Learn ethical hacking
from scratch

Core concepts, the attacker mindset, and the legal landscape before you touch a single tool.

• – What is ethical hacking & bug bounty?
• – Legal frameworks, responsible disclosure
• – Career paths: pentest, bug bounty, red team
• – Building the attacker's mindset from day one

Kali Linux, VMs, Burp Suite, and every tool you'll rely on throughout the course.

• – Installing Kali Linux & VirtualBox/VMware
• – Configuring Burp Suite & browser proxying
• – Setting up isolated test environments
• – Essential tools: nmap, ffuf, gobuster, sqlmap

You can't hack systems you can't navigate. This module builds terminal fluency.

• – Terminal navigation & file system control
• – User permissions, privilege concepts & sudo abuse
• – Bash scripting for attack automation
• – Networking commands: netstat, curl, wget, ss

Every attack travels through a network. Understand what you're targeting before you exploit it.

• – TCP/IP model and packet flow
• – DNS resolution, HTTP/HTTPS mechanics
• – Proxies, firewalls, and NAT
• – Wireshark packet capture and traffic analysis

Full recon methodology, end to end.

• – Passive vs. active reconnaissance
• – Subdomain enumeration with amass & subfinder
• – Port and service scanning with nmap
• – Directory brute-forcing with ffuf & gobuster

What public data reveals about a target, and how to gather it systematically.

• – Google dorking & advanced search operators
• – Shodan, Censys, and internet-wide scanning
• – Social engineering intelligence gathering
• – Finding exposed credentials and data leaks

Every web vulnerability lives in the HTTP layer. This module covers it thoroughly.

• – HTTP request/response structure & anatomy
• – Cookies, sessions, JWTs, and authentication tokens
• – Same-origin policy, CORS, and CSP bypass
• – Intercepting and modifying traffic in Burp Suite

Proxy, repeater, intruder, scanner: every feature you'll use in real testing.

• – Proxy setup and live traffic interception
• – Repeater for manual request manipulation
• – Intruder for fuzzing, brute-force, and parameter tampering
• – Scanner, Collaborator, and extensions (Turbo Intruder, Autorize)

SQLi, XSS, IDOR, SSRF, LFI: every class exploited hands-on in labs.

• – SQL injection: error-based, blind, time-based, OOB
• – Cross-Site Scripting (XSS): reflected, stored, DOM
• – Insecure Direct Object References (IDOR) & BOLA
• – SSRF, open redirects, path traversal, and file inclusion

Every critical category, demonstrated live rather than just defined.

• – A01 Broken Access Control & BOLA exploitation
• – A02 Cryptographic failures & weak cipher attacks
• – A03 Injection attacks: SQL, NoSQL, command injection
• – A07 Auth failures: session fixation, brute-force, MFA bypass

REST, GraphQL, and logic flaw exploitation covered in full.

• – REST API recon and endpoint enumeration
• – GraphQL introspection, query injection & batching attacks
• – OWASP API Top 10: every category exploited
• – Authentication bypass, rate-limit evasion, and mass assignment

Beyond the web: scan, enumerate, and exploit network services.

• – Network scanning & host discovery with nmap
• – Service exploitation with Metasploit
• – Password attacks: brute-force, credential stuffing
• – Post-exploitation: privilege escalation basics

AD is in every enterprise. Enumeration, lateral movement, and privilege escalation.

• – Active Directory structure and attack surface
• – BloodHound for AD enumeration and path mapping
• – Kerberoasting, Pass-the-Hash, and Pass-the-Ticket
• – Domain privilege escalation and persistence

The Android attack surface: static analysis, dynamic testing, and API interception.

• – Setting up MobSF and Android emulator
• – APK reverse engineering and static analysis
• – Dynamic testing with Frida and objection
• – Intercepting mobile API traffic with Burp Suite

A structured approach to hunting beyond the basics.

• – Chaining vulnerabilities for maximum impact
• – Business logic flaw identification and exploitation
• – Program selection and scope analysis strategy
• – Automation with custom scripts and Nuclei templates

Finding bugs is half the job. Reporting, platforms, portfolio, and first clients.

• – Writing high-impact pentest reports
• – Bug bounty platforms: HackerOne, Bugcrowd, Intigriti
• – Building a portfolio that wins jobs and clients
• – Freelancing rates, proposals, and landing first clients