● LIVE COURSE FILE // EH-101
STATUS: ACTIVE · CLEARANCE: BEGINNER
Cybersecurity Training Program
  root@syllabus:~
$cat course_manifest.txt
Loading curriculum... 22 sessions found. Duration: 44:00:00. Level: BEGINNER. Access granted.

Ethical Hacking Fundamentals

A 44-hour, hands-on introduction to offensive security — from networking foundations and Linux basics through reconnaissance, scanning, and beginner-level exploitation concepts, delivered in 22 two-hour sessions.

44h
Total Runtime
22
Sessions · 2h/day
5
Course Phases
01
Clearance Level

Briefing / Program Overview

01
// AUDIENCE

Who this is for

  • Complete beginners to cybersecurity
  • IT / helpdesk staff moving into security
  • Students preparing for CEH / Security+ style paths
  • No prior hacking or programming experience required
// PREREQUISITES

Before you start

  • Laptop with 8GB+ RAM, virtualization enabled
  • Basic comfort using a computer (any OS)
  • Reliable internet connection
  • Curiosity and willingness to read documentation
// OUTCOMES

By session 22 you can

  • Set up and navigate a Kali Linux lab
  • Perform recon, scanning & enumeration on lab targets
  • Explain and demonstrate beginner-level exploit concepts
  • Write a basic penetration test report
!

SCOPE OF AUTHORIZATION

Every technique in this course is taught strictly for use in isolated lab environments and authorized penetration testing engagements. Session 1 covers the legal framework (Computer Misuse Act / CFAA-equivalent laws, written authorization, scope agreements) before any tool is touched. Unauthorized access to systems you do not own or have written permission to test is illegal in virtually every jurisdiction.

Session Log

PHASE 01 Foundations Sessions 01–05 · 10h
EH-01 Introduction to Cybersecurity & Ethical Hacking Low Risk Day 1 · 2h ▸

Overview

Frames the entire course: what ethical hacking is, how it differs from criminal hacking, and the legal boundaries that make everything else in this program permissible to practice.

Topics Covered

  • CIA Triad — Confidentiality, Integrity, Availability
  • Hacker classifications: white/grey/black hat
  • Laws & frameworks: unauthorized access statutes, scope docs
  • The Penetration Testing lifecycle overview

Tools Introduced

None (theory session)

Learning Objectives

  • Define the 5 phases of ethical hacking
  • Explain why written authorization is mandatory

// HANDS-ON

Draft a mock "Rules of Engagement" document for a fictional client, defining scope, exclusions, and authorization signatures.

EH-02 Networking Fundamentals I — OSI & TCP/IP Low Risk Day 2 · 2h ▸

Overview

Every attack technique later in the course rests on understanding how packets actually move. This session builds that mental model from the ground up.

Topics Covered

  • OSI 7-layer model, mapped to real traffic
  • TCP/IP stack, encapsulation
  • IPv4 addressing, subnetting basics
  • MAC addresses & ARP

Tools Introduced

ipconfig / ifconfig ping traceroute

Learning Objectives

  • Diagram how a packet crosses the OSI layers
  • Calculate a basic subnet mask

// HANDS-ON

Map your home/lab network: identify your IP, gateway, subnet, and trace the route to a public site.

EH-03 Networking Fundamentals II — Ports, Protocols & DNS Low Risk Day 3 · 2h ▸

Overview

Zeroes in on the services attackers actually target: what runs on which port, how DNS resolves names, and how HTTP/HTTPS traffic is structured.

Topics Covered

  • TCP vs UDP, 3-way handshake
  • Common ports: 21, 22, 23, 25, 53, 80, 443, 445, 3389
  • DNS record types & resolution flow
  • HTTP request/response anatomy

Tools Introduced

nslookup dig Wireshark (intro view)

Learning Objectives

  • Identify a service from its port number
  • Read a raw HTTP request

// HANDS-ON

Use dig/nslookup to resolve a domain's A, MX, and TXT records; capture and inspect one HTTP request in Wireshark.

EH-04 Linux Fundamentals I — Filesystem & Core Commands Low Risk Day 4 · 2h ▸

Overview

Kali Linux is the working environment for the rest of the course — this session builds command-line fluency before any security tool is touched.

