#1 India's Top IT Training Institute
New Launches Project Management PG Programs Counselling Session Placement Report Download Certificate

Ethical Hacking · Course Modules · Week by Week

Ethical Hacking Course Modules Week by Week

Ethical hacking course modules week by week — a complete 12-week breakdown covering reconnaissance, scanning, exploitation, web hacking, and reporting in 2026.

Tracks
Ethical Hacking · 12-Week Modules Interactive
Phase
—
What to focus
Weeks
—
Duration
Key Skills
—
What you learn
Outcome
—
Result
Week 1-4 → Week 5-8 → Week 9-12 → Certified
Click to see the 12-week ethical hacking course module breakdown.

Home / Tutorials / Course Modules / Ethical Hacking Course Modules Week by Week

Ethical Hacking · Course Modules · Week by Week

Ethical Hacking Course Modules Week by Week

AK Ankit Kaushik · Lead Trainer, Cyber Security & Ethical Hacking | Updated 04 September 2026 | 13 min read Free · Course Guide
WEEK 1-4 WEEK 5-8 WEEK 9-12 RESULT Foundation Networking basics Linux & Windows Reconnaissance Learn Offensive Scanning & enumeration Exploitation basics Web hacking Practice Advanced Wireless & mobile Social engineering Reporting Apply Result Ethical Hacker job ₹4-10 LPA starting Certified
Ethical hacking course modules week by week — from networking foundations to advanced exploitation and professional reporting.

Quick summary — ethical hacking course modules week by week

An ethical hacking course typically runs 12 weeks, covering foundation, offensive security, and advanced topics. Weeks 1-4 build networking and reconnaissance fundamentals. Weeks 5-8 cover scanning, exploitation, and web hacking. Weeks 9-12 dive into wireless, mobile, social engineering, and professional reporting.

In this guide you will learn:

  1. Weeks 1-4: Foundation — networking, Linux, and reconnaissance.
  2. Weeks 5-8: Offensive security — scanning, exploitation, and web hacking.
  3. Weeks 9-12: Advanced topics — wireless, mobile, and reporting.
  4. Tools you'll master — Nmap, Metasploit, Burp Suite, and more.
  5. Certifications to target — CEH, OSCP, and CompTIA Security+.
  6. Career outcomes — roles, salaries, and hiring.

SECTION 01Weeks 1-4 — foundation: networking, Linux, and reconnaissance

Ethical Hacking · Foundation · Weeks 1-4

The first four weeks build your foundation. You'll learn how networks work, how to navigate Linux and Windows, and how to gather information about targets — the first phase of any ethical hacking engagement.

4
weeks of foundation
OSI + TCP/IP
networking models
Linux
command line mastery
OSINT
reconnaissance techniques

Week 1: Networking Fundamentals

OSI and TCP/IP models, IP addressing, subnetting, ports and protocols, DNS, HTTP/HTTPS, and how data flows across networks.

Why it matters: You can't hack a network you don't understand.

Week 2: Linux and Windows for Hackers

Linux command line, file permissions, users and groups, package management, Windows internals, and setting up a hacking lab with Kali Linux and virtual machines.

Why it matters: Kali Linux is the standard toolkit for ethical hackers.

Week 3: Reconnaissance and OSINT

Passive and active reconnaissance, OSINT techniques, Google dorking, WHOIS, DNS enumeration, and footprinting targets without touching their systems.

Why it matters: Reconnaissance is 70% of a real penetration test.

Week 4: Scanning and Enumeration

Nmap scanning techniques, port scanning, service detection, vulnerability scanning with Nessus and OpenVAS, and enumerating SMB, SNMP, and LDAP.

Why it matters: Scanning reveals the attack surface you'll exploit later.
Pro tip: Don't rush the foundation. Ethical hackers who understand networking deeply find vulnerabilities faster than those who jump straight to tools.

SECTION 02Weeks 5-8 — offensive security: scanning, exploitation, and web hacking

Weeks 5-8 are the core of the course. You'll learn to exploit vulnerabilities, compromise systems, and hack web applications — always in a legal, controlled lab environment.

Week 5-6: System Exploitation

  • Metasploit framework
  • Exploiting known vulnerabilities
  • Password attacks and cracking
  • Privilege escalation (Linux & Windows)
  • Post-exploitation and persistence
  • Pivoting and lateral movement

Week 7-8: Web Application Hacking

  • OWASP Top 10 vulnerabilities
  • SQL injection and XSS
  • Burp Suite mastery
  • Authentication and session flaws
  • File inclusion and command injection
  • API and business logic testing
Key point: Weeks 5-8 give you the offensive skills employers look for — exploitation, privilege escalation, and web application testing.

SECTION 03Weeks 9-12 — advanced topics: wireless, mobile, and reporting

The final four weeks cover advanced attack surfaces and the professional reporting skills that turn a hacker into a trusted security consultant.

Week 9: Wireless and Network Attacks

Wi-Fi security, WPA/WPA2 cracking, evil twin attacks, MITM (man-in-the-middle), ARP spoofing, and securing wireless networks.

Why it matters: Wireless is often the weakest link in corporate networks.

Week 10: Mobile and IoT Hacking

Android and iOS security, mobile app testing, IoT device exploitation, and securing connected devices.

