Cyber Security & Ethical Hacking (3 Months)

📝 Program Overview

This comprehensive program bridges foundational theory with hands-on exposure to industry-standard penetration testing toolkits and methodologies. Designed for aspiring security analysts and ethical hackers, the course navigates from fundamental networking and system internals to advanced web application exploitation, API security, and AWS cloud defenses.

Core Competencies Acquired:

                                ✓
                                Network scanning, OS footprinting, and deep reconnaissance.
                            

                                ✓
                                Web application exploitation using OWASP Top 10 vectors.
                            

                                ✓
                                Wireless security auditing, handshake analysis, and rogue AP detection.
                            

                                ✓
                                Malware fundamentals, indicators of compromise (IOCs), and triage.
                            

                                ✓
                                Android mobile application security & reverse engineering basics.
                            

                                ✓
                                Cloud security fundamentals focused on AWS infrastructure protection.
                            

📖 18-Module Detailed Syllabus

Click on any of the learning modules below to view the full topic outline.

01 Information Security Fundamentals

CIA Triad: Confidentiality, Integrity and Availability

Information Security Principles & Threat Landscapes

Types of Cyber Threats & Attack Vectors

Risk Assessment & Mitigation Frameworks

Security Controls (Administrative, Technical, Physical)

Authentication, Authorization, and Accounting (AAA)

Encryption & Cryptographic Primitives Basics

Security Policies, ISO 27001 & Compliance Basics

02 Introduction to Cyber Security & Threat Landscape

Cyber Security Overview & Industry Standards

Cyber Kill Chain & MITRE ATT&CK Framework

Hacker Classifications & Motives (White, Grey, Black Hat)

Modern Cyber Threat Actors & APT Groups

Offensive vs Defensive Domains

Ethical Hacking Rules of Engagement

Cyber Security Career Pathways

03 Networking Fundamentals for Security

OSI Model vs TCP/IP Protocol Suite

IPv4 / IPv6 Addressing, Subnetting & CIDR Calculations

Network Architecture: Routers, Switches, Firewalls, WAF

Core Protocols: HTTP, HTTPS, DNS, DHCP, FTP, SSH, SMB

TCP Three-Way Handshake & Port States

NAT, VPNs, and Network Segmentation

04 Footprinting & Reconnaissance

Active vs Passive Reconnaissance Strategies

WHOIS Lookup, ASN Mapping & DNS Enumeration

Google Dorking & Search Engine Exploitation

Open-Source Intelligence (OSINT) Frameworks

Social Media Intelligence (SOCMINT)

Corporate Email Enumeration & Breach Database Analysis

Document Metadata Extraction (ExifTool)

05 Network Scanning & Host Discovery

Host Discovery & ARP/ICMP Sweeps

TCP SYN, UDP, FIN, Null, and Xmas Scans

Nmap Scripting Engine (NSE) for Automation

Service Version Detection & Banner Grabbing

OS Fingerprinting via TCP Stack Analysis

Firewall & IDS Evasion Scanning Techniques

06 Vulnerability Assessment

Vulnerability Lifecycle & Management Programs

CVE, CWE, and CVSS v3.1 Scoring Metrics

Enterprise Scanners: Nessus, OpenVAS, Nexpose

Distinguishing Real Vulnerabilities from False Positives

Risk Prioritization Matrix & Patch Validation

07 Web Application Security & OWASP Top 10

OWASP Top 10 Vulnerabilities Deep-Dive

SQL Injection (Error, Boolean, Time-Based, UNION)

Cross-Site Scripting (Stored, Reflected, DOM-Based XSS)

Broken Authentication & Session Management

Broken Access Control & IDOR Vulnerabilities

Unrestricted File Upload Exploitation

Burp Suite Professional Interception & Repeater

08 Password Security & Cryptanalysis

Hashing Algorithms: MD5, SHA-1, SHA-256, bcrypt, NTLM

Dictionary Attacks, Wordlists (SecLists, RockYou)

Brute-Force & Mask Attacks with Hashcat / John the Ripper

Rainbow Tables, Salts, and Cryptographic Salting

Multi-Factor Authentication (MFA/2FA) Architectures

09 Wireless Security & Auditing

IEEE 802.11 Protocols & Frequency Bands

WEP, WPA, WPA2-PSK, and WPA3 Security Standards

Monitor Mode & Packet Sniffing with Aircrack-ng Suite

Capturing & Analyzing 4-Way EAPOL Handshakes

Evil Twin & Rogue Access Point Deployments

10 Malware Fundamentals & Threat Analysis

Malware Categorization: Viruses, Worms, Trojans, Rootkits

Ransomware Mechanics & Encryption Payloads

Command & Control (C2) Communication Structures

Static Analysis: Strings, PE Headers, Hash Verification

Dynamic Analysis: Sandbox Behavioral Execution

11 Network Traffic & Man-in-the-Middle (MITM)

Packet Sniffing and Filtering with Wireshark

ARP Poisoning & Layer-2 Redirection Mechanics

DNS Spoofing & Cache Poisoning Techniques

SSL/TLS Stripping and Certificate Inspection

Defenses: Dynamic ARP Inspection, DHCP Snooping

12 Social Engineering & Human Vulnerabilities

Psychological Influence Triggers in Cyber Attacks

Phishing, Spear Phishing, and Whaling Frameworks

Vishing (Voice) and Smishing (SMS) Scenarios

Pretexting, Baiting, and Physical Tailgating

Enterprise Social Engineering Defense & Training

13 Penetration Testing Methodologies & PTES

PTES (Penetration Testing Execution Standard)

Scoping, Pre-engagement, and Legal Contracts

Threat Modeling & Attack Surface Identification

Exploitation with Metasploit Framework

Post-Exploitation & Linux/Windows Privilege Escalation

14 Security Report Writing & Executive Communication

Enterprise Report Structure & Deliverables

Drafting C-Level Executive Summaries

Technical Proof-of-Concept (PoC) Documentation

Actionable Remediation Guidance & Timelines

15 Cyber Law, Compliance & IT Act

Information Technology Act (IT Act 2000 & Amendments)

Legal Status of Digital Evidence in Court

Global Privacy Regulations: GDPR, DPDP Act

Cyber Crime Reporting & Law Enforcement Coordination

16 API Security & REST Testing

REST vs SOAP Architecture & API Endpoints

API Authentication: API Keys, OAuth 2.0, JWT Tokens

OWASP API Security Top 10 Testing

BOLA, BFLA, and Mass Assignment Exploitation

17 Android Application Security Testing

Android OS Architecture & APK File Anatomy

Decompilation & Reverse Engineering with JADX / APKTool

Static Analysis for Hardcoded Secrets & Misconfigurations

Dynamic Analysis with Frida & Objection

18 Cloud Security & AWS Fundamentals

Cloud Shared Responsibility Model

AWS IAM: Users, Roles, Policies, and Least Privilege

S3 Bucket Security & Preventing Public Leaks

VPC Security Groups, Network ACLs, and CloudTrail

🛡️ Hands-On Tooling Lab Matrix

Gain operational mastery over standard security tools within dedicated virtual lab environments:

Nmap Wireshark Burp Suite Metasploit Hydra OWASP ZAP John the Ripper Hashcat Aircrack-ng Bettercap ExifTool Frida JADX Nessus AWS CLI Nikto

ℹ️ Controlled Training Environment: All offensive testing techniques are conducted exclusively against sanctioned cyber range labs in compliance with security guidelines.