Ethical hacking: Security foundations
Apply Ethical hacking through assets, threats, risk.
Advanced / Structured learning draft / Version 0.9
Structured learning draftEthical Hacking & Penetration Testing
Apply practical protection to accounts and systems. You will finish with a prioritised security review and action plan.
This open learning manuscript is undergoing course-specific editorial review. It does not provide certification. Progress and notes are stored only in this browser.
CybersecurityTool stack
Kali Linux
12guided lessons
4focused modules
1reviewable project
PDFoffline workbook
The problem
What this course helps you do
Ethical Hacking & Penetration Testing is a structured, practical course covering Ethical hacking, Kali Linux, OWASP, CTF. It emphasizes explainable methods, checked work and a final outcome that can be reviewed.
Who it is for
Defenders and developers learning lawful, defensive security practice.
Prerequisites
- Basic networking and operating-system knowledge
Portfolio-ready project
Produce a reviewable Ethical Hacking & Penetration Testing project using Ethical hacking, Kali Linux, OWASP.
Deliverable: A working Ethical Hacking & Penetration Testing artefact plus an evidence-based self-review.
Practice fileSecurity review sheetAn account and device control review with evidence fields.Planning template · MarkdownProject briefDefine the user, outcome, boundaries, evidence and acceptance criteria before building.Printable workbook · PDFComplete course workbookA4-ready lesson prompts, project worksheets, evidence logs and references.
Downloads open without an account. Practice data is fictional; review each file before using it in another system.
Definition of done
- The output matches the stated outcome.
- Inputs and decisions are reproducible.
- Boundary and failure evidence is included.
- Limitations and responsibility considerations are explicit.
Course plan
From first concept to finished work
Kali Linux: Defensive controls
Apply Kali Linux through identity, network protection, hardening.
OWASP: Assessment
Apply OWASP through safe testing, evidence, remediation.
CTF: Operations
Apply CTF through monitoring, response, recovery.
Source-led learning
Authoritative references
Course claims are grounded in primary documentation and recognized public guidance. Recheck version-sensitive information before professional use.
- Cybersecurity Framework 2.0NIST
- Web Security Testing GuideOWASP Foundation