What Is Ethical Hacking?
Understand what ethical hacking is, why organisations need it, and what separates it legally and ethically from cybercri…
Ethical Hacking
A professional, legal-first path through penetration testing methodology, vulnerability classes and tools, built around authorized, written-consent security testing.
Legal and Ethical Frameworks
Learn the authorization documents, laws and professional codes of conduct that make penetration testing legal.
Types of Penetration Testing
Compare black-box, white-box and grey-box testing and learn how to pick the right approach for a given objective.
The Penetration Testing Lifecycle
Walk through the repeatable stages a professional penetration test follows, from pre-engagement to retest.
Reconnaissance and OSINT Concepts
Learn how passive and active reconnaissance and open-source intelligence build a picture of a target before any testing…
Network Scanning Concepts
Understand the purpose of port and service scanning, the tradeoffs between scan types, and how to read results responsib…
Enumeration Concepts
Learn how enumeration builds a detailed picture of discovered services and why automated output must be verified.
Vulnerability Assessment vs Penetration Testing
Understand the difference between broad vulnerability assessments and deep, targeted penetration tests, and when to use…
Security Tools Landscape Overview
Learn the main categories of security testing tools, when open-source or commercial tools fit, and why human judgment st…
Capture the Flag as a Learning Tool
Learn how CTF competitions build offensive security skills legally and where their training value ends.
Common Vulnerability Classes
Understand the recurring vulnerability classes behind most real-world breaches, explained conceptually rather than as ex…
Web Application Testing Methodology
Learn the structured process of mapping, authentication testing and input review that professional web app assessments f…
Wireless Security Testing Concepts
Understand wireless encryption standards, rogue access points, and the extra legal care wireless testing requires.
Social Engineering Testing and Ethics
Learn how phishing simulations and pretexting test people and processes, and the strict ethical rules that govern human…
Password Security Testing Concepts
Understand why weak and reused passwords fail, how hashing works conceptually, and what a password security review actua…
Privilege Escalation Concepts
Understand vertical and horizontal privilege escalation, their common causes, and the principle of least privilege as a…
Post-Exploitation and Reporting Concepts
Learn how to demonstrate impact responsibly, collect proper evidence, and connect a confirmed weakness to business risk.
Writing a Professional Penetration Test Report
Learn the structure, audience-aware writing and outline that turns technical findings into an actionable, trusted report…
Risk Rating and CVSS Basics
Understand what CVSS measures, how base metrics work conceptually, and why severity needs business context.
Red Team vs Blue Team vs Purple Team
Understand the specialised roles of red, blue and purple teams and how they differ from a standard penetration test.
Bug Bounty Programs and Responsible Disclosure
Learn how bug bounty programs work, what coordinated disclosure means, and how to stay within scope and the law.
Client Communication and Scoping Engagements
Learn how to scope engagements, set honest expectations, and handle status updates and critical findings professionally.
Cloud Penetration Testing Considerations
Understand the shared responsibility model, common cloud misconfigurations, and provider testing policies that shape clo…
Mobile Application Security Testing Concepts
Understand platform differences, local storage and communication risks, and how reverse engineering is used to assess mo…
IoT Security Testing Concepts
Understand the constraints, firmware risks and physical-world consequences that make IoT security testing distinct.
Physical Security Testing Concepts
Understand physical pentesting goals, tailgating and badge cloning concepts, and the safety and authorization rules that…
Career Paths and Certifications
Explore the main ethical hacking career paths, an overview of major certifications, and how to build a credible portfoli…
Building a Home Lab Safely and Legally
Learn to build an isolated virtual lab with legal practice targets, keeping every test fully contained and legal.
Threat Modelling for Testers
Learn how testers use threat modelling and frameworks like STRIDE to focus limited testing time on the highest-risk area…
Capstone: Planning an Authorized Penetration Test Engagement
Bring every earlier lesson together by planning a complete, legal penetration test engagement from scoping to final repo…