Topics Covered

  • Linux filesystem hierarchy
  • Navigation: ls, cd, pwd, find
  • File permissions & ownership (chmod/chown)
  • Users, groups, sudo

Tools Introduced

Kali Linux Bash man pages

Learning Objectives

  • Navigate a Linux filesystem confidently
  • Modify file permissions correctly

// HANDS-ON

Complete a scavenger hunt of 15 terminal challenges (find hidden files, change permissions, create/copy/move files) inside Kali.

EH-05 Linux Fundamentals II — Scripting & Package Management Low Risk Day 5 · 2h ▸

Overview

Introduces just enough Bash scripting to automate repetitive recon tasks later, plus how to install and manage the security tools used throughout the course.

Topics Covered

  • Bash variables, loops, conditionals
  • apt package management
  • Piping & redirection
  • Text processing: grep, awk, cut

Tools Introduced

Bash scripting apt grep / awk

Learning Objectives

  • Write a simple Bash script with a loop
  • Chain commands with pipes to filter output

// HANDS-ON

Write a script that pings a list of IPs from a text file and reports which are alive.

PHASE 02 Lab Setup & Reconnaissance Sessions 06–10 · 10h
EH-06 Building Your Home Lab Low Risk Day 6 · 2h ▸

Overview

A safe, isolated, legal practice range is essential. This session gets every student's lab running before any live technique is taught.

Topics Covered

  • Type 2 hypervisors: VirtualBox / VMware
  • Isolated (host-only/NAT) network configuration
  • Installing Kali Linux as attacker VM
  • Installing Metasploitable2 / DVWA as legal targets

Tools Introduced

VirtualBox Kali Linux Metasploitable2 DVWA

Learning Objectives

  • Configure an isolated virtual lab network
  • Verify attacker VM can reach target VM only

// HANDS-ON

Stand up Kali + Metasploitable2 on a host-only network; confirm connectivity with a ping test and screenshot the topology.

EH-07 Footprinting & OSINT Low Risk Day 7 · 2h ▸

Overview

The first real phase of a penetration test: gathering public information about a target without touching it directly.

Topics Covered

  • Passive vs active reconnaissance
  • WHOIS & domain intelligence
  • Google dorking basics
  • Social media & metadata leakage

Tools Introduced

whois theHarvester Shodan (intro) exiftool

Learning Objectives

  • Build a target profile from public sources only
  • Extract metadata from a sample document

// HANDS-ON

Run theHarvester against a permitted training domain and compile a one-page OSINT summary.

EH-08 Scanning Networks with Nmap Medium Risk Day 8 · 2h ▸

Overview

Moves from passive to active recon: discovering live hosts, open ports, and running services on the lab network.

Topics Covered

  • Host discovery & ping sweeps
  • TCP connect vs SYN scans
  • Service & version detection
  • Scan timing and stealth considerations

Tools Introduced

Nmap Zenmap

Learning Objectives

  • Run and interpret an Nmap SYN scan
  • Identify open ports and their likely services

// HANDS-ON

Scan Metasploitable2 with Nmap (-sS -sV), document every open port and the service running on it.

EH-09 Enumeration — SMB, NetBIOS & SNMP Medium Risk Day 9 · 2h ▸

Overview

Digs deeper than scanning: extracting usernames, shares, and system details that turn an open port into a usable lead.

Topics Covered

  • NetBIOS & SMB enumeration
  • Null sessions
  • SNMP enumeration basics
  • Enumerating users & shares

Tools Introduced

enum4linux smbclient snmpwalk

Learning Objectives

  • Enumerate SMB shares on a lab target
  • Explain why null sessions are a risk

// HANDS-ON

Run enum4linux against Metasploitable2, list discovered shares and usernames in a findings table.

EH-10 Vulnerability Assessment Medium Risk Day 10 · 2h ▸

Overview

Introduces automated vulnerability scanning — how testers translate an open service into a documented, ranked weakness.

Topics Covered

  • CVE / CVSS scoring basics
  • Vulnerability scanner architecture
  • False positives & manual verification
  • Prioritizing findings by risk

Tools Introduced

OpenVAS Nessus Essentials

Learning Objectives

  • Run a full vulnerability scan against a lab target
  • Rank three findings by CVSS severity

// HANDS-ON

Scan Metasploitable2 with OpenVAS; export the report and highlight the top 5 critical findings.

