EdX

Penetration Testing - Post Exploitation (edX)

Offered by New York University, NYUx,
Penetration Testing - Post Exploitation (edX)

Learn post-exploitation phases of penetration testing, including Owning, Pivoting, Privilege Escalation and other advanced penetration testing topics. The machine's value is determined by the sensitivity of the data stored on it and the machine's usefulness in further compromising the network.

Class Deals by MOOC List - Click here and see EdX's Active Discounts, Deals, and Promo Codes.

This is the 8th course in the intermediate, undergraduate-level offering that makes up the larger Cybersecurity Fundamentals MicroBachelors Program. We recommend taking them in order, unless you have a background in these areas already and feel comfortable skipping ahead.

These topics build upon the learnings that are taught in the introductory-level Computer Science Fundamentals MicroBachelors program, offered by the same instructor.
This is a self-paced course that continues the development of ethical hacking skills. The curriculum provides an introduction to post-exploitation penetration testing topics. Among the topics covered are Owning, Pivoting, Privilege Escalation and other advanced penetration testing topics, The purpose of the Post-Exploitation phase is to determine the value of the machine compromised and to maintain control of the device for later use. The machine's value is determined by the sensitivity of the data stored on it and the machine's usefulness in further compromising the network. The methods the students learn in this phase are meant to help them identify and document sensitive information, identify configuration settings, communication channels, and relationships with other network devices that can be used to gain further access to the network. The students also learn how to set up one or more methods of accessing the machine later.

What you'll learn

  1. Discover credentials utilizing hash dumps
  2. Perform pass-the-hash attacks
  3. Document results of the penetration test
  4. Utilize currently exploited systems to gain access to others.
  5. Configure exploitation tools to pivot through a target environment
  6. Collapse what you'll learn

Syllabus

Week 1 - Post Exploitation - Owning, Pivoting, Privilege Escalation
Week 2 - Review of Web App Exploits
Week 3 - Exploitation – Passwords and Authentication
Week 4 - Penetration Testing Advanced Topics
Week 5 - Final Exam

Go to Class
MOOC List is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Related Courses

Penetration Testing and Incident Response (edX) EdX
IBM

Penetration Testing and Incident Response (edX)

Learn about the various phases of penetration testing, incident response, and the forensic process. This course is part of the IBM Cybersecurity Analyst Professional Certificate! This course is suitable for individuals seeking a fundamental grasp of Cybersecurity or as the fifth installment in a series of courses to develop the skills essential for a career as a Cybersecurity Analyst.

Self Paced
Self-Paced
Penetration Testing, Incident Response and Forensics (Coursera) Coursera
IBM

Penetration Testing, Incident Response and Forensics (Coursera)

This course gives you the background needed to gain Cybersecurity skills as part of the Cybersecurity Security Analyst Professional Certificate program. You will learn about the different phases of penetration testing, how to gather data for your penetration test and popular penetration testing tools. Furthermore, you will learn the phases of an incident response, important documentation to collect, and the components of an incident response policy and team. Finally, you will learn key steps in the forensic process and important data to collect.

Jun 29th 2026
4 Weeks
Proactive Computer Security (Coursera) Coursera
University of Colorado System

Proactive Computer Security (Coursera)

I’ve heard this before – “I’m not sure my computer security practices are working”. I reply “Have you tested them?” This course is the fourth and final course in the Practical Computer Security specialization. In this course, you’ll learn how to proactively test what you have put in place to protect your data. In the first week you’ll be able to discuss the basics of deterrents and how to “trick” attackers into believing they’ve hit a goldmine of data away from your real systems. In week 2, you’ll be able to understand and discuss the steps of penetration testing methodology.

Oct 26th 2026
5-12 Weeks
Network Security (Udacity) Udacity
Georgia Institute of Technology,Udacity

Network Security (Udacity)

This course provides an introduction to computer and network security. Students successfully completing this class will be able to evaluate works in academic and commercial security, and will have rudimentary skills in security research. The course begins with a tutorial of the basic elements of cryptography, cryptanalysis, and systems security, and continues by covering a number of seminal papers and monographs in a wide range of security areas.

Self Paced
Self-Paced
Ethical Hacking: An Introduction (FutureLearn) FutureLearn
Coventry University

Ethical Hacking: An Introduction (FutureLearn)

Learn the principles and methods of ethical hacking and penetration testing, and build your ethical hacking skills. Explore the principles and methods of ethical hacking. What is ethical hacking? How does it work? What principles do ethical hackers follow? Answer these questions and more with the course introducing ethical hacking. You will have the opportunity to learn the principles of ethical hacking and consider its legal and methodological foundations.

Jan 16th 2023
2 Weeks
Introduction to Safeguarding in the International Aid Sector (FutureLearn) FutureLearn
The Open University

Introduction to Safeguarding in the International Aid Sector (FutureLearn)

Become a safeguarding specialist and learn how to lead, develop, and implement a strong safeguarding policy in your organisation. Learn about safeguarding policies and procedures in the aid sector. This course will help those working in NGOs and development and humanitarian agencies to better understand the causes of harm, abuse, and exploitation.

Jan 24th 2022
5-12 Weeks
Introduction to Cloud Computing (edX) EdX
IBM

Introduction to Cloud Computing (edX)

Master the core concepts in Cloud Computing, from service and deployment models, to cloud architecture, security, new technologies, and possible careers. This course introduces you to the core concepts of cloud computing. You will gain the foundational knowledge required for understanding cloud computing from both business and practitioner perspectives.

Self Paced
Self-Paced
Introduction to Linux (edX) EdX
Linux Foundation,LinuxFoundationX

Introduction to Linux (edX)

Never learned Linux? Want a refresh? Develop a good working knowledge of Linux using both the graphical interface and command line across the major Linux distribution families. Develop a good working knowledge of Linux using both the graphical interface and command line, covering the major Linux distribution families.

Self Paced
Self-Paced
Protección de datos personales en la era digital (edX) EdX
The Pontificia Universidad Javeriana,JaverianaX

Protección de datos personales en la era digital (edX)

Aprende conceptos, principios, roles, tendencias y tensiones sobre privacidad y proteccion de datos personales que surgen al dar tratamiento a datos personales en la era digital. Este curso en línea te ayudará a entender los conceptos de privacidad y protección de datos personales en la economía digital, así como los principios y reglas generales para el tratamiento en línea de datos personales, como un primer paso en la aproximación a esta materia que es fundamental para cualquier organización, gobierno, negocio o emprendimiento que opera en este mundo digital.

Self Paced
Self-Paced
Malware Analysis and Assembly Language Introduction (edX) EdX
IBM

Malware Analysis and Assembly Language Introduction (edX)

This course introduces the processes and methods for conducting malware analysis of different file types and describes how Assembly Language is used to analyze malware. Malicious software, or malware, is typically delivered over a network and is designed to cause disruption to a computer, client, server, or network. Disruptions can include leaked private information, unauthorized access to information or systems, blocked user access, interference with security and privacy, or numerous other variations of attacking systems.

Self Paced
Self-Paced