Windows Administration Basics

• Windows Architecture / File System/ File Permissions
• Practical: SAM Files & System Files
• Password Hashing (LM, NTLM, Kerberos)
• Filesystem and Registry Structure
• User and Group Management

Windows Networking and Security

• Active Directory
• Lightweight Directory Access Protocol (LDAP)
• Task Scheduling
• Windows Event Logs
• Windows Networking Features (SMB, RDP, PowerShell Remoting)

Linux Fundamentals & Lab Setup

• Introduction to Linux
• Linux Architecture and Distributions
• Installing VirtualBox & Kali
• Shell and File System Basics
• User and Group Management
• File Permissions and Ownership (chmod)
• Linux Command (ifconfig, ip, netstat, etc.)
• Monitoring and Logs (top, ps, dmesg, syslog)

Introduction to Information Security and Ethical Hacking

• Types of Hackers
• CIA Triad
• Key Concepts and Terminologies (CVE, CVSS, TTPs)
• Cyber Kill Chain Methodology
• MITRE ATT&CK Framework
• Risk Management
• Verticals of security team in Industry
• Information Security Laws and Standards
• Cyber Law in different Countries

Footprinting and Reconnaissance

• What is Digital Footprinting
• Types of Information Gathered (Active/Passive)
• Social Engineering, Email Footprinting, and Website Footprinting (Dorking, Maltego, Spiderfoot, Shodan)
• Countermeasure
• Anonymization Tools

Network Exploration

• Overview of Network Scanning
• Types of Scans: TCP, SYN, ACK, and UDP Packet Crafting (Hping3, Scapy)
• Scanning (NMAP, Netcat, IKE Scan)
• Enumeration Techniques & Introduction to Metasploit
• NetBIOS Enumeration
• Enumerating SNMP using SnmpWalk and Nmap
• DOS Attacks (Syn flood, smurf attack, Ping of death)

Vulnerability Management

• Vulnerability Assessment Techniques
• Automated vs. Manual Assessment
• Types of Vulnerabilities: Network, System, and Application
• Tools for Vulnerability Analysis
• Nessus, OpenVAS, and Qualys (Practical)
• Interpreting Vulnerability Reports
• Prioritizing Vulnerabilities
• Remediation Strategies

Password Hacking

• Types & Techniques of Password Cracking
• Cracking Passwords (Bruteforce, SSH)
• Privilege Escalation & How to Defend Against Privilege Escalation
• Maintaining Access (RCE, Persistence) & Covering Tracks

Network Sniffing

• Network Sniffing Techniques
• Protocols Susceptible to Sniffing
• MAC Spoofing, ARP Poisoning
• DHCP & Starvation Attacks
• Countermeasures

Malware Analysis

• Types of Malware (Trojan, Fileless, Worms)
• Malware Analysis (Static/Dynamic) with tools

Wireless Network Hacking

• IEEE 802.11, Type of wireless networks
• Wireless Encryption Techniques
• Wireless Discovery with Tools
• Cracking WPA/WPA2
• MITM, Deauth Attack
• Evil Twin Attack

Web App Security

• Basics of how websites work – Client-Server model, HTTP request/respons
• HTTP headers – request, response, and security headers
• Introduction to Burp Suite – setup, intercept, repeater, intruder
• Web servers – Apache, IIS, Nginx basics & common misconfigurations
• OWASP Top 10 overview
• Evasion techniques – IDS/IPS bypass, honeypots detection
• Same Origin Policy & CORS exploitation
• Same Origin Policy & CORS exploitation
• Session hijacking & JWT token attacks
• Password brute-forcing techniques
• XSS (Reflected, Stored, DOM) & HTML injection
• OTP bypass attacks
• CSRF vs SSRF exploitation
• Parameter tampering & privilege escalation
• Clickjacking attacks
• File upload vulnerabilities & remote code execution
• SQL injection – classic, blind, time-based, error-based
• Buffer overflow in web context
• Countermeasures & secure coding practices for all vulnerabilities

Web servers – Apache, IIS, Nginx basics & common misconfigurations

• OWASP Top 10 overview
• Evasion techniques – IDS/IPS bypass, honeypots detection
• Same Origin Policy & CORS exploitation
• Session hijacking & JWT token attacks
• Password brute-forcing techniques
• XSS (Reflected, Stored, DOM) & HTML injection
• OTP bypass attacks
• CSRF vs SSRF exploitation
• Clickjacking attacks
• Parameter tampering & privilege escalation
• File upload vulnerabilities & remote code execution
• SQL injection – classic, blind, time-based, error-based
• Buffer overflow in web context
• Countermeasures & secure coding practices for all vulnerabilities

Introduction To Mobile Architecture

• OWASP Top 10
• Introduction to IOS & Android Architecture
• Rooting Android (ABD)

Mobile Application Pentesting

• Andro Rat
• Android Pentesting & Tools
• MDM & Mobile Security Guidelines

Cloud Security

• Cloud Computing Concepts
• Types of Cloud Services (IaaS, PaaS, SaaS)
• Cloud Deployment Models (Public, Private, Hybrid) (Practical)
• Cloud Security Challenges
• Data Breaches, Account Hijacking, and Insider Threats
• Cloud Security Tools
• CASBs, Cloud Encryption, and IAM Solutions

Incident Response and Handling

• Incident Response Methodology
• Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned
• Steps in Incident Handling
• Detection, Analysis, and Documentation Tools for Incident Response
• SIEMs, Forensic Tools, and Threat Intelligence Platforms (Practical)

Cryptography

• Cryptography Concepts and Encryption Algorithms
• Countermeasures

Interview Preparation

• Preparing for an Interview
• Interview Question Discussion

Analysing and Solving Vulnerable Machines: 1

• Reconnaissance (Information Gathering)
• Vulnerability Scanning
• Exploitation
• Privilege Escalation
• Post-Exploitation

Analysing and Solving Vulnerable Machines: 2

• Documentation
• Analysis
• Mitigation
• Reporting
• Cleanup and Restoration