Study guide
CREST CPSA study guide
Read a lesson, then practice the ideas you want to remember.
Lessons
- Cryptographic Hash Functions, MACs & Digital
- Secure Protocols: SSL/TLS, IPsec & SSH — Free Study Guide 2026
- Symmetric & Asymmetric Cryptographic Algorit
- Blind SQL Injection & Database Enumeration
- Database Architectures, Default Ports & Auth
- Database Attack Vectors, Stored Procedures &
- SQL Injection Foundations & In-Band Techniqu
- ICMP Protocol, Network Diagnostics & Error M
- IPv4 and IPv6 Addressing, Subnetting & Heade
- Network Topologies, Switched Media & VLAN Se
- Network Media, Ethernet Standards & Physical
- TCP and UDP Transport Protocols & Handshake
- Windows Authentication: NTLM, Kerberos & Pas
- Desktop Lockdown, Citrix Breakout & Common W
- Active Directory Architecture & Domain Recon
- Windows Patch Management, Local Security & C
- Windows File System, Share & Registry Permis
- Windows User & Group Enumeration via SMB & R
- Firewall and IDS/IPS Evasion Techniques
- Host Discovery Techniques & Ping Sweep Metho
- Network Access Control Analysis & Firewall R
- Port Scanning Mechanics: TCP, UDP & Stealth
- OS Fingerprinting, Service Detection & Timin
- Passive OS & Service Fingerprinting — Free Study Guide 2026
- Core Network Services: DHCP, NTP & TFTP
- Layer 2 Protocols: ARP, CDP, STP, VTP & Redu
- Router & Switch Management: SNMP, SSH & Auth
- Out-of-Band Management, Console Access & Cis
- Wireless Security & VoIP Assessment — Free Study Guide 2026
- DNS Infrastructure, Record Types & Zone Tran
- Newsgroups, Mailing Lists & Public Archive R
- Search Engine Reconnaissance, Google Dorking
- WHOIS Records, Domain Registrars & Autonomou
- The Penetration Testing Engagement Lifecycle
- Record Keeping, Interim Escalation & Reporti
- Understanding, Explaining & Managing Technic
- Legal Framework: Computer Misuse Act & Compl
- Legacy Unix Services: R-Services, X11, FTP &
- Unix Vulnerability Exploitation & Post-Explo
- Network File System & RPC Services Assessmen
- Linux/Unix Security Architecture, Permission
- Unix Remote Information Services: rusers, rw
- Unix User Enumeration & Service Discovery
- Banner Grabbing, Service Verification & Manu
- CVE Referencing, CVSS Scoring & Risk Priorit
- Host Audit Techniques: Processes, Sockets, P
- Vulnerability Scanning Principles & Methodol
- Web APIs, Server Extensions & Client-Side Su
- Web Server Architecture & the HTTP/HTTPS Pro
- Testing Authentication, Authorization & Sess
- Web Reconnaissance, Content Discovery & Thre
- Web Service Protocols: SOAP, REST & XML Mess
- Web Application Components, Frameworks & Sta
- Command Injection, File Upload Vulnerabiliti
- Cross-Site Scripting: Types, Impact & Defens
- Cross-Site Request Forgery & Client-Side Att
- Injection Beyond SQL: LDAP, XPath, Code & Te
- Input Validation Vulnerabilities & Parameter
- Source Code Review & Encoded/Cryptographic V
- Information Disclosure: Error Messages & Mar