Certified Vulnerability Assessment and Penetration Testing Professional (Intermediate) — CVAPTP-I

Core Curriculum & Modules: Module 1: Vulnerability Assessment and Penetration Testing Methodology & Legal Frameworks — Penetration testing lifecycle (PTES/OWASP), scoping and rules of engagement, authorization documentation, relevant compliance standards (PCI-DSS, ISO 27001) Module 2: Reconnaissance & Vulnerability Scanning — Passive/active information gathering (OSINT, DNS, WHOIS), automated scanning tools (Nessus, OpenVAS, Nmap), vulnerability triage and false-positive elimination Module 3: Network Penetration Testing — Exploiting misconfigurations and unpatched services in a lab environment, privilege escalation basics, pivoting and lateral movement fundamentals, using Metasploit in a controlled range Module 4: Web Application Penetration Testing — OWASP Top 10 exploitation (SQLi, XSS, CSRF, broken auth), Burp Suite proxy workflows, manual testing techniques vs. automated scanners Module 5: Reporting, Remediation & Retesting — Risk scoring (CVSS), writing findings with business impact context, remediation recommendations, retest and validation procedures Practical Labs: Participants conduct a full assessment against a dedicated, isolated lab network and vulnerable web application, documenting each finding from discovery through exploitation (where authorized in-lab), and deliver a professional Vulnerability Assessment and Penetration Testing report with executive summary, technical findings, CVSS scores, and remediation guidance. Let me know if you'd like me to spell out the full form only on first mention and use the acronym thereafter (more typical for readability in a course catalog), or keep it fully expanded throughout as shown here.