Vulnerability Assessment & Ethical Hacking
Vulnerability Assessment & Ethical Hacking teaches you how to find security weaknesses and protect systems from attacks. Perfect for beginners and professionals.
Course Modules
Module 1: The Cybersecurity Mindset: Think Like an Attacker, Defend Like a Pro
Topics:
- The Cybersecurity Mindset
- Risk Management and Threat Modeling
- The Cybersecurity Mindset – Attacking and Defending
- CIA Triad, types of hackers (black/white/grey hat), ethics, legal frameworks (GDPR, HIPAA, PCI-DSS).
- Common attack vectors (phishing, malware, ransomware).
- Virtualization basics (Virtual Box, VMware).
Module 2: Kali Linux: Power, Precision, and Penetration Testing Mastery
Topics:
- VMware: Powering Virtualization, Empowering Innovation
- What is Kali Linux, The OS for Hackers
- Parrot OS: Security, Privacy, and Forensics—All in One
- Ubuntu: Linux for Human Beings, Power for Everyone
Module 3: Digital Footprints Unmasked: Mastering Recon & Subdomain Discovery
Topics:
What is Footprint?
What is Recon?
Subdomain concepts in cybersecurity?
DNS concepts?
Module 4: Master the Terminal: Shell Scripting for Power and Automation
Topics:
- How Sweet Is the Terminal?
- Commanding the Command Line Top 30 Linux Commands
- Stick to the Script
- GUI vs CLI
Module 5: Kali Linux: Power, Precision, and Penetration Testing Mastery
Topics:
- Advanced Bash
- Introduction to cron and Scheduled Job
- Sysadmin Essentials – Monitoring Log File
- Linux Scavenger Hunt
Module 6: PowerShell & Networking: Automate, Secure, and Dominate
Topics:
- Introduction to Windows and CMD
- PowerShell Scripting
- Introduction to Networking
- Ports, Protocols, and the OSI Model
Module 7: Networking and Web Fundamentals
Topics:
- What is Bruteforce?
- What is Dirbuster?
- Nmap Scan, the art of network scan, advanced network Scan
- Email Networks and Security
- Introduction to Firewalls and Network Security
Module 8: Revision
Topics:
- Nessus Scan
- Revision
- Introduction to CTF : Project
Module 9: OWASP Top 10 (SQLi, XSS, CSRF, IDOR)
Topics:
- Web app architecture (APIs, cookies, sessions).
- Tools: Burp Suite (interception, repeater, intruder), SQLmap.
- Exploit DVWA (Damn Vulnerable Web App): SQLi, XSS, file upload flaws.
Module 10: Web Security Fundamentals
Topics:
- LFI,RFI
- Directory Travarsal
Module 11:
Topics:
Scripting for Automation
Python basics: Sockets, HTTP requests, regex.
Automate scans (Nmap)
Labs
– Build a port scanner in Python
Module 12: Revised
Topics:
Web Project: OWASP Juice Shop Demo Report
Module 13: Mobile Security
Topics:
Mobile app testing: APK decompilation, MobSF, runtime analysis.
Reverse-engineer an APK to find hardcoded secrets.
Module 14: AD security
Topics:
Kerberoasting, Pass-the-Hash, Golden Ticket attacks.
BloodHound for AD mapping, lateral movement.
Module 15:
Topics:
- Certifications & Reporting
- OSCP/CEH/PenTest+ exam strategies.
- Professional report writing (executive summaries, technical details).
- Write a pentest report for a mock fintech startup.
- Solve OSCP-like machines on Hack the Box.
Module 16: Job Preparation
Topics:
Build a LinkedIn profile, GitHub portfolio, and resume.
Mock interviews with industry professionals.
Grow your career with SOC
01788999886 (Bangladesh)Meet Your Instructor Sumit
SUMIT DAS
👨💼 Assistant Manager, Red Team (USA)
🛡️ OSCP (Offensive Security Certified Professional)
🛡️ OffSec Certified Professional
🎓 Phishing Countermeasures
→ Charles Sturt University
🥇 Top 1% on(THM)
🔹 Experience
👨💼 Assistant Manager, Red Team (USA)
→ 2020- Present
🎓 Certifications
🛡️ OSCP – Offensive Security Certified Professional
🎯 CRTP – Certified Red Team Professional
🛠️ CNSS – Committee on National Security Systems Certification
🕵️♂️ CEH v11 – Certified Ethical Hacker Version 11
📋 ISO 27001LA – ISO 27001 Lead Auditor
🧾 ISO 27001LI – ISO 27001 Lead Implementer
🔐 AZ-500 – Microsoft Azure Security Engineer Associate
☁️ AZ-900 – Microsoft Azure Fundamentals
☁️ AWS CCP – AWS Certified Cloud Practitioner
🔒 CyberArk Trustee
🐍 Python Basic
🔍 Qualys Vulnerability Management
🔐 API Security Architect
🌐 Introduction to Packet Tracer(Cisco)
🛡️ Learn Burp Suite, the Nr. 1 Web Hacking Tool
🔹 Education
- Bachelor of Science in Computer Science
- Master of Technology in Cyber Security
🎓 Phishing Countermeasures
→ Charles Sturt University
🧠 Ethical Hacker
🥇 Top 1% on TryHackMe (THM)
Penetration Testing 🕵️♂️, Vulnerability Assessment 🛡️, Application Security 🔐, Cybersecurity 🛡️, Network Security 🌐, Python (Programming Language) 🐍, Kali Linux 🐧, OWASP ZAP 🛠️, Postman API 📦, Tenable Nessus 🐾, Wireshark 🦈, nmap 🗺️, OWASP 🌐, XSS 💻, CSRF 🕵️♂️, mobsf 📱, genymotion 🎮, API Testing 🔍, VAPT 🛡️, Burp Suite 🍔, Hydra 🐍, dirbuster 🧑💻, bandit 🦹♂️, Acunetix 🖥️, IBM app 💼, Source Intelligence 🌍, Forensic Analysis 🔍, dast 🧪, sast 🔐, Ethical Hacking 👨💻, CTF 🎯, Vulnerability Management 🛠️, Threat & Vulnerability Management 🚨, Cyber Threat Intelligence (CTI) 🌐, Threat Modeling 🎭, Bug Tracking 🐞, Security Awareness 🧠, Metasploit 💥.