The primary objective is to equip candidates with the foundational technical knowledge and practical skills required to participate effectively in all phases of a penetration test, from initial scoping to final reporting and follow-up.

Key Learning Modules

• Fundamentals of Information Security & Risk: Understanding the relationship between penetration testing and risk management to deliver real business value.

• Legal and Ethical Issues: Navigating the legal frameworks, rules of engagement, and ethical principles critical to professional testing.

• Infrastructure Penetration Testing: Mastering techniques for assessing networks, servers, and wireless infrastructure vulnerabilities.

• Web Application Security: Identifying and exploiting common web application flaws, including SQL injection, XSS, and CSRF.

• Advanced Testing Approaches: Learning white-box, black-box, and grey-box methodologies, as well as unannounced testing for incident response evaluation.

• Social Engineering & Physical Security: Assessing human and physical vulnerabilities through spear phishing, reconnaissance, and site security testing.

• The 7 Phases of Testing: Executing a structured approach through Reconnaissance, Scanning, Gaining Access, Escalating Privileges, Maintaining Access, Placing Backdoors, and Covering Tracks.

Target Audience: Human rights activists, social justice advocates, and students seeking to master the specialized methods and techniques required for effective digital protection in high-threat environments.