Offensive Security Fundamentals

Learn the Rules of Engagement (RoE) framework that distinguishes authorized pentesting from criminal hacking, understand the ethical responsibilities of offensive security practitioners, and know the specific documentation (scope, timing, data handling, notification) that protects you + the client. By the end you can draft a RoE document and know when to STOP a test.

Learn pentester recon: passive techniques (OSINT, DNS, certificate transparency) that leave no trace on the target, and active techniques (port scanning, banner grabbing, vuln scanning) that are detectable. By the end you can perform recon against a scope + build the attack-surface map.

Learn the exploitation phase of a pentest: how to turn a known vulnerability into a working proof-of-concept, use Metasploit for commodity exploits, and understand the OWASP Top 10 web application vulnerabilities. By the end you can select an appropriate exploit for a vulnerability, demonstrate it safely, and know when custom exploitation is required vs when Metasploit modules suffice.

Learn what happens AFTER initial access — enumeration, credential harvesting (Mimikatz patterns), privilege escalation, lateral movement to other systems. Understand the attacker mindset so you can defend against it. By the end you know the top 10 post-exploitation techniques + what their forensic signatures look like.

Learn to write a pentest report that actually drives remediation: structure (executive summary + technical findings + remediation), writing findings with reproducible evidence, prioritizing by business impact, and the specific remediation guidance that developers can act on. By the end you can convert raw pentest findings into a report Camila presents to the Board.