people how to be hackers, not penetration testing consultants. Since it is illegal to hack into live environments without permission, most trainings result to capture the flag exercises or silly puzzles in made up scenarios. To be an effective penetration tester, it is important to understand what an actual penetration tester does. Each lab in this course is created based off real world situations encountered by Evolve Security penetration testers. Students will gain the knowledge to deliver a full penetration test at the network and application layer, from scoping, threat modeling and discovery to vulnerability scanning, exploitation and reporting.

It is important to understand that an affective penetration tester is a consultant and serves the client and company that has engaged them. It is very important to understand the difference between a penetration tester and a criminal hacker. A criminal hacker is motivated to not get caught and to exploit vulnerabilities obtain information that can be monetized. In contrast, a company knows when a penetration tester will be “poking around”, and it is imperative that a penetration tester follow the agreed upon rules of engagement (RoE) and be mindful of the company operations. A penetration tester must understand the company’s operations enough to test and find vulnerabilities, without disrupting the operations of a company. A key piece to this consulting engagement is to report and document your findings, so the company can remediate appropriately. You must document all the steps leading up to how a vulnerability can be exploited, sometimes, without actually exploiting.

When I complete the course, what do I get?

You will have the knowledge and skills to perform a penetration testing assessment on an organization and report the findings / vulnerabilities. You will be exposed to numerous types of practical vulnerable systems that are readily seen in the industry and will have the understanding of how to identify, exploit and remediate them.

Each week, you will work through various labs that will give you the concrete, hands-on work experience. Upon successful completion of the course material and final lab assessment report, you will be presented with a Certificate of Completion and 50 CPE credits.

Is my background a right fit for this course?

This training is designed for anyone who wants to become a penetration tester or understand how a hacker breaches an environment. If you are a developer or QA tester, best way to learn how to build secure applications is understanding how to break into them.

This training is designed to be challenging, no matter what your technical background is. If you do not have a technical background, then you will just have to spend more time outside of class performing open source research. If you are more technically advanced, then you will benefit from exposure to practical lab environments that have actually been seen by our security consultants on the job. The difference between a junior penetration tester and senior penetration tester is experience and quality of findings and reporting.

What type of skills and technical experience do I need to be successful in in this course?

A basic knowledge of TCP/IP and Linux command line is highly recommended. Programming knowledge is not required for the course.

This training is designed to be challenging, no matter what your technical background is. If you do not have a technical background, then you will just have to spend more time outside of class performing open source research. If you are more technically advanced, then you will benefit from exposure to practical lab environments that have actually been seen by our security consultants on the job.

I’m eager to get started, what can I do before the course to be prepared?

Recommended resources to getting started:

You should be good to go for this course if you have completed the Evolve Security Academy bootcamp, have a bachelor’s or master’s degree in information security, or have any of the following certifications: CompTIA Security+, CompTIA CSA+, Certified Ethical Hacker (CEH), or an equivalent written security or penetration testing certification. This course is also suited for individuals with a networking or computer science background.

Enrollment Process: I’m excited and ready to secure my spot in the next course! What’s next?

Our number one goal is to ensure that expectations are aligned, and students have a clear understanding of course requirements. Watch our informational webinar and read through the details of the course. Be sure to reach out if you have any questions. If you agree to all the requirements then you can register here and we’ll follow up via email with payment instructions.

Once you register and payment is received, then your spot is reserved and we will follow-up with access to course materials 1-2 weeks before the course start date.

The training is live-online, eh? Tell me what this means and what my experience will be like.

Pre-recorded videos: Students watch pre-recorded videos leading up to each week and the videos serve as a way to communicate important information that will make for a more engaging and productive live-online experience with the instructor and classmates.

Live-online: The live-sessions take place Monday-Thursday from 7-9 pm CST and during this time the instructor will help students digest the information, tie it to real-life scenarios and apply it to hands-on labs. The live-sessions are conducted through video conference and all participants are encouraged to show their webcam and engage with their instructor and peers.

Hands-on learning: Hands on learning is one of the most important aspects of learning a new concepts. Our trainings are heavily focused on labs, so students can apply the information they learned. Labs are done in group break-out sessions and individually.

Class communication: Outside of class-time, students and the instructors/teaching assistants will communicate via Slack and email.

What is the time commitment?

The courses are 5 weeks, and the live-online sessions take place Monday-Thursday from 7-9 pm CT.

Students can expect spending approximately 20 hours a week on the course. This consists of 2 hours a week watching pre-recorded lectures. 8 hours a week attending live online sessions. ~10 hours a week spent outside of class researching and digging deeper into the lab environments.

I’m located in another country; can I still participate?

Of course! Just make sure that the class time (7 pm – 9 pm CT) works for your schedule.

What hardware and software do I need?

A PC or Mac laptop with Virtual Machine software installed (VirtualBox or VMWare). Laptop with at least 8GB of Memory is required and Solid State Drive (SSD) is highly recommended.

How much do Advanced Track courses cost?

The cost of the Advanced Track courses are $3,200.

How can I pay for the course?

Students have the options of paying by check, credit card or ACH and will receive payment instructions 24 -48 hours after submitting their registration information online.

Can I use Advanced Tracks as Continuing Professional Education (CPE) through my employer or certifications?

Absolutely! This is an excellent way to put keep your skills sharp. Earn 50 Continuing Professional Education (CPE) credits.

What if I need to cancel my registration?

Life happens, we get it. If you need to cancel your registration with 5 days of registering, you’ll receive a full reimbursement. After that 5 days of registering, there is a $500 non-refundable tuition. Once the course begins, the portion of non-refundable tuition increases as the weeks progress.  Full details can be found in the registration agreement terms.

What are the registration agreement terms?

Registration agreement terms can be found here.

I have more questions, who can I talk to?

We’d love to answer your questions! Schedule a meeting with a member of our team here or shoot us an email at info@evolvesecurity.io.

Register