CompTIA PenTest+: Authentication Attacks

Penetration testing (pen testing) often involves assessing the security of authentication mechanisms within a system. In this course, discover how to perform authentication attacks using the appropriate tools given various scenarios, beginning with how to exploit multifactor authentication fatigue and Kerberos and LDAP injection attacks. Next, explore pass-the-hash, pass-the-ticket, and pass-the-token attacks, as well as brute forcing, mask attacks, password spraying, and credential stuffing. Finally, learn about OpenID Connect attacks, how to perform SAML attacks, and explore common tools used to perform authentication attacks, including Responder, hashcat, John the Ripper, Hydra, BloodHound, Medusa, and Burp Suite. This course is one of a collection that helps prepare learners for the CompTIA PenTest+ (PT0-003) certification exam.