Lead Ethical Hacker

Ethical Hacking Fundamentals

This module establishes the legal, ethical, and methodological foundations that distinguish authorised penetration testing from unauthorised intrusion.

Penetration Testing Frameworks and Standards

Participants examine how recognised methodologies and regulatory frameworks shape the structure and scope of a penetration test.

Engagement Scoping and Rules of Engagement

This module covers how to define test boundaries, obtain written authorisation, and set rules of engagement before any testing begins.

Passive Reconnaissance Techniques

Participants learn to gather target intelligence using open-source tools and public data sources without directly interacting with target systems.

Active Reconnaissance and Scanning

This module covers network scanning, service enumeration, and fingerprinting techniques used to build a detailed picture of the target environment.

Vulnerability Identification

Participants practise correlating gathered intelligence with known vulnerabilities to prioritise attack vectors before the exploitation phase.

Exploitation Concepts and Tools

This module introduces the tools and techniques commonly used to exploit identified vulnerabilities in a controlled, authorised context.

Web Application and Network Exploitation

Participants explore exploitation techniques targeting web application weaknesses and network-level vulnerabilities.

Gaining and Maintaining Access

This module addresses techniques for establishing initial access and maintaining a foothold within a target environment during an authorised test.

Post-Exploitation Techniques

Participants learn privilege escalation, lateral movement, and data exfiltration simulation techniques used to assess the real-world impact of a breach.

Covering Tracks and Clean-Up

This module explains how to restore systems to their pre-test state and document all changes made during the engagement.

Penetration Test Reporting

Participants practise writing structured reports that document findings, evidence, risk ratings, and remediation recommendations for different audiences.

Course Consolidation and Key Concept Review

This session revisits the most important concepts, techniques, and frameworks covered across the four preceding training days.

Practical Scenario Walkthrough

Participants work through an end-to-end penetration testing scenario to reinforce the full methodology from scoping through reporting.