Professional Ethical Hacking Course

Theory Curriculum (Detailed)

  • Module 1: Introduction to Ethical Hacking
    • What is Hacking? Types of Hackers
    • Role of Ethical Hackers
    • Phases of Hacking
    • Legal and Regulatory Compliance
  • Module 2: Footprinting and Reconnaissance
    • Active vs. Passive Recon
    • OSINT Techniques
    • Tools: Whois, Nslookup, Shodan, theHarvester
    • Google Hacking (Dorks)
  • Module 3: Scanning and Enumeration
    • Network Scanning Techniques
    • Port Scanning (Nmap, Netcat)
    • Service and Version Detection
    • Banner Grabbing
    • Enumeration Protocols (SMB, SNMP, LDAP)
  • Module 4: Vulnerability Assessment
    • Understanding CVE, CVSS
    • Introduction to Vulnerability Scanning Tools (Nessus, OpenVAS, Qualys)
    • Interpreting Reports
  • Module 5: System Hacking
    • Exploiting OS Vulnerabilities
    • Password Cracking (Hashcat, John the Ripper)
    • Privilege Escalation
    • Maintaining Access
  • Module 6: Malware & Backdoors
    • Types of Malware (Trojan, Worm, Ransomware)
    • Creating & Analyzing Malware
    • Detecting and Removing Backdoors
  • Module 7: Sniffing and Spoofing
    • Packet Sniffing with Wireshark
    • ARP Poisoning
    • DNS & IP Spoofing
    • MITM Attacks
  • Module 8: Social Engineering
    • Psychological Manipulation Techniques
    • Email Phishing, Pretexting, Baiting
    • Social Engineering Toolkit (SET)
  • Module 9: Denial of Service Attacks
    • Types of DoS & DDoS
    • Botnets & Detection
    • Tools: LOIC, HOIC
    • Defense Strategies
  • Module 10: Web Application Hacking (OWASP Top 10)
    • SQL Injection
    • XSS (Reflected, Stored, DOM-based)
    • Command Injection
    • File Upload & Path Traversal
    • Broken Authentication
  • Module 11: Wireless Network Hacking
    • Wireless Encryption (WEP/WPA/WPA2)
    • Aircrack-ng Suite
    • Evil Twin Attacks
    • Rogue Access Points
  • Module 12: Mobile & Cloud Hacking (Intro)
    • Android APK Reverse Engineering
    • Cloud Misconfigurations
    • Access Control in Cloud Platforms (AWS/Azure Basics)
  • Module 13: Cryptography & Steganography
    • Symmetric vs. Asymmetric Encryption
    • Hashing Algorithms
    • Data Hiding Techniques (Image/Audio)
  • Module 14: Reporting & Documentation
    • Creating Professional Penetration Test Reports
    • Compliance Reports (PCI-DSS, ISO 27001 formats)
    • Risk Ratings, Mitigation & Recommendations
  •  

 

🕒 Class Schedule

                                                      Days: Monday to Thursday
                                                      Time: 8:00 AM – 9:30 AM
                                                      Duration: 60 Hours in Total