Course Content
Understand the basics of ethical hacking and why it is important
Understanding the basics of ethical hacking helps students learn how hackers think and how cyber attacks happen. It teaches the importance of protecting systems, finding security weaknesses before criminals do, and keeping personal and organizational data safe. Ethical hacking is important because it helps build a safer digital world and prepares students for future careers in cybersecurity.
0/5
Learn about Reconnaissance & Footprinting
Students will learn about Reconnaissance is the first and most critical phase of any penetration test. This topic teaches students how to gather intelligence about a target legally — using both passive (non-intrusive) and active methods. Master this topic and you will think like a real attacker.
0/5
Explore Scanning, Exploitation & Post-Exploitation
This is the most technical and exciting topic of the course. Students will perform actual attack simulations in a controlled lab environment using industry-standard tools. Always practice ONLY on systems you own or have explicit permission to test.
0/5
Understand the Web Application Hacking & Career Preparation
Web application vulnerabilities are the #1 source of security breaches in modern organizations. This final topic teaches the OWASP Top 10 attacks, secure code review, and everything needed to land your first cybersecurity job or internship.
0/4
Introduction to Ethical Hacking for Students

Burp Suite — Key Modules

Module

Purpose

Proxy

Intercept all browser traffic — modify requests and responses in real time

Repeater

Manually craft and resend HTTP requests to test different inputs

Intruder

Automated attack tool for brute force, fuzzing, and parameter tampering

Scanner

Automated vulnerability detection (Pro version — free alternatives exist)

Decoder

Encode/decode URL, Base64, HTML entities, hex data

Comparer

Compare two responses to spot differences (useful in blind attacks)

Sequencer

Analyze randomness of session tokens to detect predictable patterns

 

API Security Testing

  • OWASP API Security Top 10 — Broken Object Level Auth, Excessive Data Exposure, etc.
  • Use Postman to manually test APIs — check for IDOR vulnerabilities
  • Look for API keys exposed in JavaScript source code (browser DevTools)
  • Test JWT tokens — decode on jwt.io, check for algorithm: none vulnerability

 

Placement Tip: Know how to explain IDOR (Insecure Direct Object Reference) with a real-world example: ‘If changing /profile?id=123 to /profile?id=124 shows another user’s data — that’s IDOR.’

Be a Mentor

    Be Our Skilling Partner