PHASE 03 Exploitation Concepts Sessions 11–16 · 12h
EH-11 System Hacking Concepts — Authentication & Password Attacks High Risk Day 11 · 2h ▸

Overview

Introduces how authentication can fail: weak passwords, hashing, and the basics of how password-cracking tools work — practiced only against lab-generated hashes.

Topics Covered

  • Password hashing (MD5, SHA, bcrypt) basics
  • Dictionary vs brute-force attacks
  • Rainbow tables concept
  • Password policy defenses

Tools Introduced

John the Ripper Hashcat (intro)

Learning Objectives

  • Explain why hashing ≠ encryption
  • Crack a sample weak-password hash in the lab

// HANDS-ON

Use John the Ripper with rockyou.txt against instructor-provided sample hashes; document time-to-crack for weak vs medium passwords.

EH-12 Malware Threats — Concepts & Classification Low Risk Day 12 · 2h ▸

Overview

A theory-focused session on how malware is classified and behaves. No malicious code is written or distributed — the focus is defensive awareness.

Topics Covered

  • Viruses, worms, trojans, ransomware — definitions & differences
  • Infection vectors & propagation methods
  • Indicators of compromise (IOCs)
  • Antivirus & EDR fundamentals

Tools Introduced

VirusTotal Any.Run (overview only)

Learning Objectives

  • Classify a malware sample by type from its behavior
  • List 3 common indicators of compromise

// HANDS-ON

Analyze a public VirusTotal report for a known malware family and summarize its behavior and IOCs.

EH-13 Sniffing — Traffic Capture & Analysis Medium Risk Day 13 · 2h ▸

Overview

Shows how unencrypted traffic can be intercepted on a local network, and why switching, encryption, and segmentation matter as defenses.

Topics Covered

  • Promiscuous mode & packet capture basics
  • ARP spoofing concept (lab-only demo)
  • Reading captured HTTP/FTP credentials
  • Defenses: switched networks, TLS, port security

Tools Introduced

Wireshark tcpdump

Learning Objectives

  • Capture and filter traffic in Wireshark
  • Identify plaintext credentials in a sample capture

// HANDS-ON

Capture FTP login traffic on the isolated lab network with Wireshark and locate the plaintext credentials in the stream.

EH-14 Social Engineering Low Risk Day 14 · 2h ▸

Overview

Covers the human side of security — how attackers manipulate people, and how awareness training and policy reduce that risk.

Topics Covered

  • Pretexting, phishing, baiting, tailgating
  • Anatomy of a phishing email
  • Authorized phishing simulations
  • Building a security-awareness culture

Tools Introduced

GoPhish (overview)

Learning Objectives

  • Spot red flags in a phishing email
  • Design an authorized awareness campaign outline

// HANDS-ON

Analyze 5 sample phishing emails and annotate every red flag found in each.

EH-15 Denial-of-Service Concepts Medium Risk Day 15 · 2h ▸

Overview

Explains how availability attacks work at a conceptual level and, more importantly, how services are architected to withstand them.

Topics Covered

  • Volumetric vs application-layer DoS
  • DDoS & botnet concept
  • Rate limiting & traffic scrubbing defenses
  • Case study walkthrough (public incident)

Tools Introduced

hping3 (lab demo only)

Learning Objectives

  • Distinguish volumetric from application-layer attacks
  • Explain two mitigation strategies

// HANDS-ON

Observe an instructor-led, contained hping3 demo against a lab-only target and log the traffic pattern in Wireshark.

EH-16 Session Hijacking Concepts Medium Risk Day 16 · 2h ▸

Overview

Covers how session tokens and cookies can be stolen or predicted, and why secure session management matters for every web app.

Topics Covered

  • Cookies & session tokens explained
  • Session fixation vs hijacking
  • Secure/HttpOnly cookie flags
  • Defenses: token rotation, HTTPS everywhere

Tools Introduced

Browser dev tools Burp Suite (intro)

Learning Objectives

  • Locate a session cookie in browser dev tools
  • Explain why the Secure flag matters

// HANDS-ON

Inspect session cookies on DVWA before/after login; identify missing security flags.

PHASE 04 Web, Wireless & Crypto Sessions 17–20 · 8h
EH-17 Web Application Security Basics — OWASP Top 10 Medium Risk Day 17 · 2h ▸

Overview

A guided tour of the ten most common web vulnerability categories, with a live look at each on the DVWA training app.

