WHAT YOU WILL LEARN

Upon successful completion of this course, the students will be able to plan and scope penetration tests by defining rules of engagement, selecting targets, and establishing testing timelines. They will ensure legal and ethical compliance through proper authorization and adherence to relevant regulations. Students will communicate effectively with stakeholders, conduct peer reviews, and articulate risk clearly. They will perform both active and passive reconnaissance using OSINT, network sniffing, and tools like Nmap, Wireshark, and Shodan. Students will apply enumeration techniques and customize scripts in Python, PowerShell, and Bash for reconnaissance. They will carry out vulnerability scans (authenticated/unauthenticated, SAST/DAST), analyze results, and validate findings using tools like Nessus, Nikto, and OpenVAS. The course covers a range of attack methods, including network, authentication, host-based, web application, and cloud-based attacks, as well as emerging threats targeting AI systems. Students will engage in post-exploitation activities such as persistence, lateral movement, and cleanup, and will document attack narratives with remediation recommendations.