Certified Ethical Hacker & Core Network Defense (CEH + CND)

Cyber Security

Certified Ethical Hacker & Core Network Defense (CEH + CND)

Go from networking fundamentals to full-scale ethical hacking and network defense - build attack infrastructure, exploit real vulnerabilities across Windows and Linux, and defend enterprise networks, all inside guided labs mapped to the CEH and CND blueprints.

26 Hands-On Lab Modules
Full Attack Lifecycle Coverage
Windows & Linux Privilege Escalation
4-Week Guided Security Internship

Get a Quote View All Cyber Security

What You Get

Full Course Curriculum

26 modules, from information security foundations to a guided capstone internship.

Module 1: Information Security Architecture & Governance

CIA Triad, defense-in-depth, zero-trust models, threat modeling, and regulatory compliance landscapes.

Module 2: Networking Foundations for Hackers

IPv4/IPv6 deep dive, subnetting, TCP/UDP 3-way handshakes, routing tables, and common service ports.

Module 3: Linux CLI & Environment Mastery for Security

BASH scripting, process management, file permissions, daemon administration, and text processing (grep, awk, sed).

Module 4: Windows Internals & Administration

Windows architecture, registry hives, services, access tokens, SAM database, and PowerShell scripting.

Module 5: Setting Up Attack Infrastructure & Labs

Hypervisors, Kali Linux setup, configuring dual-homed virtual subnets, and deploying vulnerable targets (Metasploitable, VulnHub).

Module 6: Passive Reconnaissance & Footprinting

DNS interrogations, Whois lookups, Google dorking syntax, Netcraft, archive searching, and leak database mining.

Module 7: Open Source Intelligence (OSINT) Gathering

People and company profiling using Maltego, Shodan, Censys, Recon-ng, Spiderfoot, and social media tracking.

Module 8: Active Reconnaissance & Network Discovery

ARP scanning, ICMP sweeps, live host identification, traceroute analysis, and firewall probing.

Module 9: Port Scanning & Fingerprinting with Nmap

TCP connect, SYN, FIN, Null, Xmas scans, version detection, OS fingerprinting, and timing templates (-T0 to -T5).

Module 10: Nmap Scripting Engine (NSE) & Automation

Writing custom Lua NSE scripts, running vulnerability detection scripts, and bypassing basic firewalls.

Module 11: Vulnerability Scanning with Nessus & OpenVAS

Policy configurations, credentialed vs. non-credentialed scanning, parsing .nessus reports, and reducing false positives.

Module 12: Network Sniffing & Man-in-the-Middle (MITM)

Wireshark filter syntax, ARP poisoning (Ettercap, Bettercap), DHCP starvation, and SSL/TLS stripping.

Module 13: Enumeration Protocols

Extracting usernames, shares, and policies from SMB/RPC, SNMP (Mibian, snmpwalk), SMTP, and LDAP.

Module 14: System Hacking & Password Cracking

Online attacks (Hydra, Medusa), offline hash cracking (John the Ripper, Hashcat), rainbow tables, and rule-based cracking.

Module 15: Windows Privilege Escalation Techniques

Unquoted service paths, weak service permissions, DLL hijacking, AlwaysInstallElevated, and token manipulation (Incognito).

Module 16: Linux Privilege Escalation Techniques

SUID/SGID binary abuse (GTFOBins), writable /etc/passwd, sudo privilege misconfigurations, cron job hijacking, and kernel exploits.

Module 17: Metasploit Framework Deep Dive

Exploit/payload structure, Meterpreter commands, multi-handlers, staged vs. stageless payloads, and post-exploitation modules.

Module 18: Pivoting & Lateral Movement

Port forwarding with SSH, Chisel, Proxychains, and routing through compromised dual-homed hosts via Meterpreter.

Module 19: Social Engineering & Credential Harvesting

Phishing infrastructure setup, GoPhish framework, cloned login pages, and credential harvesting methodologies.

Module 20: Malware Analysis Fundamentals

Static vs. dynamic analysis, portable executable (PE) headers, strings extraction, sandboxing, and basic behavior monitoring.

Module 21: Trojans, Backdoors, and Keyloggers

Payload architecture, custom keylogger development, persistent backdoor creation, and system registry auto-starts.

Module 22: Antivirus & EDR Evasion Techniques

Crypters, shellcode encoding/encryption (AES/XOR), payload obfuscation, and runtime memory injection basics.

Module 23: Denial of Service (DoS & DDoS)

SYN floods, UDP amplification, slow-rate attacks (Slowloris), Botnet command & control (C2) architecture.

Module 24: Wireless Network Exploitation

802.11 frames, monitor mode, capturing WPA/WPA2 handshakes, PMKID attacks, evil twin APs, and deauthentication attacks.

Module 25: Professional Pentest Reporting & CVSS Scoring

Writing executive summaries, calculating CVSS v3.1 base/temporal scores, formatting remediation roadmaps.

Module 26: Capstone Project & Guided Security Internship

Project: End-to-end black-box assessment on a hybrid Windows/Linux enterprise network.
Internship: 4-week structured ticketing queue - vulnerability triage, live patch validation, and delivering a client-ready technical report.

Master Ethical Hacking
& Core Network Defense