Second Training: Advanced Penetration Testing (May 27, 2024)

From 27 to 31 of May 2024, a five-day training course on Advanced Penetration Testing equivalent CompTIA Pentest+, an international certification exam provider for information security, was conducted for officers of the Ministry of Post and Telecommunications (MPTC) of Cambodia and other government agencies. Ten participants from MPTC and in total 19 participants from the Ministry of Economy and Finance, Ministry of Public Works and Transport, National Bank of Cambodia, Electricity of Cambodia, and Phnom Penh Water Supply Authority (PPWSA) participated in the training.

CompTIA PenTest+ (PenTest means Penetration Testing) is an international certification that evaluates vulnerability assessment and management skills, and is based on ISO 17024 standards, and has been approved by the U.S. Department of Defense (DoD) as meeting the requirements of Directive 8140/8570.01-M.

The purpose of this training is to provide participants with the practical skills and knowledge necessary to plan and scope a Pentest.

Participants engaged in hands-on activities that included information gathering, vulnerability identification, and use of various Pentest tools such as information gathering tools, vulnerability scanners, and exploit tools. They practiced attacking and exploiting vulnerabilities in a controlled lab environment and learned how to identify false positives from automated tool scan results. In addition, the training provided participants with the effective reporting and communication skills necessary for a professional Pentest.