● What is Cybersecurity?
● Threats, vulnerabilities, and risks
● Types of cyber attacks (malware, phishing, DDoS, ransomware)
● Cybersecurity domains (network, application, endpoint, cloud, etc.)
● Security goals: Confidentiality, Integrity, Availability (CIA Triad)
● Cybersecurity frameworks: NIST, ISO/IEC 27001

● Who are hackers? Black Hat, White Hat, Grey Hat
● Principles of ethical hacking
● Legal considerations and compliance (Computer Fraud and Abuse Act, GDPR,
HIPAA)
● Penetration testing lifecycle
● Bug bounty programs and responsible disclosure

● Installing and configuring VMware/VirtualBox for a controlled testing
environment
● Installing Kali Linux and setting up essential tools (Metasploit, Nmap, Burp
Suite)
● Configuring a target machine (e.g., Metasploitable) for penetration testing
practice

● OSI & TCP/IP models
● IP addressing, DNS, DHCP, NAT
● Ports and protocols (TCP, UDP, ICMP)
● Network scanning basics
● Wireshark & packet analysis

● Configure a virtual network with multiple machines (attacker, target, defender)
● Perform basic ping tests, and use traceroute to understand network topology
● Analyze network traffic using Wireshark to capture TCP/IP packets and identify
protocols and ports

● Passive vs active reconnaissance
● WHOIS, nslookup, Shodan
● Google hacking and OSINT tools
● Social engineering basics

● Use Nmap for network mapping and service discovery on a target network
● Perform a WHOIS lookup, DNS enumeration, and search for subdomains
● Conduct Google Dorking for OSINT and perform Maltego data collection
● Engage in a simulated social engineering attack using phishing techniques

● Port scanning with Nmap
● Banner grabbing and version detection
● Identifying services and vulnerabilities
● SMB, SNMP, NetBIOS enumeration

● Conduct port scanning and service detection using Nmap on a target network
● Use Nessus to perform a vulnerability assessment of a target machine
● Perform SMB enumeration and SNMP enumeration on a network of machines

● Exploitation basics (Metasploit framework)
● Password attacks (Brute-force, Dictionary, Rainbow tables)
● Privilege escalation (Linux & Windows)
● Maintaining access and clearing tracks

● Use Metasploit to exploit vulnerabilities in a controlled lab environment
● Develop custom exploits using Metasploit and execute them in a controlled
setup

● OWASP Top 10 (XSS, SQLi, CSRF, SSRF, etc.)
● Burp Suite intro
● Input validation and parameter tampering
● Exploiting authentication flaws

● Use Burp Suite to intercept HTTP requests and test for vulnerabilities like SQL
injection and XSS
● Conduct a SQL injection attack on a vulnerable web application
● Perform Cross-Site Scripting (XSS)
● Implement session hijacking techniques in a vulnerable application

● Types of malware (viruses, worms, trojans, RATs)
● Static and dynamic malware analysis
● Exploit development basics
● Antivirus evasion and encoding

● Introduction to Defensive Security
● Blue Team vs Red Team vs Purple Team
● Security controls (preventive, detective, corrective)
● Firewall, IDS/IPS, SIEM tools (Splunk)
● Endpoint security: Antivirus, EDR (Endpoint Detection and Response)

● Configure and test an Intrusion Detection System (IDS) using tools like Snort
● Implement and test firewall rules

● What is a SOC?
● SOC tiers: Tier 1 (monitoring), Tier 2 (analysis), Tier 3 (threat hunting)
● Role of SIEM (Security Information and Event Management)
● Common SOC tools: ELK Stack, Splunk, AlienVault
● Log sources: firewall, endpoint, proxy, authentication systems

● Threat monitoring and incident detection
● Event triage and escalation
● Incident response and containment
● Forensics and root cause analysis
● Reporting and compliance

● Threat intelligence lifecycle
● IOC vs IOA
● Cyber kill chain and MITRE ATT&CK
● Incident response lifecycle (Preparation, Detection, Containment, Eradication,
Recovery)
● Forensic acquisition tools (FTK Imager, Autopsy)

● Perform incident response simulations to handle security breaches and gather
forensic data

● Introduction to CTF competitions and platforms (e.g., Hack The Box,
TryHackMe)
● Hands-on challenges: Solving real-world cybersecurity puzzles in a simulated
environment
● Practical application of penetration testing and defense strategies learned
throughout the course

● Participate in a CTF competition to solve real-world puzzles