Ethical Hacking & Penetration Testing
For learners who have finished the foundations: perform and document authorised security testing, from reconnaissance and vulnerability assessment to scoping, ATT&CK-mapped methodology and professional reporting, always under a signed scope.
- Courses
- 2
- Study time
- 16 hours
- Lessons
- 12
- Practice labs
- 8
- Assessments
- 4
Courses in this path
Take them in this order. Each one has lessons, practice labs and an assessment.
Reconnaissance, OSINT & Vulnerability Assessment
Learn to gather intelligence passively and actively, enumerate hosts and services with Nmap, and turn raw scanner output into a prioritised,…
6 lessons, 4 labs, 2 assessments
View course →Penetration Testing Methodology & Reporting
Plan, scope and structure an authorised penetration test using recognised methodologies, map activity to MITRE ATT&CK, recognise…
6 lessons, 4 labs, 2 assessments
View course →What you will be able to do
A sample of the skills the courses in this path teach.
- Distinguish passive from active reconnaissance and justify which is permitted by a given scope
- Collect and interpret DNS, certificate-transparency, WHOIS and public-document intelligence for an organisation, within ethical limits
- Compare PTES, NIST SP 800-115 and the OWASP Web Security Testing Guide and choose an appropriate methodology
- Check a test plan against a rules-of-engagement document and identify scope, technique and time-window violations
Before you start
Foundations path: networking basics (TCP/IP, DNS), Linux command line, basic security concepts
Finish every lesson, lab and assessment of a course and you can claim a digitally signed certificate. Finish every course in the path and you can claim a path certificate too.