Capability Development / Cyber Security
Ethical Hacking
This program builds a strong foundation in cybersecurity concepts, offensive security methodologies, and defensive countermeasures. Learners progress through reconnaissance, scanning, enumeration, vulnerability analysis, system hacking, and web application security, extending into wireless, cloud, OT, and cryptography. By the end of the course, participants can apply structured ethical hacking methodologies, use security tools responsibly, interpret vulnerability assessment results, and recommend effective countermeasures to strengthen organizational security posture.
Program Overview
This program builds a strong foundation in cybersecurity concepts, offensive security methodologies, and defensive countermeasures. Learners progress through reconnaissance, scanning, enumeration, vulnerability analysis, system hacking, and web application security, extending into wireless, cloud, OT, and cryptography. By the end of the course, participants can apply structured ethical hacking methodologies, use security tools responsibly, interpret vulnerability assessment results, and recommend effective countermeasures to strengthen organizational security posture.
Audience Profile
Aspiring ethical hackers and penetration testers; Security analysts and SOC team members; Network and system administrators; IT professionals seeking offensive security skills; and Basic networking and operating systems knowledge recommended.
Course Syllabus
Module 1: Introduction to Ethical Hacking
Topics
- Information security overview
- Hacking methodologies and frameworks
- Hacking and ethical hacking concepts
- Information security controls
- Information security laws and standards
Module 2: Footprinting, Reconnaissance & Scanning
Topics
- Footprinting through search engines and web services
- Website, email, and DNS footprinting
- Social engineering footprinting
- Network scanning concepts and tools
- Host, port, and service discovery
- OS fingerprinting and banner grabbing
- Scanning beyond IDS and firewalls
- Footprinting and scanning countermeasures
Module 3: Enumeration & Vulnerability Analysis
Topics
- NetBIOS, SNMP, and LDAP enumeration
- NTP, NFS, SMTP, and DNS enumeration
- Enumeration countermeasures
- Vulnerability assessment concepts
- Vulnerability classification and assessment types
- Vulnerability assessment tools and reports
Module 4: System Hacking & Malware Threats
Topics
- Gaining access and escalating privileges
- Maintaining access and clearing logs
- Malware and APT concepts
- Trojan, worm, and fileless malware concepts
- Malware analysis
- Anti-malware software and countermeasures
Module 5: Sniffing, Social Engineering & DoS Attacks
Topics
- MAC, DHCP, and ARP poisoning attacks
- Spoofing and DNS poisoning
- Social engineering techniques
- Insider threats and identity theft
- DoS/DDoS concepts and botnets
- DoS/DDoS attack countermeasures
Module 6: Session Hijacking & Evading Security Controls
Topics
- Application and network-level session hijacking
- Session hijacking tools and countermeasures
- IDS, IPS, firewall, and honeypot concepts
- Evading IDS and firewalls
- Evading NAC and endpoint security
- Detecting honeypots
Module 7: Web Server, Web Application & SQL Injection Attacks
Topics
- Web server attack methodology
- Web application threats and hacking methodology
- Web API, webhooks, and web shell
- SQL injection types and methodology
- SQL injection tools and countermeasures
Module 8: Wireless, Mobile, IoT/OT, Cloud & Cryptography
Topics
- Wireless encryption and hacking methodology
- Bluetooth hacking
- Mobile platform attack vectors (Android/iOS)
- IoT and OT hacking concepts and attacks
- Cloud computing and container security
- Cryptography concepts and encryption algorithms
- Cryptanalysis and cryptography attack countermeasures