Ethical Hacking Basics

Offensive security foundations, reconnaissance, network scanning, OWASP web application vulnerabilities, privilege escalation, and ethical reporting.

1Reconnaissance & OSINT Information Gathering

Passive vs active reconnaissance, DNS record enumeration, AXFR zone transfers, Certificate Transparency logs, and Google dorking.

Reconnaissance & OSINT Information Gathering

Explore OSINT methodologies, DNS zone transfer vulnerabilities, CT log aggregation, and search engine foot-printing.

Reconnaissance & OSINT Information Gathering

Master passive and active reconnaissance techniques, evaluate DNS AXFR zone transfer vulnerabilities, query Certificate Transparency logs, and execute targeted OSINT.

2Network Scanning & Vulnerability Assessment

TCP scanning states, SYN stealth scanning, inverse RFC 793 scans, OS fingerprinting, and CVSS v3.1 base score equations.

Network Scanning & Vulnerability Assessment

Deconstruct TCP 3-way handshake scanning, inverse FIN/Xmas scans, banner grabbing, and the CVSS v3.1 mathematical scoring algorithm.

Network Scanning & Vulnerability Assessment

Analyze TCP SYN stealth and inverse network scanning mechanics, execute remote OS fingerprinting, and calculate CVSS v3.1 vulnerability severity scores.

3Web Application Exploitation Paradigms

OWASP Top 10 vulnerabilities, SQL injection taxonomy, blind binary search exfiltration, XSS context execution, and cloud SSRF attacks.

Web Application Exploitation Paradigms

Examine SQL injection categories, binary search character extraction, Stored/Reflected/DOM XSS, and AWS IMDS cloud SSRF exploitation.

Web Application Exploitation Paradigms

Deconstruct SQL injection extraction mechanisms, implement Boolean blind binary search exfiltration, mitigate Cross-Site Scripting, and analyze cloud SSRF vectors.

4Post-Exploitation, Privilege Escalation & Reporting

Linux SUID/capability escalation, Windows token impersonation, GTFOBins, MITRE ATT&CK mapping, and penetration testing reporting.

Post-Exploitation, Privilege Escalation & Reporting

Master Linux SUID and POSIX capability escalation, Windows token impersonation, MITRE ATT&CK matrix alignment, and professional reporting.

Post-Exploitation, Privilege Escalation & Reporting

Audit local privilege escalation vectors using SUID binaries and Linux capabilities, analyze Windows token impersonation, map techniques to MITRE ATT&CK, and author professional penetration testing reports.