Topics Covered

  • OWASP Top 10 walkthrough
  • Broken access control & misconfiguration
  • Cross-Site Scripting (XSS) concept
  • Input validation fundamentals

Tools Introduced

DVWA Burp Suite Community

Learning Objectives

  • Name and describe 5 OWASP Top 10 categories
  • Trigger a basic reflected XSS in DVWA (low security)

// HANDS-ON

Complete the XSS and access-control modules in DVWA (low difficulty) and document the payloads used.

EH-18 SQL Injection Fundamentals High Risk Day 18 · 2h ▸

Overview

A focused, hands-on look at how unsanitized input lets attackers manipulate database queries — and how parameterized queries prevent it.

Topics Covered

  • How SQL queries are built from user input
  • Classic vs blind SQL injection concept
  • Authentication bypass via injection
  • Defenses: prepared statements, ORM, WAFs

Tools Introduced

DVWA sqlmap (intro)

Learning Objectives

  • Craft a basic injection to bypass a login form
  • Explain how prepared statements neutralize the attack

// HANDS-ON

Bypass DVWA's login (low security) using a classic SQLi payload, then re-attempt at high security to observe the fix in action.

EH-19 Wireless Network Security Basics Medium Risk Day 19 · 2h ▸

Overview

Covers how Wi-Fi security has evolved and where weaknesses remain, using an instructor-owned, isolated wireless lab.

Topics Covered

  • WEP vs WPA vs WPA2 vs WPA3
  • 4-way handshake concept
  • Rogue access points & evil twins
  • Wireless hardening best practices

Tools Introduced

Aircrack-ng suite (overview)

Learning Objectives

  • Explain why WEP is fundamentally broken
  • Identify a rogue AP scenario

// HANDS-ON

Instructor-led demo: capture a WPA2 handshake on the isolated lab AP and inspect it with Aircrack-ng (no external cracking of live networks).

EH-20 Cryptography Basics Low Risk Day 20 · 2h ▸

Overview

Grounds students in the crypto concepts referenced throughout the course: symmetric vs asymmetric encryption, hashing, and PKI.

Topics Covered

  • Symmetric vs asymmetric encryption
  • Hashing vs encryption (recap & deepen)
  • Digital certificates & PKI basics
  • Common crypto mistakes

Tools Introduced

OpenSSL (CLI) CyberChef

Learning Objectives

  • Generate a key pair with OpenSSL
  • Explain how HTTPS certificates establish trust

// HANDS-ON

Use OpenSSL to generate an RSA key pair and encrypt/decrypt a sample file; inspect a live site's certificate chain.

PHASE 05 Defense & Capstone Sessions 21–22 · 4h
EH-21 Firewalls, IDS/IPS & Honeypot Concepts Low Risk Day 21 · 2h ▸

Overview

Flips the course's perspective from attacker to defender: how the techniques taught so far are detected, logged, and blocked.

Topics Covered

  • Firewall types & rule basics
  • Signature vs anomaly-based IDS/IPS
  • Honeypots & deception concepts
  • Log review fundamentals

Tools Introduced

iptables/ufw Snort (overview)

Learning Objectives

  • Write a basic firewall rule
  • Explain how an IDS would flag an earlier lab's Nmap scan

// HANDS-ON

Configure a ufw ruleset to block a specific port; re-run the Session 8 Nmap scan and observe the result.

EH-22 Capstone Lab, Reporting & Career Paths Medium Risk Day 22 · 2h ▸

Overview

Brings every phase together in one guided mini-engagement against the lab environment, closing with how to document findings professionally and where to go next (CEH, OSCP, Security+).

Topics Covered

  • End-to-end mini penetration test (recon → report)
  • Executive summary vs technical findings
  • Remediation recommendations
  • Certification & career roadmap (CEH, OSCP, Security+)

Tools Introduced

All prior course tools Report template

Learning Objectives

  • Chain recon → scan → enumerate → report on a lab target
  • Produce a client-ready findings summary

// HANDS-ON — CAPSTONE

Run a full mini-assessment against a fresh Metasploitable2 instance and submit a written report: scope, methodology, findings ranked by severity, and remediation steps.