Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

Cyber Penetration Testing & Ethical Hacking 2026

Name: Cyber Penetration Testing & Ethical Hacking 2026
Rating: 4.3 (212 reviews)

Build skills in pentesting, intrusion analysis, and vulnerability testing through labs, VMs, and cyber range scenarios

Created byStarweaver Group, Kevin Cardwell, Paul Siegel

Last updated 9/2026

English

ArabicGerman

What you'll learn

Understand what is penetration testing in cyber security and develop the mindset of an attacker through ethical hacking principles
Carry out a complete penetration testing methodology like a professional, aligned with real-world cyber security penetration test practices
Explore techniques used in network penetration testing to attack devices, servers, and enterprise systems
Investigate client-side attack methods as part of cybersecurity penetration testing and real-world pentesting scenarios
Gain hands-on experience in identifying vulnerabilities and executing a structured penetration test to exploit weaknesses
Learn advanced techniques to bypass and penetrate perimeter defenses in IT security penetration testing environments
Understand how to defeat enterprise-level defenses using modern security penetration testing strategies
Practice evasion tactics used in ethical hacking cyber security
Perform penetration testing using client-side approaches in realistic lab environments
Compete against a live progressive target range to simulate real-world cybersecurity pen testing challenges
Enhance your practical security testing skills as a penetration tester
Build a clear roadmap on how to become a penetration tester including career-focused guidance
Develop a roadmap to becoming a professional penetration tester

Course content

12 sections • 54 lectures • 3h 17m total length

Welcome!0:52
Just a brief "hello" and explanation for you.
Building the Cyber Range3:41
In this module, you will learn about building a cyber range, a simulated network environment used for training and testing cybersecurity skills and strategies.
Multiple Layers and Switches3:12
This module covers the use of multiple layers and switches in networking, including their functions and benefits.
Customizing IP Addresses3:04
In this module, you will learn how to customize and configure IP addresses on different devices, including the importance and benefits of doing so.
Finding and Building Your Own Machine2:58
Discover how to acquire and build test machines from ISO-based installs or prebuilt VMs, using networks and sources like Archaeopteryx and Vorlon hub.
Building and Advanced Range3:54
In this module, you will learn about building an advanced cyber range, including the use of more advanced features and technologies for training and testing cybersecurity skills and strategies.
Module One
Hands-On Learning: Cyber Range Setup and Configuration1:02
This 60-minute activity will help you build and configure your own cyber range using the concepts from Section 1.

The Process of Penetration Testing3:08
This module covers the process of penetration testing, including the steps and tools involved in identifying and assessing vulnerabilities in a network or system.
Module Two
Hands-On Learning: The Process of Penetration Testing1:07
This 60-minute activity helps you apply the full lifecycle of penetration testing, including planning, scoping, risk evaluation, and legal considerations.

The Abstract Methodology2:31
In this module, you will learn about the abstract methodology, a systematic approach to problem-solving that involves defining and analyzing a problem, generating potential solutions, and selecting and implementing the best solution.
Planning3:14
Plan a penetration test by defining scope and boundaries, simulate a medium-skill threat with manual and tool-based testing, and perform nonintrusive target searches using public records, Google hacking, and Shodan.
Intrusive Target Search and Scanning Methodology3:35
This module covers the intrusive target search and scanning methodology, including the steps and tools used to identify and assess vulnerabilities in a network or system.
Network Mapping and Nmap2:38
In this module, you will learn about network mapping and the use of the Nmap tool to discover and map networks, including its features and commands.
Understanding Open Ports3:40
This module covers the concept of open ports, including how to identify and interpret them and their potential vulnerabilities.
Services Running on Ports3:14
In this module, you will learn about the services that run on ports and how to identify and interpret them for security purposes.
Enumeration3:12
This module covers the concept of enumeration, including the techniques and tools used to gather information about a network or system for security purposes.
Module Three
Hands-On Learning: Scanning and Enumeration Methodologies1:02
This 60-minute activity helps you practice planning and executing early phases of a penetration test — from abstract methodology to enumeration.

Identification of Vulnerabilities Manual2:04
In this module, you will learn about identifying vulnerabilities in a network or system, including the tools and techniques used to do so.
Identification of Vulnerabilities Manual Dups3:17
In this module, you will learn about identifying vulnerabilities in a network or system, including the tools and techniques used to do so.
Openvas2:52
This module covers the use of OpenVAS, an open source vulnerability assessment tool, including its features and use in identifying vulnerabilities in a network or system.
Module Four
Hands-On Learning: Identification of Vulnerabilities0:53
This 60-minute activity will help you apply manual and automated techniques to identify vulnerabilities using OpenVAS and logical auditing.

