Professional & investigative
The syllabus everyone studies, taught with labs, a report at the end, and a clear line on what is legal
This course follows the topics on the common ethical hacking syllabus, from reconnaissance and scanning to web application attacks, wireless, and social engineering, but it is not an exam-cram. Every week has a lab, the final project is a scoped test with a written report, and the first session is about the law, because an unauthorised scan in India is an offence, not a learning exercise.
- Duration
- 6 weeks, part-time
- Format
- Online / Onsite
- Language
- English
- Level
- Intermediate
- Group size
- 8 to 25
- Certificate
- Completion certificate on passing the final lab
- For
- IT professionals and students
What participants can do afterwards
- Understand the attack lifecycle and the methodology of a penetration test, from scoping and rules of engagement to reporting
- Perform reconnaissance, scanning and enumeration against lab targets, and interpret the results correctly
- Exploit common vulnerabilities in systems and web applications in a lab, including the OWASP Top 10 classes, and explain the fix for each
- Understand password attacks, wireless weaknesses, social engineering and malware behaviour well enough to defend against them
- Write a penetration test report with findings, severity, evidence and remediation that a client or an internal team can act on
- Know the legal boundaries under the IT Act 2000 and the CERT-In framework for security testing, and what written authorisation must contain
Modules
Week 1: the law, ethics and methodology
IT Act offences that apply to testing, authorisation and scoping, rules of engagement, CERT-In empanelment context, the test lifecycle, and lab set-up.
Week 2: reconnaissance, scanning and enumeration
Passive and active reconnaissance, network scanning, service enumeration, vulnerability scanning, and reading results without over-reporting.
Week 3: system attacks and privilege escalation
Exploitation basics, password attacks, Windows and Linux privilege escalation, persistence, and the defensive view of each.
Week 4: web application security
OWASP Top 10 classes with hands-on exploitation in a lab application, authentication and session flaws, and secure-coding fixes.
Week 5: wireless, social engineering and malware
Wireless weaknesses, phishing and pretexting as a tester, malware behaviour and detection, and where these fit in a scoped engagement.
Week 6: the final engagement
A scoped test against a prepared environment, a written report, and a review session where reports are critiqued as a client would.
Who should attend
- IT professionals moving into security testing or VAPT roles
- Developers who want to understand how their applications are attacked
- Students in computer science or IT with basic networking and operating-system knowledge
- IT managers who commission VAPT and want to understand what they are buying
- SOC and IT staff who want the offensive view to improve defence
Included
- Twelve live sessions over six weeks (two evenings or one weekend day a week), recorded
- A hosted lab environment with vulnerable systems and a web application, available throughout and for two weeks after
- A penetration test report template and a sample authorisation letter
- A reading list and practice resources for vendor-neutral certifications
- Completion certificate on passing the final lab and report
Frequently asked questions
Is this an official CEH course, and does it include the exam?
No. The syllabus is aligned to the topics commonly covered by ethical hacking certifications so the course is a strong preparation, but it is vendor-neutral, not affiliated with any certification body, and does not include any exam or voucher. Participants who want a certification afterwards get a reading list and guidance on which one fits their goals.
What do I need to know before starting?
Basic networking (TCP/IP, DNS, HTTP), familiarity with Linux and Windows at the command line, and comfort installing software. Some scripting in Python or Bash helps but is not required. Students in their final year of a computer science or IT programme are usually ready; others should work through the short pre-course material we send.
Is it legal to practise these techniques?
Only against systems you are authorised to test, which is why all labs run in a hosted environment built for the course. The first session covers the IT Act offences that apply to unauthorised access and scanning, what written authorisation must contain, and how professional testers stay within scope. Using course techniques against any other system is a criminal offence, and we say so plainly.
Can a company put a few of its IT staff through this?
Yes. Companies often send two or three IT staff so that they can run internal checks, understand VAPT reports from vendors and ask better questions. For a team of eight or more we can run a dedicated cohort with the final engagement built around a sanitised copy of a system type the company actually runs, with the report reviewed by their IT lead.
Request this program
Tell us the audience, headcount, city and preferred dates. We reply with an outline and quote.