Your cart is empty.
Keep shoppingHands-On Ethical Hacking & Penetration Testing Labs
New
63 students
Hands-On Ethical Hacking & Penetration Testing Labs
Practice real attacks on Kali: Nmap, SQLi, hash cracking, SSH/SMB, Linux privilege escalation, pivoting and challenges
Created byVulnsec Academy
Last updated 9/2026
English
English [Auto],
What you'll learn
- Exploit SQL injection by hand and with automated tools, including cases that sit behind simple filters.
- Scan networks with Nmap and turn open ports and service versions into a clear attack surface.
- Fuzz web applications to find hidden pages, parameters, and virtual hosts before exploitation.
- Dump credentials from a vulnerable app, crack the hashes, and reuse the recovered password
- Escalate from a low-privilege Linux shell to root using sudo, GTFOBins, cron jobs, and enumerator output.
- Abuse common service misconfigurations on SSH, FTP, and SMB to steal files and gain a foothold.
- Recognize a restricted shell, enumerate the binaries you still have, and escape it safely.
- Pivot through a dual-homed host to reach internal services that are not visible from Kali.
Explore related topics
Course content
10 sections • 38 lectures • 52m total length
Requirements
- Use these techniques only on the course labs or on systems you have permission to test.
- A computer that can run Docker (Windows, Linux, or macOS) with at least 8 GB RAM.
- Basic Linux command-line skills: cd, ls, cat, copy files, and edit a text file.
- No prior penetration-testing job is required. You will learn the attacks inside the labs.
Description
Learn ethical hacking the way it is actually done: by attacking live targets.
This course is a hands-on penetration testing path on Kali Linux. You do not watch someone else click through a demo and then guess. You start isolated lab machines, scan them, find the service that matters, exploit it, and prove access with a flag. Mission Control (Atlas) sits beside every lab: class material first, then investigation, then locked walkthroughs if you get stuck.
You will work through a full attacker workflow, not a pile of disconnected videos.
What you will practice
Reconnaissance with Nmap: hosts, ports, service versions, and how to read the output
Web discovery and fuzzing: finding hidden pages, parameters, and vhosts before you ever inject anything
SQL injection from first payload to dumped credentials, including automated tools and cases where a firewall or filter is in the way
Hash cracking: identify the hash, choose the attack, recover the password, and use it
Linux privilege escalation: sudo misconfigs, GTFOBins, cron jobs, file transfer onto the target, and reading automated enumerator output (linPEAS and linuxprivchecker)
Common service mistakes: SSH keys, FTP, and SMB
Restricted shells: enumerate what you actually have, then escape
Pivoting: reach hosts that are not on your network, then continue the attack inside
Who this is for Beginners who already know basic Linux commands and want real practice. Students preparing for a junior pentester or SOC-adjacent role. Anyone tired of theory-only ethical hacking courses.
What you get Dozens of downloadable lab packages you run locally with Docker. Each lab has a static target, a briefing, questions, flag submission, and a walkthrough you can unlock. Challenges at the end drop the hand-holding: two flags, rabbit holes, and no quiz to steer you.
Important Every target in this course is an isolated lab built for training. Use these techniques only on systems you own or have written permission to test. Unauthorized access to computer systems is illegal.
If you want a course that ends with “you now know the idea,” this is not it. If you want a course that ends with “I rooted the box,” start here.
Who this course is for:
- Beginners who know a little Linux and want real ethical-hacking practice, not slide decks.
- Students aiming at a junior pentester, red-team, or security-operations role.
- Developers and sysadmins who want to see how their own services get broken.