MODULE 1: Introduction to Internet and Networks
Foundations
- OSI Model (Layers 1-7) and TCP/IP stack overview
- IPv4 / IPv6 addressing, subnetting, and CIDR notation
- Common protocols: TCP, UDP, ICMP, DNS, HTTP/HTTPS
- Port numbers, sockets, and network services
🛠️ Hands-on Activity:
Use ipconfig/ifconfig to examine local network configuration; ping common hosts; trace routes using tracert/traceroute.
MODULE 2: External Reconnaissance – Enumerating Public-Facing IPs
OSINT & Recon
- Active vs. Passive reconnaissance methodologies
- WHOIS lookups and DNS interrogation
- Shodan, Google Dorks, and search engine enumeration
- Certificate transparency logs and subdomain enumeration
- Identifying Autonomous System Numbers (ASNs) and IP ranges
🛠️ Hands-on Activity:
Perform WHOIS lookups; conduct Google Dorks searches; use DNS enumeration tools (nslookup, dig); search certificate transparency databases; identify public-facing services using Shodan.
MODULE 3: Internal Reconnaissance – Nmap and Wireshark
Scanning & Analysis
- Nmap scan types: SYN, UDP, ACK, FIN scans
- Service version detection and OS fingerprinting
- Nmap Scripting Engine (NSE) scripts for vulnerability detection
- Wireshark packet capture, deep packet inspection, and display filtering
- Protocol analysis: HTTP, DNS, ARP, SSL/TLS
🛠️ Hands-on Activity:
Execute Nmap host discovery and port scanning; perform service version detection; run NSE vulnerability scripts; capture packets in Wireshark; filter and analyze live traffic to identify protocols and active services.
MODULE 4: Cyber Threat Intelligence (CTI)
Threat Intel
- CTI tiers: Strategic, Tactical, and Operational intelligence
- MITRE ATT&CK framework and threat matrix mapping
- Threat indicators: Indicators of Compromise (IOCs), YARA rules, and hashes
- Public threat feeds & platforms: VirusTotal, AlienVault OTX, MISP
- Analyzing Advanced Persistent Threat (APT) campaigns and malware families
🛠️ Hands-on Activity:
Research recent CVEs using NVD; query VirusTotal for file hash analysis; check IP/domain reputation; search for indicators in threat feeds; map real-world attack flows to the MITRE ATT&CK framework.
MODULE 5: Kali Linux and Penetration Testing Tools
Offensive Security
- Kali Linux environment installation, tools, and customization
- Tool categories: Reconnaissance, Scanning, Enumeration, Exploitation
- Metasploit framework overview and payload execution
- Ethical hacking and legal frameworks: Scope, Rules of Engagement (ROE), and reporting
🛠️ Hands-on Activity:
Explore pentest toolchains; run an integrated penetration workflow combining modules 2–4; generate a comprehensive penetration test report incorporating reconnaissance, scanning, and threat intelligence findings.