Network Fundamentals
Build the networking knowledge needed to understand protocols, services, ports, traffic flows, segmentation, and packet analysis.
TCP/IPDNSHTTPPortsWireshark
Offensive security training path
Penetration Testing Training Path
A practical pathway for learners who want to build offensive security skills across vulnerability assessment, exploitation, and post-exploitation.
RecommendedCheck if this path fits you
Discuss this pathPath overview
Offensive security with practical labs
Vulnerability assessment
Nmap and Nessus workflows
Exploitation fundamentals
Post-exploitation concepts
Mentor-supported learning
This path can be taken as a complete programme or tailored based on your current networking, Linux, and security knowledge.
Offensive labsEvidence writingAttack paths
Path snapshot
Penetration Testing Path
Learn vulnerability assessment, exploitation, and post-exploitation techniques used in ethical hacking.
Level
Intermediate
Duration
10–14 weeks part-time
Modules
6 included
Who this is for
Designed for aspiring penetration testers and offensive security learners
This path is suitable for learners who want practical, structured exposure to the techniques and workflows used in ethical hacking and security testing.
Career changers with some technical background
IT professionals moving into offensive security
Junior security analysts who want hands-on testing skills
Modules included
A structured pathway from technical foundations to exploitation
The path combines selected modules from our wider cyber security engineering curriculum. Foundation modules can be included or skipped depending on your current level.
Linux Fundamentals
Develop practical Linux knowledge including command-line usage, permissions, processes, packages, and remote access.
CLIPermissionsProcessesPackagesSSH
Windows Fundamentals
Understand Windows Server, administration tools, PowerShell, Active Directory, users, groups, and enterprise Windows concepts.
Windows ServerPowerShellADLDAP
Vulnerability Management
Learn practical workflows for asset discovery, scanning, prioritisation, remediation coordination, reporting, and continuous improvement.
Asset discoveryScanningPrioritisationRemediationReporting
Exploitation & Post Exploitation
Practise exploitation workflows, Metasploit usage, post-exploitation concepts, persistence, and lateral movement fundamentals.
MetasploitExploitationPersistenceLateral movement
Cryptography
Understand encryption, hashing, certificates, TLS, PKI, SSH, and password protection concepts used across cyber security roles.
EncryptionHashingPKITLSSSH
Practical work
Practical work you will do
This path should feel like controlled security testing practice, not passive tool watching.
Map services and attack surfaces in lab environments
Run scanning workflows and interpret the output
Document findings with risk, evidence, and remediation context
Skills you will build
Practical offensive security capability
The goal is not just to watch security tools being used. Learners should understand the workflow, practise in labs, and know how findings translate into real security risk.
Map networks, services, and exposed attack surfaces
Use Nmap and vulnerability scanning tools effectively
Understand how vulnerabilities are identified and prioritised
Use exploitation frameworks in a controlled lab environment
Explain findings clearly and structure technical reports
Understand post-exploitation concepts and attacker workflows
Prerequisites
Start at the right level
Not every learner needs the full foundation. We can add or remove prerequisite modules depending on existing knowledge.
Recommended before starting
- Basic IT knowledge
- Basic networking awareness
- Comfort using a computer
Add these if needed
- IT Fundamentals
- Network Fundamentals
- Linux Fundamentals
Useful optional foundation
- Windows / Active Directory Fundamentals
- Cryptography
Delivery model
Guided training, practical labs, and mentor support
Learners follow structured training, hands-on lab environments, and live instructor support for questions and guidance. The path can be delivered for individuals or adapted for teams.