How to use vulnerability scanning tools (Nmap, Wireshark, Metasploit) to identify security weaknesses using CVSS and EPSS scoring frameworks

How to perform network-based attacks including man-in-the-middle, ARP manipulation, and service exploitation against real and simulated targets

How to identify and exploit wireless network vulnerabilities including WPA2 handshake attacks and RF-based attack vectors such as Bluetooth exploits

How to identify and exploit web application and database vulnerabilities including SQL injection, XSS, and privilege escalation techniques

How to assess cloud infrastructure security and exploit misconfigurations in AWS, Azure, and other cloud platforms during an authorized engagement

How to conduct social engineering simulations, and perform assessments on specialized systems including IoT devices and industrial control systems

How to maintain access, move through a network, and cover tracks after initial system compromise using professional post-exploitation techniques

How to write clear penetration test reports with findings categorized by severity, risk-rated remediation recommendations, and executive summaries

How to use and script with the penetration testing toolkit including Metasploit, Wireshark, Burp Suite, Kali Linux, and Bash/Python automation