Penetration Testing

Lessons

1. 1

   Ethics and the Law (Mandatory First)

   Internalise the legal frame for authorized testing before learning any technique.

   Beginner·45 min
2. 2

   What is Penetration Testing?

   Understand ethical hacking, black/white/gray box testing types, and legal considerations.

   Beginner·30 min
3. 3

   Reconnaissance and Information Gathering

   Use passive and active reconnaissance techniques including OSINT, Nmap, and DNS enumeration.

   Beginner·45 min
4. 4

   Scanning and Enumeration

   Study port scanning and service enumeration in depth to identify potential entry points.

   Intermediate·50 min
5. 5

   Exploitation Basics

   Learn common exploit types and use Hydra for password attacks against practice targets.

   Intermediate·50 min
6. 6

   Web Application Penetration Testing

   Test web apps with BurpSuite for SQL injection and XSS using PicoCTF web challenges.

   Intermediate·60 min
7. 7

   Post-Exploitation and Reporting

   Learn post-exploitation concepts, privilege escalation, and write a professional pen test report.

   Intermediate·45 min
8. 8

   Advanced Tools and CTF Practice

   Use Wireshark and Nmap NSE scripts and complete a full CTF machine from start to finish.

   Advanced·60 min
9. 9

   Penetration Testing Resources and Next Steps

   Explore curated resources, certifications (PenTest+, eJPT, OSCP, CEH), and CTF platforms.

   Beginner·30 min
10. 10

    Passion Project: HTB Starting Point Walkthrough

    Complete an HTB Starting Point machine end-to-end and produce the professional pentest report.

    Intermediate·120 min
11. 11

    Penetration Testing Job Readiness

    Translate pentest skills into a resume, portfolio plan, and interview prep for junior pentest roles.

    Beginner·30 min