Introduction to Cyber Security: The essential starting point: landscape of modern cyber threats, core domains of security, the CIA triad, threat modeling, and defense-in-depth principles.
Linux Essentials: Master the backbone of ethical hacking: Linux OS architecture, terminal fluency, file system hierarchy, package managers, and text processing pipelines.
Linux Administration: Operate enterprise Linux environments with security in mind: user identity, standard & special permissions (SUID/SGID/Sticky bit), cron, services, and audit trails.
Networking Fundamentals: Understand packet anatomy and protocol mechanisms: OSI vs TCP/IP models, IP addressing & CIDR subnetting, ARP, DNS, DHCP, and packet capture analysis with Wireshark.
Network Security: Defend corporate network perimeter and segmentation: DMZs, stateful firewalls, IDS/IPS signatures, IPsec & WireGuard VPNs, and honeypot deception strategies.
Vulnerability Management: Identify, classify, and remediate technical flaws before attackers find them. Master automated scanner orchestration, false-positive elimination, and CVSS v4.0 scoring.
Digital Forensics: Investigate security incidents like a forensic examiner: evidence handling and chain of custody, disk and memory analysis, Windows and Linux artefacts, timelines, and court-ready reporting.
Network Penetration Testing: Hands-on offensive methodologies: network reconnaissance, Nmap NSE scripting, vulnerability weaponization with Metasploit, password spraying, and network pivots.
Advanced Network Pentesting: Stealth penetration across hardened enclaves: EDR evasion, double-hop pivoting with Chisel and ligolo-ng, tunneling over DNS/ICMP, and buffer overflow exploitation.
Cryptography: Mathematical foundations of modern cybersecurity: symmetric vs asymmetric ciphers (AES, RSA, ECC), secure hashing algorithms, digital signatures, PKI, and TLS 1.3.
Active Directory Pentesting: Understand enterprise domain security in the lab: Kerberoasting, AS-REP roasting, DCSync, BloodHound graph theory, ACL abuse, and Domain Dominance persistence techniques.
Cyber Security Compliance: Bridge technical security to legal frameworks: DPDP Act 2023, ISO/IEC 27001:2022 ISMS implementation, PCI-DSS v4.0, NIST CSF 2.0, and vulnerability disclosure.
Web Fundamentals: How the web works under the hood: HTTP/1.1 vs HTTP/2/3, request headers, cookies & SameSite policies, CORS, JWT tokens, WebSockets, and browser security sandboxes.
Web Application Pentesting: Become a web application tester: a full OWASP Top 10 breakdown, SQL injection, Cross-Site Scripting (XSS), SSRF, IDOR, and Burp Suite automation.
Bug Bounty Secrets: Learn the legitimate bug bounty workflow: recon automation, asset discovery on HackerOne & Bugcrowd, business logic flaw discovery, and professional bug triaging.