Source: Juni_2026_Exams/Penetration_Testing/reference_pdfs/README.md

Penetration Testing PDF Inventory

Primary Lecture Sources

File	Pages	Main content
`PENTEST_2026_01.pdf`	83	Course scope, ethics, methodology, lab introduction
`PENTEST_2026_02.pdf`	23	Linux, files, pipes, automation, services, Netcat
`PENTEST_2026_03.pdf`	61	Passive reconnaissance, OSINT, WHOIS, DNS, Recon-ng, Shodan
`PENTEST_2026_04.pdf`	63	Active reconnaissance, tcpdump, hping3, Nmap, NSE
`PENTEST_2026_05.pdf`	64	Searchsploit, Metasploit, Meterpreter, exploitation
`PENTEST_2026_06.pdf`	46	Shells, terminals, Netcat, SSH, SMB, TFTP, HTTP transfer

The numbering in the filenames does not always match the lecture number shown inside a deck. Cite the filename and PDF page to avoid ambiguity.

Exam and Supporting Sources

File	Assessment
`CTF_ExamCard_2026.pdf`	Exam-oriented card stating open notes, flag format, launch command, and a prior-exam-based workflow
`PenTest_CTF_CheatSheet.pdf`	Useful concise methodology and command reference
`Penetration Testing Exercises.pdf`	Detailed exercise compilation; examples often use old lab addresses
`pentest exams.pdf`	Student/compiled exam guide; supporting source only
`pentest_exams - Ilias.pdf`	Student guide; supporting source only
`MetasploitCheatsheet2.0.pdf`	Metasploit command reference
`MetasploitCheatsheet2.0-1.pdf`	Exact duplicate of the preceding file

The duplicate Metasploit PDFs have the same SHA-256:

4766cd5a4dd17d29cb7b6c815347a9df262f9d1f023fc333aa809866a6f88246

Reliability Notes

The CTF card says it is based on previous exams. Treat named ports,

credentials, subnets, endpoints, and flag locations as rehearsal examples.

Commands in old slides may use deprecated syntax. The notes use current

equivalents such as nmap -sn and python3 -m http.server.

Some slide commands contain typographic dash characters. Retype commands

with normal ASCII hyphens.

Results for university hosts can change. Record what you observe during the

authorized lab instead of copying an expected answer.

Collaboration

Keep source PDFs unchanged. Put derived explanations in ../notes/, worked exam workflows in ../solutions/, and short operational sequences in ../checklists/.

Inventory completed: June 15, 2026