From zero to advanced penetration tester — learn networking, Linux, Python, web app testing, network attacks, privilege escalation, Active Directory, and red team operations through hands-on labs and real-world exploitation scenarios
Start with OSI model, TCP/IP, subnetting, and how packets flow across networks. Real example: tracing a DNS request from your browser to a server showing how ARP finds MAC addresses, DNS resolves names, and TCP establishes connections.
Every concept reinforced with VM labs (Metasploitable, HackTheBox, VulnHub), real network captures in Wireshark, and exploits you run yourself in safe environments. Real example: exploiting a real SQL injection in DVWA to extract database passwords.
12-week structured curriculum from basic Linux commands to full Active Directory attacks. Each week builds on the last - by Week 10 you're chaining Kerberoasting and Golden Ticket attacks on a simulated corporate network.
Integrated CTF practice with HackTheBox, TryHackMe, and Proving Grounds. Real example: solving a buffer overflow on THM using GDB and pwntools, then applying the same technique on an OSCP exam machine.
Write your own port scanners, auto-exploit scripts, and recon tools. Real example: building a Python script that crawls a target website, extracts forms, tests SQL injection points, and auto-generates a penetration test report.
Content aligned with OSCP exam structure (24-hour hands-on test), CEH (theory plus practical), and eJPT. Real example: after Week 12, you'll have solved 20 plus HTB machines and be ready to pass the OSCP exam on your first attempt.
Curated references to support your learning journey throughout the 12-week curriculum.
Comprehensive quick reference covering all tools you'll use across the course — from network scanners like Nmap and Nikto to privilege escalation exploits and web application testers. Each tool includes syntax examples, common use cases, and practical tips.
View Cheatsheet →Detailed breakdown of common vulnerabilities with real-world examples, exploitation techniques, and proven mitigation strategies. Covers OWASP Top 10, SANS CWE Top 25, and critical CVEs with hands-on remediation guidance.
View Vulnerabilities →Strategic guide for Capture The Flag competitions with platform recommendations (HackTheBox, TryHackMe, PentesterLab), category-specific tips (web, pwn, crypto, forensics), and a structured approach to building CTF skills progressively alongside this course.
View CTF Guide →Educational Use Only: All techniques and tools discussed in this guide are for authorized security testing, CTF challenges, and educational purposes only. Always obtain proper authorization before testing any system.
