Ethical Hacking & Penetration Testing Course

curriculum

The full syllabus

Organized into five tracks. Browse by phase — same order you'd run a real assessment.

Install Virtual Machine & Setup Kali

Step-by-step Kali VM setup, fixing common issues like the black screen error.

Installing Guest Additions

Full-screen mode, clipboard sharing, and drag & drop support.

Linux Basic Commands

ls, cd, pwd, mkdir, nano, rm — the commands every hacker needs.

Networking Concepts

IP addresses, ports, protocols, and your first Nmap scans.

Weekly Recap

Quick revision of VM setup, Linux commands, and networking concepts.

Information Gathering

Practical methods to find IPs, domains, and system details.

TheHarvester, Sherlock & Custom Tools

OSINT for email/subdomain discovery and username enumeration.

Scanning

Set up Metasploitable and run safe network scans & enumeration.

Nmap Advance

Advanced scans against Windows 7 — services, OS detection, entry points.

Bypassing Firewall

Wireshark fundamentals for packet analysis and hidden data flows.

First Python Tool

Generate and customize a simple network scanner with AI assistance.

Vulnerability Analysis

Nmap's NSE scripts for detecting known vulnerabilities and misconfigurations.

Vulnerable Analysis Part 2

Installing and configuring Nessus for vulnerability management.

Nessus Tutorial

Run your first Nessus scan and prioritize findings for testing.

Windows Analysis

Detailed vulnerability assessment on Windows using Nessus.

Windows Vulnerability Analysis

Intro to Metasploit Framework — interface, modules, use cases.

Payloads and Exploits

Using payloads and exploits in Metasploit to establish access.

Your First Attack

Generate and execute a Metasploit payload in the lab.

Brute Force Attack

Metasploit's brute-force modules and their effectiveness.

Exploitation Attack

Exploiting discovered vulnerabilities for system-level access.

Eternal Blue Attack

The MS17-010 SMB exploit behind WannaCry — and how to mitigate it.

BlueKeep Attack

The RDP BlueKeep exploit, plus required Python dependencies.

Crashing Windows 10

Remote crash via crafted packets — pure offensive security.

Bypassing Antivirus

msfvenom payloads and obfuscation to bypass AV detection.

Gaining Access

TheFatRat framework for generating backdoors on Windows.

Android Hacking

Creating malicious APKs with TheFatRat for mobile targets.

Maintaining Access on Windows

Persistence techniques via Metasploit's persistence modules.

Credential Dumping

Dumping Windows credentials, hashes, and tokens for privilege escalation.

Python Backdoor Project

Code a Python-based backdoor from scratch.

Bypassing Windows Defender

Build a tool to bypass Defender and understand evasion techniques.

Web App Pentesting

Intro to web security with DVWA — HTTP requests, responses, basic flaws.

32-33

BurpSuite & Command Injection

Intercepting traffic and command injection on DVWA.

XSS Attack

Stored, reflected, and DOM-based Cross-Site Scripting on DVWA.

HTML/SQL Injection

Extracting sensitive data from databases via SQL injection.

CSRF Attack

Exploiting trust between browser and web app, and how to defend against it.

Hydra Brute Force

Cracking login credentials across FTP, SSH, and HTTP.

BurpSuite Brute Force

Automated brute force via Burp Suite Pro's Intruder module.

Python Brute Force Tool

Build your own brute-force script from scratch.

ARP Spoofing

MITM attacks using Ettercap & Bettercap to intercept live traffic.

Wi-Fi Hacking

Cracking WiFi passwords with Aircrack-ng and dictionary attacks.

Hashcat & Custom Wordlists

Password cracking and generating effective custom wordlists.

Python Basics

Environment setup and how Python fits into cybersecurity.

First Python Program

Your first script — the foundation for every hacking tool ahead.

Data Types / Math Functions

Core data types and math for automating security tasks.

Everything About Python

A full pass through developer fundamentals for offensive coding.

String Manipulation

Critical for writing scanners, parsers, and payload injectors.

First Python Exercise

Reinforcing the basics with a practical build.

Lists

Handling bulk data — IPs, usernames, and passwords.

50-51

Data Structures I & II

Core & advanced structures that power automation scripts.

Conditions / Logical Operators

Decision-making logic for controlling attacks and automation.

Loops

Repetitive tasks — scanning IP ranges, brute-forcing passwords.

54-55

Advanced Python

Concepts behind building powerful, efficient hacking scripts.

Error Handling / File I/O

Reading/writing files and graceful error handling for stable tools.

Custom Attacking Tools

Combine everything into real custom hacking tools — plus SEToolkit, anonymity & final path.