+380 97 950 84 72 contact@karnesav.com
Live webinars on information security
Karnesav
Karnesav
Ethical Hacking Intermediate, career-changers into security

Introduction to Ethical Hacking and Penetration Testing

10 weeks, 5 hours per week
Introduction to Ethical Hacking and Penetration Testing

Penetration testing is a specific skill set that takes time to develop. This course does not promise to turn you into a professional pentester in a few weeks. What it does is give you a working understanding of the methodology, the tools, and the mindset used in real engagements.

Prerequisites

You should be comfortable with Linux command line basics and have some understanding of networking. If TCP/IP is unfamiliar territory, completing a network fundamentals course first will make this material significantly more accessible.

The methodology matters as much as the tools

Many beginners focus on tools like Metasploit or Nmap without understanding what they are actually doing. This course covers the reasoning behind each phase — why you enumerate before you exploit, why documentation matters, and what a real report looks like.

Lab environment

All practical work happens in an isolated virtual lab. You will work against intentionally vulnerable machines — Metasploitable, DVWA, and custom targets — without any risk to real systems. Each lab has defined objectives and a walkthrough available after your attempt.

The course covers legal and ethical boundaries in detail. Unauthorized testing is illegal regardless of intent. Understanding scope, authorization, and rules of engagement is part of the curriculum, not a footnote.

A test without a written scope agreement is not a pentest. It is trespassing.
Students who complete this course are prepared to attempt the eJPT certification exam.
Program

  1. Penetration Testing Methodology

    Phases of an engagement, scoping, authorization, and legal boundaries.

  2. Reconnaissance and OSINT

    Passive and active information gathering using Maltego, Shodan, and manual techniques.

  3. Scanning and Enumeration

    Nmap, service fingerprinting, and vulnerability scanning with OpenVAS.

  4. Exploitation Basics

    Understanding CVEs, using Metasploit, and manual exploitation of simple vulnerabilities.

  5. Web Application Testing

    SQL injection, XSS, and directory traversal using Burp Suite and OWASP targets.

  6. Post-Exploitation and Pivoting

    Privilege escalation, lateral movement, and persistence concepts.

  7. Reporting

    Writing findings, severity ratings, and remediation recommendations.

  8. Capstone Lab

    Full simulated engagement against a multi-machine network with a written report submission.