What you'll learn

Security assessments live or die on that first point of entry, yet real footholds rarely come from exotic exploits. They come from exposed services, weak passwords, and misconfigurations across every kind of system on the network. In this course, Pen Testing: Endpoint Initial Access, you'll gain the ability to obtain and validate an initial foothold across mixed environments. First, you'll explore gaining access to Linux endpoints by enumerating exposed services, exploiting weak credentials and misconfigurations, and abusing an exposed Docker daemon. Next, you'll discover how to compromise Windows endpoints through SMB and remote-service weaknesses, local password spraying, and PowerShell execution and bypass techniques. Finally, you'll learn how to reach network devices and access points over legacy management protocols, identify default and weak credentials, and capture proof of access without disrupting the device. When you're finished with this course, you'll have the skills and knowledge of initial access and foothold techniques needed to find, exploit, and prove entry points across Linux, Windows, and network infrastructure.