Module 00: Penetration Testing Essential Concepts (Self-Study)
Module 01: Introduction to Penetration Testing and Methodologies
Module 02: Penetration Testing Scoping and Engagement Methodology
Module 03: Open-Source Intelligence (OSINT) Methodology
Module 04: Social Engineering Penetration Testing Methodology
Module 05: Network Penetration Testing Methodology – External
Module 06: Network Penetration Testing Methodology – Internal
Module 07: Network Penetration Testing Methodology – Perimeter Devices
Module 08: Web Application Penetration Testing Methodology
Module 09: Database Penetration Testing Methodology
Module 10: Wireless Penetration Testing Methodology
Module 11: Cloud Penetration Testing Methodology
Module 12: Report Writing and Post Testing Actions

OWASP top 10: 

1. Injection
2. Broken Authentication
3. Sensitive data exposure
4. XML External Entities (XXE)
5. Broken Access control
6. Security Micsconfig
7. Cross-site scripting (XSS)
8. Insecure deserilization
9. Using Components with known Vulnerabilities
10. Insufficient Logging and Monitoring

Bypass Authentication Using SQL Injection

Bypass Authentication Via Authentication Token Manipulation

Explanation Of HTTPonly Cookies In Presense Of Cross Site Scripting

Closer Look At Cache Control And Pragma No Cache Headers

Demonstration Of Frame Busting Javascript And X-Frame Options Header

How To Install And Configure Burp Suite With Firefox

Basics Of Web Request And Response Interception Using Burp Suite

Brute Force Authentication Using Burp Intruder

Automate SQL Injection Using SQLMap To Dump Credit Cards Table

Command Injection To Dump Files Start Services Disable Firewall

How To Exploit Local File Inclusion Vulnerability Using Burp Suite

HTML Injection To Popup Fake Login Form And Capture Credentials

Two Methods To Steal Session Tokens Using Cross Site Scripting

How To Bypass Maxlength Restrictions On HTML Input Fields

Two Methods To Bypass Javascript Validation

Three Methods For Viewing Http Request And Response Headers

Basics Of SQL Injection Timing Attacks

Basics Of SQL Injection Using Union

Basics Of Inserting Data With SQL Injection

Inject Root Web Shell Backdoor Via SQL Injection

Basics Of Using SQL Injection To Read Files From Operating System

How To Locate The Easter Egg File Using Command Injection

Injecting Cross Site Script Into Stylesheet Context

Introduction To Http Parameter Pollution

Basics Of Injecting Cross Site Script Into HTML Onclick Event

Basics Of Finding Reflected Cross Site Scripting

Analyze Session Token Randomness Using Burp Suite Sequencer

Using Nmap To Fingerprint Http Servers And Web Applications

Spidering Web Applications With Burp Suite

How To Execute Javascript On The Urlbar In Modern Browsers

Adding Values To Dom Storage Using Cross Site Scripting

Alter Values In Html5 Web Storage Using Cross Site Script

Altering Html 5 Web Storage Values Using Persistent XSS

Altering HTML 5 Web Storage With A Reflected XSS

Generate Cross Site Scripts With Sql Injection

Using Command Injection To Gain Remote Desktop On Windows

How To Exploit Metasploitable 2 With Nmap Nexpose Nessus Metasploit

Setting User Agent String And Browser Information

Walkthrough Of CBC Bit Flipping Attack With Solution

Installing Latest Mutillidae On Samurai WTF Version 2