
Debunk Hollywood myths about hacking and explore ethical hacking through hands-on practice, guide learners from beginner to intermediate, help them understand cyber threats, defend networks, and think like a hacker.
hacking means exploiting a system by bending its internal logic and flows, not simply cheating or improving. learn the hacker mindset to outsmart IT systems and beyond.
Define a system as a set of rules, structures, and standards that produce outcomes, then show how hacks exploit rules, and acknowledge Gödel’s claim that systems are incomplete or inconsistent.
Start with basics and practice hands-on hacking, moving from fundamentals to advanced topics, with pdfs and quizzes to reinforce key concepts and commands.
Explore how LANs and WANs differ and why the router and NAT gateways matter for remote hacking.
Explore what an IP address is, IPv4 and IPv6 differences, how domain lookups translate a name like google.com into a host address for routing, and NAT basics.
Identify how MAC addresses uniquely identify network hardware and how IP addresses enable inter-network communication, using ARP to map IP to MAC on the local network.
Firewalls act as security guards for your network, the first line of defense, inspecting traffic and enforcing rules to block threats across layers, including network level, stateful, and proxy firewalls.
Explain how the domain name system translates human-friendly names like google.com into IP addresses, enabling web access through DNS queries across servers, and note potential DNS spoofing risks.
Discover how ports and protocols enable internet communication, covering http, https, ftp, and smtp, and compare tcp and udp with their port numbers and impact on data delivery.
Set up a safe, hands-on cybersecurity lab using Kali Linux and VirtualBox, creating a test environment to practice with security tools without affecting your main system.
Install Kali Linux on VirtualBox to learn ethical hacking safely; enable BIOS virtualization, use the 64-bit Kali ISO, and allocate 2 GB RAM, 4 CPUs, and 20 gigabit disk.
set up a Windows 10 virtual machine in VirtualBox, allocate 2 GB RAM and 2 CPUs with a 10 GB disk, and run a 30-day trial without a product key.
Create an Android x86 VM in VirtualBox by downloading the Android x86 ISO, configuring memory, CPU, storage, and display, then boot and connect to the network.
Explore Kali Linux basics and learn essential terminal commands like ls, pwd, cd, rm, and sudo apt-get update to install Sherlock for information gathering in penetration testing.
Learn open source intelligence (OSINT) by gathering publicly available data ethically, using tools to uncover subdomains, emails, whois, and metadata to identify security weaknesses before testing.
Explore basic osint tools like Google dorking, whois, and theharvester in Kali Linux to reveal emails, subdomains, and other publicly available information.
Explore how Shodan scans internet-connected devices, reads banner data, and uses filters to reveal exposed systems; learn ethical security practices to protect people online.
Explore social media profiling and OSINT techniques that turn public posts into insights about location, interests, work, birthdays, passwords, and digital footprints.
Learn to uncover image and PDF metadata with Kali Linux tools like ExifTool and PDFInfo, revealing camera make and model, timestamps, GPS coordinates, and creator details.
Explore the OSINT framework, a community-maintained collection of tools and websites for open source intelligence. See how it guides investigations from usernames and IP addresses to domains and bitcoin wallets.
Explore how wifi works, including ssid, bssid, 2.4 GHz and 5 GHz channels, and the encryption handshake, using Kali Linux, while emphasizing responsible hacking and protecting private networks.
Compare wireless security standards by tracing WEP, WPA, WPA2, and WPA3 from RC4 and static keys to AES and CCMP, noting handshakes, forward secrecy, and enterprise versus personal setups.
Explore brute force attacks and learn to build a custom, targeted wordlist using OSINT with tools like Cupp and Crunch to speed password testing on Wi-Fi and encrypted data.
Install the proper drivers on your host and configure a usb filter in VirtualBox to pass a compatible usb wifi adapter to Kali, enabling wlan0, monitor mode, and packet injection.
Capture a WPA or WPA2 handshake by putting the wireless interface in monitor mode with airmon-ng, scanning with airdump-ng, and saving the handshake to capture01.cap.
Crack WPA-WPA2 wifi passwords using a captured handshake and a wordlist with aircrack ng, testing passwords until the handshake decrypts; success depends on the list's completeness.
Explore wireless network testing with an evil twin using Wi-Fi Fisher, creating a fake access point and captive portal to collect credentials under authorized, educational conditions.
Identify vulnerabilities within a local network using vulnerability analysis, map devices with Nmap, detect open ports and services, and learn to spot outdated software and misconfigurations.
