Course outline
- Legal and ethical framework: what is allowed, written authorisation, responsibilities.
- Reconnaissance: gathering public information on a target, mapping a network.
- Enumeration and vulnerability analysis: exposed services, network protocols, scanning tools.
- Password attacks and associated defenses (policies, two-factor authentication).
- Malware: viruses, trojans, backdoors, how they act and how to detect them.
- Social engineering: phishing, impersonation, manipulation — and awareness.
- Network attacks: traffic sniffing, spoofing, denial of service (concepts and protections).
- Web application security: injections, sessions, access control (OWASP Top 10 reference).
- Wireless networks: encryption, common weaknesses, hardening.
- Reporting and remediation: documenting a flaw and proposing a fix.
Who is this course for?
- Technicians and administrators who want to secure their systems better
- Developers concerned about application security
- People retraining toward cybersecurity
- IT managers of small businesses
Prefer a concrete test of your own systems? See our penetration testing services. The full course catalogue is on the training page.


