Module 1: Ethical Hacking Career Pathway

• CEH vs. OSCP vs. GPEN vs. eCPPT comparison
• Building a hacking lab: Kali, Parrot OS, VMs
• CTF platforms: HackTheBox, TryHackMe, VulnHub
• Study roadmap: Beginner to advanced
• Ethical and legal responsibilities

Module 2: Advanced Reconnaissance

• OSINT advanced techniques: LinkedIn, GitHub, Pastebin
• Automated OSINT: SpiderFoot, Amass, FOCA
• Infrastructure mapping
• Adversary simulation recon workflow
• Building a target profile

Module 3: Network Scanning Advanced

• Nmap scripting engine (NSE)
• Stealth scanning techniques: FIN, NULL, Xmas scans
• Evading firewalls and IDS during scanning
• Masscan for large-scale scanning
• Service and version detection advanced

Module 4: Exploitation with Metasploit

• Metasploit architecture: Modules, payloads, encoders
• Exploiting services: EternalBlue, vsftpd, UnrealIRCd
• Meterpreter advanced commands
• Post-exploitation modules
• Custom exploit development concepts

Module 5: Active Directory Attacks

• AD enumeration with BloodHound
• Kerberoasting and AS-REP roasting
• Pass-the-hash and pass-the-ticket
• DCSync and golden ticket attacks
• AD attack path analysis

Module 6: Advanced Web Application Attacks

• Advanced SQL injection: Blind, time-based, OOB
• Server-side request forgery (SSRF)
• XML external entity (XXE) injection
• Insecure deserialization
• Business logic vulnerabilities

Module 7: Advanced Exploitation Techniques

• Buffer overflow fundamentals
• SEH-based buffer overflows
• Return-oriented programming (ROP) concepts
• Format string vulnerabilities
• Fuzzing with boofuzz and AFL

Module 8: Evasion Techniques

• Antivirus evasion: Obfuscation, packing, encryption
• AMSI bypass techniques
• EDR evasion concepts
• C2 traffic obfuscation
• Living off the land (LOLBins)

Module 9: Wireless and Mobile Hacking Advanced

• WPA2 Enterprise attacks
• PMKID capture and cracking
• Rogue AP and evil twin attacks
• Mobile application hacking with MobSF
• SSL pinning bypass on Android

Module 10: Cloud Penetration Testing

• AWS penetration testing: IAM privilege escalation, S3 enumeration
• Azure AD attacks: Token theft, consent phishing
• GCP security testing basics
• Cloud misconfigurations: Pacu, ScoutSuite
• Cloud pentesting scope and authorisation

Module 11: CTF Challenges and Practice

• Solving HackTheBox machines: Easy to Hard
• TryHackMe learning paths
• OSCP-style practice machines
• CTF toolkits and methodology
• Building a CTF writeup portfolio

Module 12: Capstone and Certification Prep

• Full penetration test simulation: External to internal
• Penetration test report writing (professional standard)
• OSCP exam preparation strategy
• CEH v13 exam preparation
• Career roadmap: Junior to senior pentester

Experience in the Industry Learn from offensive security professionals who have conducted full-scope penetration tests, red team engagements, and CTF coaching with measurable student outcomes.

Backgrounds at the Top Our instructors hold OSCP, CEH Master, and eCPPT certifications, with hands-on experience in enterprise network exploitation, AD attacks, and cloud penetration testing.

Clear & Effective Teaching Complex exploitation techniques are broken into digestible modules with live demonstrations, ensuring students build from fundamentals to advanced skills progressively.

Hands-On Learning Focus Students complete over 40 hands-on labs including HackTheBox machine walkthroughs, Metasploit exercises, AD attack chains, and cloud penetration testing scenarios.

Up-to-Date Knowledge Instructors continuously update course content with new CVEs, OSCP exam format changes, updated AD attack techniques, and emerging cloud attack vectors.