Learn to map a network with Nmap, identify connected devices and open ports, and detect services and operating systems using basic, SYN, and version-detection scans.
Explore Wireshark, a network analyzer, capturing live traffic on Kali Linux to show packets, IPs, ports, and protocols, with filters and stream follows to analyze TLS and HTTP exchanges.
Explore how to observe a Windows machine’s real-time network traffic with a Kali-powered man-in-the-middle setup, using Wireshark to see browsers and visited sites and the risks of HTTP credentials.
Learn how social engineering and backdoors bypass the Windows firewall to gain access, using Armitage, Metasploit, Kali, and a fake update delivery.
Learn how to embed a backdoor into an Android app to gain remote access over a local network, using evil droid, armitage, apktool, zipalign, and reverse tcp payloads.
Explore how antivirus systems detect threats via signature-based, behavior-based, and machine learning methods, and examine obfuscation and encryption techniques through a controlled educational backdoor demonstration for defense insights.
Explore how to maintain remote access to a compromised machine across changing networks by using ngrok to create a secure tunnel, and implement encrypted backdoor communication for reliable connectivity.
Social engineering exploits human psychology to influence people into sharing information. Defend by understanding human behavior, verifying identities, and strengthening awareness alongside technical safeguards.
Explore how phishing, spear phishing, and whaling trick users into revealing sensitive data through emails, messages, and fake websites, and learn ethical, legal boundaries while studying real-world attacks.
Decode how curiosity drives social engineering through baiting and pretexting. Learn to identify believable backstories, tailored messages, and the role of context in manipulating targets.
Learn how phishing pages are created and how attackers collect credentials for defense. Explore local testing with Kali, Apache, and Ngrok to recognize red flags and improve security.
Explore how spam filters work and how to responsibly test their limits in red team engagements. Apply a realistic sender profile and personalized messaging to reveal email defense weaknesses.
Analyze how attackers conceal a backdoor by masquerading it as a legitimate pdf resume, using a pdf icon and realistic naming to exploit social engineering.
Discover how reused passwords fuel breaches across social platforms like Facebook and Instagram; learn to check exposure with havebeenpwned.com and dehashed.com and protect your data.
Explore brute force as a last-resort technique, learn to create tailored password lists with Cup, and understand how Tor masks login attempts while emphasizing ethical defense.
Finish the complete hacking course by embracing practice, applying tutorials and theory, and continuing to learn as cybersecurity evolves; consider C++ to deepen understanding and build your own tools.
Welcome to this course, designed to guide you step by step into the world of ethical hacking and cybersecurity.
My name is Hicham Lamsaouri, and I will be your instructor throughout this training. To learn more about my background and experience, you can watch the Introduction video available on this page.
This course is built around a strongly practical, hands‑on approach. Rather than focusing only on theory, you will spend most of your time working through real‑world scenarios that demonstrate how common attack techniques are performed and, more importantly, how they can be detected and prevented. All demonstrations are carried out using Kali Linux and widely used, industry‑standard tools.
The course is designed for beginners with no prior experience, while also gradually advancing to more intermediate and advanced topics. You will start by learning essential cybersecurity and networking concepts, then progress to practical skills such as information gathering, Wi‑Fi security testing, social engineering, phishing techniques, and controlled access testing on Windows systems.
By the end of the course, you will be able to:
Understand how real attackers think and operate
Identify common security weaknesses in networks, systems, and user behavior
Perform an ethical security audit in a controlled and legal environment
Design better defenses by understanding real attack methods
Whether your goal is to become an ethical hacker, a cybersecurity analyst, or simply to better protect systems and users, this course provides a solid foundation. Ethical hacking and cybersecurity are among the most in‑demand fields today, offering strong career opportunities and long‑term growth. With enough motivation and practice, this course can help you take your first professional steps in this domain.
Course Outline :
Introduction : Overview of the course structure and objectives
Basic Concepts : Fundamental cybersecurity terminology
Setting Up the Lab : Installing and configuring Kali Linux and creating a safe and legal testing environment
Information Gathering (OSINT) : Understanding how attackers profile organizations and individuals
Network Hacking (Wi‑Fi Security Testing) : Practical demonstrations of Wi‑Fi security testing
Vulnerability Scanning Fundamentals : Introduction to vulnerability scanners
Gaining Access to Devices : Common techniques used to gain controlled access
Social Engineering & Phishing : Different phishing techniques and attack vectors
Social Media Security Testing : Common social media account security weaknesses
Conclusion : Next steps in cybersecurity and ethical hacking