Why it matters: Mobile and IoT devices are rapidly expanding attack surfaces.

Week 11: Social Engineering

Phishing, pretexting, baiting, tailgating, and human-focused attacks. Learn to test and train employees against social engineering.

Why it matters: Most breaches start with a human, not a machine.

Week 12: Reporting and Capstone Project

Writing professional penetration test reports, documenting findings, risk ratings, remediation advice, and completing a full capstone penetration test from recon to report.

Why it matters: A pentest is only valuable if you can communicate findings clearly.
Pro tip: The capstone project in week 12 becomes your portfolio piece — it's what you show employers to prove your skills.

SECTION 04Tools you'll master in the course

By the end of 12 weeks, you'll be proficient with the industry-standard ethical hacking toolkit:

Nmap
network scanning
Metasploit
exploitation framework
Burp Suite
web app testing
Wireshark
packet analysis

Full tool list:

  • Reconnaissance: Nmap, WHOIS, DNSenum, theHarvester, Shodan.
  • Vulnerability scanning: Nessus, OpenVAS, Nikto.
  • Exploitation: Metasploit, SearchSploit, Hydra, John the Ripper.
  • Web hacking: Burp Suite, OWASP ZAP, SQLmap, Gobuster.
  • Wireless: Aircrack-ng, Wifite, Kismet.
  • Post-exploitation: Mimikatz, PowerShell Empire, BloodHound.
Key insight: These are the exact tools listed in ethical hacking job descriptions — mastering them makes you job-ready.

SECTION 05Certifications to target after the course

After completing the 12-week course, target these certifications to boost your credibility and salary:

CompTIA Security+

Entry-level security certification covering foundational security concepts. Ideal for your first security role.

Best for: Beginners entering cyber security.

CEH (Certified Ethical Hacker)

EC-Council's flagship certification covering ethical hacking methodology and tools. Widely recognized by employers.

Best for: Ethical hacking and penetration testing roles.

OSCP (Offensive Security Certified Professional)

The gold standard for hands-on penetration testing. Requires a 24-hour practical exam.

Best for: Serious penetration testers targeting top salaries.

CompTIA PenTest+

Intermediate certification covering penetration testing and vulnerability management.

Best for: Pentesters wanting a vendor-neutral certification.
Pro tip: Start with CEH or Security+ after the course, then work toward OSCP as you gain experience.

SECTION 06Career outcomes — roles, salaries, and hiring

Ethical hacking skills open doors to high-demand, high-paying roles:

₹4-10L
entry-level salary
₹10-25L
experienced salary
3.5M+
open cyber security jobs globally
#1
cyber security is a top hiring field

Roles you can target:

  • Ethical Hacker / Penetration Tester
  • Cyber Security Analyst
  • Security Consultant
  • Vulnerability Assessor
  • Red Team Specialist
  • Security Engineer

Why hiring is strong:

  • Every organization needs security testing — from startups to governments.
  • Regulations (GDPR, HIPAA, PCI-DSS) mandate regular penetration testing.
  • Cyber attacks are increasing, driving demand for skilled defenders.
  • Certifications and hands-on skills command premium salaries.
Key insight: Ethical hacking is one of the few fields where hands-on skill matters more than a degree. Your portfolio and certifications open doors.

SECTION 07Test yourself — is this path right for you?

Five questions. No sign-up.

0 / 5

Pick an answer to see why it is right or wrong.

SECTION 08Frequently asked questions

How long is an ethical hacking course?

Most structured ethical hacking courses run 12 weeks, covering foundation (weeks 1-4), offensive security (weeks 5-8), and advanced topics (weeks 9-12).

What topics are covered in weeks 1-4?

Networking fundamentals, Linux and Windows for hackers, reconnaissance and OSINT, and scanning with Nmap and vulnerability scanners.

What tools will I learn in an ethical hacking course?

You'll master Nmap, Metasploit, Burp Suite, Wireshark, Nessus, SQLmap, Aircrack-ng, and other industry-standard tools.

Which certification should I target after the course?

Start with CompTIA Security+ or CEH, then work toward OSCP as you gain hands-on experience. OSCP is the gold standard for penetration testers.

What salary can I expect as an ethical hacker?

Entry-level ethical hackers earn ₹4-10 LPA in India. With experience and certifications like OSCP, salaries range from ₹10-25 LPA or more.

What I would do in the first 30 daysLayoff · 14 min Why sending 500 resumes won't workJob Search · 14 min Rebuild your resume for the AI job marketResume · 15 min Which skills to learn before applyingSkills · 14 min 90-day career recovery roadmapRecovery · 16 min How AI can help you prepare for interviewsAI · 11 min

Classroom & online · Noida

Ethical Hacking Course — 12 weeks from foundation to certification

Our Ethical Hacking Course covers networking, reconnaissance, exploitation, web hacking, wireless attacks, and professional reporting — everything you need to start your cyber security career.

₹24,500 · full programme ₹35,000
Explore the course Download the syllabus
  • 12-week structured module plan
  • Hands-on labs with Kali Linux
  • Nmap, Metasploit, Burp Suite
  • Capstone penetration test project
  • CEH & Security+ exam prep
  • Weekday & weekend batches