Validation of Vulnerabilities4:26
In this module, you will learn about the process of validating vulnerabilities, including the tools and techniques used to confirm the existence and impact of a potential vulnerability.
Exploit Tools and Distributions3:45
This module covers the use of exploit tools and distributions, including the types and functions of these tools and how they can be used to test and exploit vulnerabilities.
Module Five
Hands-On Learning: Validation of Vulnerabilities and Exploitation0:55
This 60-minute activity will help you validate vulnerabilities and understand how to safely work with common exploit tools.

Data Analysis Review3:04
Reporting and Showcasing Results8:13
Learn to craft a concise, professional penetration testing report that clearly communicates scope, methodology, findings, risk, and actionable mitigations to clients.
Module Six
Hands-On Learning: Data Analysis and Reporting0:50
This 60-minute activity will help you practice analyzing scan data, calculating risk, and writing effective technical and executive-level reports.

Lab 01 - Part 01 Setting Up a Flat Network2:33
Lab 01 - Part 02 - Understanding Virtual Box2:19
Open virtual box, add and edit a network, and set subnet to enable two machines on the same switch to talk to each other using host-only adapters rather than NAT.
Lab 01 - Part 03 - VM Workstation Player1:44
Lab 02 - Part 01 - Setting Up Multiple Layer2:13
Set up multiple layers by adding a second network adapter to the VM, assign VMnet8 and VMnet5, and configure IP tables for a firewall in a cyber range.
Lab 02 - Part 02 - Virtual Box3:34
Configure virtual box networks to mirror VMware switches. Create host-only networks, attach adapters, and set up a multi-homed virtual machine to route traffic through the internal switch.
Lab 02 - Part 03 - VMware Player Methods3:01
Learn two VMware Player methods to add a network adapter and connect to a virtual switch, then compare VMware Player with VMware Workstation Pro and explore multilayer networks.
Lab 03 - Customizing Your IP Addresses3:25
Customize IP addresses in VMware workstation pro and virtual box to emulate production networks, except in VMware workstation player, editing subnet blocks and enabling promiscuous mode for traffic sniffing.
Lab 04 - Building Your Own Machine Kioptrix5:24
Learn to find or build your own virtual machines and set them up in VMware or VirtualBox, then configure a flat network for practical penetration testing in a cyber range.
Lab 05 - Setting Up The Advanced Range4:21
Set up the advanced range by adding five switches across VMware Workstation Pro and Oracle VirtualBox, configuring networks and promiscuous mode for VM access.
Hands-On Learning: Virtual Network and Range Construction1:01
This 60-minute activity will help you apply virtualization and network design techniques from Labs Module One. You’ll build and document a working multi-layered cyber range.

Lab 01 - Instrusive Target Search9:00
Lab 02 - Scanning Live Systems3:52
Lab 03 - Ports7:11
Identify open ports on the target with nmap in verbose mode and compare results using unicornscan and hping, then review host services and port states.
Lab 04 - Services Scan5:07
Execute a multithreaded services scan with zenmap to identify services and versions, then grab banners via telnet or netcat to extract data from open targets.
Lab 05 - Enumeration2:46
Enumerate targets using the scripting engine in Zenmap, run service scans, and collect host data including operating system details to support the next step: identify vulnerabilities.
Hands-On Learning: Intrusive Scanning and Enumeration Practice0:53
This 60-minute activity lets you practice intrusive scans, interpret results, and manually enumerate open services using techniques from Labs Module Two.

Lab 01 - Vulnerability Sites4:37
Explore vulnerability sites and advisories to identify command injection, arbitrary code execution, and zero-day risks, while evaluating CVSS scores and defense implications.
Lab 02 - Using Nmap4:35
Explore using nmap to find vulnerabilities with vulnerability scripts, run full or targeted scans (including MS17-010), and interpret results with risk factors for reporting in a lab environment.
Lab 03 - Exploring Openvas7:36
Lab 04 - Exploring Nessus5:41
Lab 05 - Exploring Nikto4:59
Explore Nikto, a web scanner that tests for known vulnerabilities and evasion on a web server, revealing versions and a remote code execution vulnerability for ethical exploitation.

