Course Content
Understand the basics of ethical hacking and why it is important
Understanding the basics of ethical hacking helps students learn how hackers think and how cyber attacks happen. It teaches the importance of protecting systems, finding security weaknesses before criminals do, and keeping personal and organizational data safe. Ethical hacking is important because it helps build a safer digital world and prepares students for future careers in cybersecurity.
0/5
Learn about Reconnaissance & Footprinting
Students will learn about Reconnaissance is the first and most critical phase of any penetration test. This topic teaches students how to gather intelligence about a target legally — using both passive (non-intrusive) and active methods. Master this topic and you will think like a real attacker.
0/5
Explore Scanning, Exploitation & Post-Exploitation
This is the most technical and exciting topic of the course. Students will perform actual attack simulations in a controlled lab environment using industry-standard tools. Always practice ONLY on systems you own or have explicit permission to test.
0/5
Understand the Web Application Hacking & Career Preparation
Web application vulnerabilities are the #1 source of security breaches in modern organizations. This final topic teaches the OWASP Top 10 attacks, secure code review, and everything needed to land your first cybersecurity job or internship.
0/4
Introduction to Ethical Hacking for Students

Passive recon involves collecting information about a target without directly interacting with their systems. This leaves no footprint and is often the safest starting point. Sources include public websites, social media, DNS records, WHOIS data, job listings, and leaked databases.

OSINT Sources

  • WHOIS Lookup — Reveals domain registration info, registrant name, email, address
  • DNS Records — A, MX, NS, CNAME, TXT records reveal infrastructure details
  • io — Search engine for internet-connected devices (cameras, servers, IoT)
  • LinkedIn — Reveals employee names, job roles, technologies used
  • GitHub — Source code repositories may contain exposed API keys, credentials
  • Google Cache / Wayback Machine — Access old versions of websites

 

Google Dorking Cheat Sheet

Dork Operator

Syntax Example

What It Finds

site:

site:example.com

All indexed pages of a domain

filetype:

filetype:pdf site:gov.in

PDF files on government sites

intitle:

intitle:index of passwords

Directory listing pages

inurl:

inurl:admin login

Admin login pages

cache:

cache:example.com

Google’s cached version of a page

 

⚠️ Legal Warning: Google Dorking itself is legal — but exploiting the information found (accessing unauthorized systems, downloading private files) is a criminal offense under the IT Act. Always use these techniques only on systems you own or have permission to test.

 

Lab: theHarvester Tool

  • Command: theHarvester -d example.com -b google,bing,linkedin
  • This tool automatically collects emails, subdomains, hosts, and employee names
  • Practice on a domain you own or use a CTF practice environment

Be a Mentor

    Be Our Skilling Partner