A full offensive engagement, end to end — scoping, recon, exploitation, privilege escalation, post-exploitation and the report that follows.
Six months, because a real engagement is not a tool demo. The programme follows the shape of an actual pentest and spends most of its time in the lab.
It opens with frameworks and legal scope — what authorisation means and where testing stops — then moves through passive scouting, active scanning and enumeration with Nmap, and automated assessment before any exploitation begins.
The web block covers OWASP Top 10 properly: SQL injection manually and with tooling, XSS and CSRF, authentication bypass and session hijacking. The exploitation block covers Metasploit, client-side payloads, Linux and Windows privilege escalation, lateral movement, and covert channels. It ends where paid work ends — a technical report with reproducible evidence and remediation a developer can act on.
Send us your background and we will confirm the next batch date, the schedule and what you need to bring.