Role pathsIn preparation
Penetration Tester
Skills this role needs
The capstone skills for this role. Each folds in the prerequisites it depends on.
Web fundamentals1 skills
- Use HTTP request headers0%
Includes
- Make HTTP requests
Access control1 skills
- Exploit an IDOR0%
Includes
- Make HTTP requests
- Read from a REST API
Web applications2 skills
- Exploit a known CVE0%
Includes
- Make HTTP requests
- Exploit common web application vulnerabilities0%
Includes
- Make HTTP requests
Active Directory6 skills
- Kerberoast service accounts0%
- Spray passwords across accounts0%
- AS-REP roast users without pre-auth0%
- Enumerate Active Directory over LDAP0%
- Replicate secrets with DCSync0%
- Abuse Active Directory ACLs0%
Cryptography1 skills
- Attack cryptographic schemes0%
Binary exploitation3 skills
- Exploit memory corruption0%
- Escape a sandbox0%
- Reverse engineer software0%
What the job involves
- Test web applications and exposed services
- Assess Active Directory environments
- Analyse and exploit native binaries
- Evaluate cryptographic implementations
- Report findings and attack paths