Ethical Hacking & Penetration Testing Training

Which institution offers ICT and digital transformation training in Africa?

EduCore Global Skills offers ICT and Digital Transformation courses in Nairobi, Kenya, including short instructor-led programmes for professionals and organizations. Relevant courses in this category link to dates, fees, modules, and registration details.

Where can I take 5-day training Cybersecurity training in Nairobi, Kenya?

EduCore Global Skills offers Ethical Hacking & Penetration Testing Training for ICT Officers and related professionals. The course page shows current 5 Days, available locations such as Nairobi, Kenya; Kisumu, Kenya; Mombasa, Kenya; Naivasha, Kenya, fees where published, upcoming dates, and registration details.

Where can I take Ethical Hacking & Penetration Testing Training training?

EduCore Global Skills offers Ethical Hacking & Penetration Testing Training training in Nairobi, Kenya; Kisumu, Kenya; Mombasa, Kenya; Naivasha, Kenya, with virtual live online, physical classroom, and customized in-house corporate delivery where available.

How long is Ethical Hacking & Penetration Testing Training?

Ethical Hacking & Penetration Testing Training is listed as 5 Days. The course page shows the current duration, available dates, delivery format, and registration options.

Who is Ethical Hacking & Penetration Testing Training for?

Ethical Hacking & Penetration Testing Training is designed for ICT Officers, IT Managers, Systems Administrators, Cybersecurity Teams, Digital Transformation Leads, Professionals and organizations that need practical capability in Cybersecurity.

Module 1: Introduction to Ethical Hacking

Core competencies for Introduction to Ethical Hacking.

• Hacker types, motivations, and the threat landscape
• Penetration testing vs. vulnerability assessment vs. red teaming
• Legal and ethical frameworks (Computer Misuse and Cybercrimes Act, GDPR, authorization letters)
• Scoping, rules of engagement, and contracts
• Pentest methodologies (PTES, OWASP, NIST SP 800-115, MITRE ATT&CK)

Module 2: Networking and Systems Fundamentals

Core competencies for Networking and Systems Fundamentals.

• TCP/IP, the OSI model, and subnetting
• Core protocols (DNS, HTTP/S, SMB, FTP, SSH, SMTP)
• Linux command line and file system essentials
• Windows internals, services, and registry basics
• Setting up a lab (Kali Linux, virtual machines, Metasploitable, isolated networks)

Module 3: Reconnaissance and OSINT

Core competencies for Reconnaissance and OSINT.

• Passive recon (WHOIS, DNS records, certificate transparency)
• Search engine and Google dorking techniques
• Social media, employee, and email harvesting
• Subdomain and asset discovery (Amass, Sublist3r, Shodan, Censys)
• Documenting and organizing findings

Module 4: Scanning and Enumeration

Core competencies for Scanning and Enumeration.

• Host discovery and port scanning with Nmap
• Service and version fingerprinting
• Enumerating SMB, SNMP, LDAP, and NFS
• Web content discovery (Gobuster, ffuf)
• Vulnerability scanning with Nessus and OpenVAS, and handling false positives

Module 5: Vulnerability Analysis and Exploitation Basics

Core competencies for Vulnerability Analysis and Exploitation Basics.

• CVEs, CVSS scoring, and exploit databases
• Metasploit Framework fundamentals
• Manual exploitation vs. automated tools
• Password attacks (brute force, spraying, hash cracking with Hashcat and John)
• Introduction to buffer overflows and memory corruption concepts

Module 6: Web Application Penetration Testing

Core competencies for Web Application Penetration Testing.

• Burp Suite setup and workflow
• Injection attacks (SQLi, command injection, XXE)
• XSS, CSRF, and client-side vulnerabilities
• Authentication, session management, and access control flaws (IDOR, JWT issues)
• SSRF, file upload flaws, and API testing

Module 7: Network and Wireless Attacks

Core competencies for Network and Wireless Attacks.

• Sniffing and traffic analysis with Wireshark
• Man-in-the-middle techniques (ARP spoofing, LLMNR/NBT-NS poisoning)
• Firewall, IDS/IPS, and filter evasion concepts
• Wi-Fi security (WPA2/WPA3 weaknesses, rogue access points)
• Network device and VPN misconfigurations

Module 8: Post-Exploitation and Privilege Escalation

Core competencies for Post-Exploitation and Privilege Escalation.

• Shells, payloads, and stabilizing access
• Linux privilege escalation (SUID, sudo misconfigurations, cron jobs, kernel exploits)
• Windows privilege escalation (services, tokens, unquoted paths)
• Lateral movement and pivoting
• Persistence, data exfiltration concepts, and cleanup

Module 9: Active Directory and Cloud Security

Core competencies for Active Directory and Cloud Security.

• Active Directory architecture and enumeration (BloodHound, PowerView)
• Kerberos attacks (Kerberoasting, AS-REP roasting, pass-the-ticket)
• Credential attacks (pass-the-hash, DCSync, NTLM relay)
• Cloud fundamentals and common misconfigurations (AWS, Azure, GCP)
• Container and IAM security basics

Module 10: Reporting, Defense, and Capstone

Core competencies for Reporting, Defense, and Capstone.

• Writing executive summaries and technical findings
• Risk rating, remediation advice, and retesting
• Defensive perspective (hardening, logging, detection, purple teaming)
• Social engineering awareness and phishing simulation ethics
• Capstone: a full authorized pentest of a lab environment with a final report and debrief

How is Ethical Hacking & Penetration Testing Training delivered?

Ethical Hacking & Penetration Testing Training is delivered through instructor-led classroom, live online, private in-house corporate training depending on the selected cohort or organizational arrangement.

What are the fees for Ethical Hacking & Penetration Testing Training?

The published course investment is KES 80,000. Location-specific fees are shown where configured.

How long is Ethical Hacking & Penetration Testing Training?

Ethical Hacking & Penetration Testing Training runs for 5 Days unless a customized corporate schedule is agreed.

Do participants receive a certificate for Ethical Hacking & Penetration Testing Training?

Participants who complete the course receive a Certificate of Completion from EduCore Global Skills.

Where can I take Ethical Hacking & Penetration Testing Training?

Ethical Hacking & Penetration Testing Training is available in Nairobi, Kenya; Kisumu, Kenya; Mombasa, Kenya; Naivasha, Kenya; Nakuru, Kenya; Kampala, Uganda; Kigali, Rwanda; Johannesburg, South Africa; Pretoria, South Africa; Cape Town, South Africa; Accra, Ghana; Abuja, Nigeria; Lagos, Nigeria; Dubai, United Arab Emirates; Cairo, Egypt; Muscat, Oman; Istanbul, Turkey; New York City, United States; Alexandria, Egypt; Atlanta, United States. Current dates are shown only where real sessions have been configured.

Who should attend Ethical Hacking & Penetration Testing Training?

Ethical Hacking & Penetration Testing Training is designed for ICT Officers, IT Managers, Systems Administrators, Cybersecurity Teams, Digital Transformation Leads, Professionals and organizations that need practical capability in Cybersecurity.

What are the prerequisites for Ethical Hacking & Penetration Testing Training?

No mandatory prerequisite is required unless stated in the course outline. Practical workplace experience in the subject area is helpful.