Lab 01 - Exploitdb3:56
Lab 02 - Exploitdb Dups12:36
Practice penetration testing by validating vulnerabilities and exploiting targets using metasploit framework and exploit db, including remote code execution on Windows seven and server twenty eight.
Lab 03 - Tcpdump Data Analysis14:28
Analyze network data using tcpdump and wireshark to identify open ports, suspicious activity, and packet-level evidence of intrusions through protocol analysis and data flows.
Hands-On Learning: Exploitation Database and Packet Analysis0:50
This 60-minute activity helps you investigate real-world exploits and interpret packet captures using ExploitDB and TCPDump.
Performing a Penetration Test and Reporting Vulnerabilities

Requirements

Anyone interested in learning penetration testing (pentesting) and ethical hacking can enroll. No prior experience is required to explore cybersecurity penetration testing concepts.

Description

To effectively secure modern networks, you must first understand the mindset of an attacker. That is, you have to attack your own network to learn how to defend it. This is where ethical hacking and penetration testing come in. A penetration test, also known as a pen test or pentest or cyber security penetration test, is an authorized simulated attack on a system designed to evaluate and strengthen its security posture.

In this cybersecurity course, you will learn how to conduct a pentest and what cybersecurity is all about. You will learn how to build and hone the skills to develop the mindset of someone who has the sole purpose of attacking a system and/or network

As you progress, you will follow a structured penetration testing methodology and learn how to conduct network penetration testing in detail. You will build the skills and apply techniques to penetrate devices, servers, and client systems, and perform security penetration testing engagements. You will work within a defined scope, targeting systems that simulate real-world cyber pen testing environments.

Each day, you will be presented with a scope of work and have a number of targets to engage and attempt to “own.” The targets will be progressive in nature, with the size of the attack surface being reduced as your skill sets increase. Henceforth, you will gain hands-on experience in cybersecurity pen testing, identifying weaknesses, exploiting vulnerabilities, and understanding how attackers operate in IT scenarios.

By the end of this program, you will have conducted multiple simulated penetration test cyber security engagements and drafted a preliminary report of findings just like a professional penetration tester. The techniques taught are aligned with industry practices used by global cybersecurity penetration testing teams. The system is proven and effective, and can be put into place at once.

Your instructor, Kevin Cardwell, is a former senior U.S. Navy cybersecurity expert and the author of multiple books on cybersecurity.

More about this course and Starweaver

This course is led by a seasoned technology industry practitioner and executive, with many years of hands-on, in-the-trenches cybersecurity work. It has been designed, produced and delivered by Starweaver. Starweaver is one of the most highly regarded, well-established training providers in the world, providing training courses to many of the leading financial institutions and technology companies, including:

Ahli United Bank; Mashreqbank; American Express; ANZ Bank; ATT; Banco Votorantim; Bank of America; Bank of America Global Markets; Bank of America Private Bank; Barclay Bank; BMO Financial Group; BMO Financial Services; BNP Paribas; Boeing; Cigna; Citibank; Cognizant; Commerzbank; Credit Lyonnais/Calyon; Electrosonic; Farm Credit Administration; Fifth Third Bank; GENPACT; GEP Software; GLG Group; Hartford; HCL; HCL; Helaba; HSBC; HSBC Corporate Bank; HSBC India; HSBC Private Bank; Legal & General; National Australia Bank; Nomura Securities; PNC Financial Services Group; Quintiles; RAK Bank; Regions Bank; Royal Bank of Canada; Royal Bank of Scotland; Santander Corporate Bank; Tata Consultancy Services; Union Bank; ValueMomentum; Wells Fargo; Wells Fargo India Solutions; Westpac Corporate Bank; Wipro; and, many others.

Happy learning.

Who this course is for:

This course is designed for everyone interested in penetration testing (pentesting), ethical hacking, and cybersecurity. It is ideal for beginners exploring how to learn ethical hacking, or professionals looking to understand how to become a penetration tester.

Cyber Penetration Testing & Ethical Hacking 2026

What you'll learn

Explore related topics

Course content

Module One7 lectures • 19min

Module Two2 lectures • 4min

Module Three8 lectures • 23min

Module Four4 lectures • 9min

Module Five3 lectures • 9min

Module Six3 lectures • 12min

Labs Module One10 lectures • 30min

Labs Module Two6 lectures • 29min

Labs Module Three5 lectures • 27min

Labs Module Four5 lectures • 32min

Requirements

Description

Who this course is for: