Study guide

CREST CPSA study guide

Read a lesson, then practice the ideas you want to remember.

Lessons

  1. Cryptographic Hash Functions, MACs & Digital
  2. Secure Protocols: SSL/TLS, IPsec & SSH — Free Study Guide 2026
  3. Symmetric & Asymmetric Cryptographic Algorit
  4. Blind SQL Injection & Database Enumeration
  5. Database Architectures, Default Ports & Auth
  6. Database Attack Vectors, Stored Procedures &
  7. SQL Injection Foundations & In-Band Techniqu
  8. ICMP Protocol, Network Diagnostics & Error M
  9. IPv4 and IPv6 Addressing, Subnetting & Heade
  10. Network Topologies, Switched Media & VLAN Se
  11. Network Media, Ethernet Standards & Physical
  12. TCP and UDP Transport Protocols & Handshake
  13. Windows Authentication: NTLM, Kerberos & Pas
  14. Desktop Lockdown, Citrix Breakout & Common W
  15. Active Directory Architecture & Domain Recon
  16. Windows Patch Management, Local Security & C
  17. Windows File System, Share & Registry Permis
  18. Windows User & Group Enumeration via SMB & R
  19. Firewall and IDS/IPS Evasion Techniques
  20. Host Discovery Techniques & Ping Sweep Metho
  21. Network Access Control Analysis & Firewall R
  22. Port Scanning Mechanics: TCP, UDP & Stealth
  23. OS Fingerprinting, Service Detection & Timin
  24. Passive OS & Service Fingerprinting — Free Study Guide 2026
  25. Core Network Services: DHCP, NTP & TFTP
  26. Layer 2 Protocols: ARP, CDP, STP, VTP & Redu
  27. Router & Switch Management: SNMP, SSH & Auth
  28. Out-of-Band Management, Console Access & Cis
  29. Wireless Security & VoIP Assessment — Free Study Guide 2026
  30. DNS Infrastructure, Record Types & Zone Tran
  31. Newsgroups, Mailing Lists & Public Archive R
  32. Search Engine Reconnaissance, Google Dorking
  33. WHOIS Records, Domain Registrars & Autonomou
  34. The Penetration Testing Engagement Lifecycle
  35. Record Keeping, Interim Escalation & Reporti
  36. Understanding, Explaining & Managing Technic
  37. Legal Framework: Computer Misuse Act & Compl
  38. Legacy Unix Services: R-Services, X11, FTP &
  39. Unix Vulnerability Exploitation & Post-Explo
  40. Network File System & RPC Services Assessmen
  41. Linux/Unix Security Architecture, Permission
  42. Unix Remote Information Services: rusers, rw
  43. Unix User Enumeration & Service Discovery
  44. Banner Grabbing, Service Verification & Manu
  45. CVE Referencing, CVSS Scoring & Risk Priorit
  46. Host Audit Techniques: Processes, Sockets, P
  47. Vulnerability Scanning Principles & Methodol
  48. Web APIs, Server Extensions & Client-Side Su
  49. Web Server Architecture & the HTTP/HTTPS Pro
  50. Testing Authentication, Authorization & Sess
  51. Web Reconnaissance, Content Discovery & Thre
  52. Web Service Protocols: SOAP, REST & XML Mess
  53. Web Application Components, Frameworks & Sta
  54. Command Injection, File Upload Vulnerabiliti
  55. Cross-Site Scripting: Types, Impact & Defens
  56. Cross-Site Request Forgery & Client-Side Att
  57. Injection Beyond SQL: LDAP, XPath, Code & Te
  58. Input Validation Vulnerabilities & Parameter
  59. Source Code Review & Encoded/Cryptographic V
  60. Information Disclosure: Error Messages & Mar