Course curriculum
Module 01: Introduction to Ethical Hacking and Cybersecurity Fundamentals Information security fundamentals and cybersecurity concepts Ethical hacking concepts, principles, and methodologies Types of hackers and cyber attackers Cybersecurity threats, vulnerabilities, and attack surfaces Ethical hacking phases and penetration testing concepts Information security laws, regulations, and ethical considerations
Module 02: Footprinting and Reconnaissance Footprinting concepts and reconnaissance methodologies Passive and active information gathering Search engine and online reconnaissance techniques WHOIS, DNS, and domain information gathering Network and organizational footprinting Identifying attack surfaces and potential vulnerabilities
Module 03: Scanning Networks Network scanning concepts and methodologies Host discovery and port scanning TCP and UDP scanning techniques Service and operating system detection Network mapping and vulnerability identification Using network scanning tools for security assessment
Module 04: Enumeration Enumeration concepts and methodologies Windows and Linux enumeration NetBIOS, SMB, SNMP, LDAP, and SMTP enumeration User, group, and network resource enumeration Identifying system information and services Enumeration tools and practical techniques
Module 05: Vulnerability Analysis Vulnerability assessment concepts Vulnerability identification and classification Common vulnerability databases and scoring systems Automated vulnerability scanning Vulnerability assessment tools Risk analysis and vulnerability prioritization
Module 06: System Hacking System hacking methodologies Password attacks and credential attacks Password cracking techniques Privilege escalation concepts Malware and backdoor concepts Maintaining access and covering attack traces System hacking countermeasures
Module 07: Malware Threats Malware concepts and attack vectors Viruses, worms, Trojans, ransomware, and spyware Malware analysis fundamentals Fileless malware and advanced malware techniques Malware detection and prevention Anti-malware and endpoint security controls
Module 08: Sniffing Network sniffing concepts Packet capture and traffic analysis Active and passive sniffing Protocol analysis ARP poisoning and MAC attacks Sniffing detection and countermeasures
Module 09: Social Engineering Social engineering concepts and attack lifecycle Phishing and spear-phishing attacks Vishing, smishing, and impersonation attacks Pretexting and baiting techniques Social engineering tools and attack scenarios Security awareness and social engineering defenses
Module 10: Denial-of-Service DoS and DDoS attack concepts Network and application-layer attacks Distributed denial-of-service techniques Botnets and amplification attacks DoS attack detection and analysis DDoS mitigation and prevention strategies
Module 11: Session Hijacking Session management concepts Session hijacking techniques Cookie-based attacks TCP/IP session hijacking Session fixation and related attacks Session hijacking detection and countermeasures
Module 12: Evading IDS, Firewalls, and Honeypots Intrusion Detection System concepts Firewall technologies and security controls IDS/IPS evasion concepts Firewall evasion techniques Honeypot identification and evasion Security monitoring and defensive countermeasures
Module 13: Hacking Web Servers Web server architecture and security concepts Web server vulnerabilities Web server attack techniques Misconfiguration and information disclosure Web server attacks and exploitation concepts Web server hardening and security controls
Module 14: Hacking Web Applications Web application security fundamentals Common web application vulnerabilities Injection attacks Authentication and authorization weaknesses Cross-Site Scripting (XSS) Session and input-validation vulnerabilities Web application security testing and countermeasures
Module 15: SQL Injection SQL injection concepts and attack vectors Error-based and blind SQL injection Authentication bypass techniques Database information extraction concepts Automated SQL injection testing SQL injection detection and prevention Module 16: Hacking Wireless Networks Wireless network security fundamentals Wi-Fi authentication and encryption Wireless reconnaissance and scanning Wireless attacks and vulnerabilities Rogue access points and related threats Wireless network security and hardening
Module 17: Hacking Mobile Platforms Mobile security concepts Android and iOS security fundamentals Mobile application vulnerabilities Mobile device attack vectors Mobile malware and security threats Mobile application and device security controls
Module 18: IoT and OT Hacking Internet of Things security fundamentals IoT architecture and attack surfaces IoT vulnerabilities and attack vectors Operational Technology (OT) security concepts IoT and OT attack scenarios IoT/OT security assessment and mitigation strategies
Module 19: Cloud Computing Cloud security fundamentals Cloud service models and deployment models Cloud infrastructure vulnerabilities Cloud attacks and misconfiguration risks Identity and access management in cloud environments Cloud security controls and best practices
Module 20: Cryptography Cryptography fundamentals and terminology Symmetric and asymmetric encryption Hashing algorithms and digital signatures Public Key Infrastructure (PKI) Cryptographic attacks and vulnerabilities Encryption implementation and security best practices