Ethical Hacking · Career Training
How Uncodemy Trains Students for Ethical Hacker Roles
Quick summary — how Uncodemy trains ethical hackers
From zero to job-ready ethical hacker. This guide breaks down every phase of Uncodemy's ethical hacking training — the curriculum, the tools, the labs, the certifications, and the placement support that turns students into professional penetration testers.
In this guide you will learn:
- Phase 1: Foundations & Networking — Linux, networking, cryptography, and reconnaissance.
- Phase 2: Hacking & Pentesting — web attacks, exploitation, wireless, and reporting.
- Phase 3: Advanced & Live Labs — advanced exploitation, cloud security, CTFs, and capstone.
- Tools & lab setup — the practical toolkit.
- Certification & exam prep — get certified.
SECTION 01Phase 1: Foundations & Networking (Weeks 1-4)
Before you can hack ethically, you need to understand systems deeply. Phase 1 builds your foundation in Linux, networking, cryptography, and reconnaissance — the same fundamentals every professional ethical hacker relies on.
| Week | Focus | Hands-on | Weekly Goal |
|---|---|---|---|
| Week 1 | Linux & OS Fundamentals | File system, permissions, processes, shell scripting | Set up Kali Linux and run 30+ commands |
| Week 2 | Networking & Protocols | TCP/IP, DNS, HTTP, Wireshark packet analysis | Capture and analyse a full network session |
| Week 3 | Cryptography & PKI | Hashing, encryption, SSL/TLS, certificates | Break and rebuild a weak encryption setup |
| Week 4 | Reconnaissance & OSINT | Nmap, whois, DNS enumeration, OSINT techniques | Complete a full recon report on a target |
Phase 1 — Syllabus (Weeks 1-4):
Week 1 — Linux & OS Fundamentals
• File system, permissions, users
• Processes, services, package managers
• Bash scripting basics
Week 2 — Networking & Protocols
• TCP/IP, OSI model, DNS, HTTP
• Wireshark packet capture
• Firewalls and proxies
Week 3 — Cryptography & PKI
• Symmetric & asymmetric encryption
• Hashing algorithms, digital signatures
• SSL/TLS and certificate chains
Week 4 — Reconnaissance & OSINT
• Passive vs active reconnaissance
• Nmap, whois, dig, DNS enumeration
• OSINT tools and techniques
Phase 1 — Hands-on Labs:
Lab 1: Install Kali Linux in a virtual machine
Lab 2: Configure users, permissions and SSH keys
Lab 3: Capture and analyse network traffic with Wireshark
Lab 4: Crack a weak hash and explain why it was weak
Lab 5: Run Nmap scans against a lab target
Lab 6: Build a full OSINT profile on a practice target
Deliverable:
□ A working Kali Linux VM
□ A packet analysis write-up
□ A reconnaissance report with findings
SECTION 02Phase 2: Hacking & Pentesting (Weeks 5-8)
Phase 2 is where you start thinking like an attacker. You'll learn web application attacks, network exploitation, wireless hacking, social engineering, and — most importantly — professional reporting.
| Week | Focus | Hands-on | Weekly Goal |
|---|---|---|---|
| Week 5 | Web Application Attacks | OWASP Top 10, SQLi, XSS, Burp Suite | Exploit 5 OWASP vulnerabilities in a lab |
| Week 6 | Network & System Exploitation | Metasploit, password attacks, privilege escalation | Complete a full system takeover |
| Week 7 | Wireless & Social Engineering | WPA2 cracking, phishing simulations, SET | Run a controlled social engineering exercise |
| Week 8 | Reporting & Documentation | Executive summaries, risk ratings, remediation | Write a professional pentest report |
Phase 2 — Syllabus (Weeks 5-8):
Week 5 — Web Application Attacks
• OWASP Top 10 overview
• SQL injection, XSS, CSRF
• Burp Suite and manual testing
Week 6 — Network & System Exploitation
• Metasploit framework
• Password attacks and hash cracking
• Privilege escalation on Linux & Windows
Week 7 — Wireless & Social Engineering
• WPA2/WPA3 cracking basics
• Phishing simulations with SET
• Social engineering defence
Week 8 — Reporting & Documentation
• Structuring a pentest report
• Risk ratings and CVSS
• Remediation advice for clients
Phase 2 — Hands-on Labs:
Lab 1: Exploit a deliberately vulnerable web app (DVWA)
Lab 2: Use Burp Suite to intercept and modify requests
Lab 3: Perform a SQL injection attack in a lab
Lab 4: Use Metasploit to compromise a lab machine
Lab 5: Crack WPA2 in a controlled wireless lab
Lab 6: Write a full pentest report with risk ratings
Deliverable:
□ A working vulnerability exploitation write-up
□ A social engineering awareness report
□ A professional pentest report ready for a client
SECTION 03Phase 3: Advanced & Live Labs (Weeks 9-12)
Phase 3 takes you to advanced territory. You'll tackle advanced exploitation, cloud and container security, real CTF challenges, and a full capstone penetration test that becomes your portfolio piece.
| Week | Focus | Hands-on | Weekly Goal |
|---|---|---|---|
| Week 9 | Advanced Exploitation | Buffer overflows, evasion, custom payloads | Complete an advanced exploit chain |
| Week 10 | Cloud & Container Security | AWS security, Docker/K8s misconfigurations | Find and fix 10 cloud misconfigurations |
| Week 11 | CTF Challenges & Live Labs | HackTheBox, TryHackMe, live lab scenarios | Solve 10+ CTF challenges |
| Week 12 | Capstone & Certification Prep | Full pentest, CEH-style exam prep, resume | Complete capstone + mock certification exam |
Phase 3 — Syllabus (Weeks 9-12):
Week 9 — Advanced Exploitation
• Buffer overflows and memory exploits
• AV evasion techniques
• Custom payload development
Week 10 — Cloud & Container Security
• AWS IAM, S3 and VPC security
• Docker and Kubernetes misconfigurations
• Cloud penetration testing methodology
Week 11 — CTF Challenges & Live Labs
• HackTheBox and TryHackMe walkthroughs
• Real-world lab scenarios
• Time-boxed capture-the-flag challenges
Week 12 — Capstone & Certification Prep
• End-to-end penetration test
• CEH-style exam practice
• Resume and interview preparation
Phase 3 — Hands-on Labs:
Lab 1: Exploit a buffer overflow in a lab binary
Lab 2: Evade AV in a controlled environment
Lab 3: Audit an AWS account for misconfigurations
Lab 4: Attack a deliberately vulnerable Kubernetes cluster
Lab 5: Solve 10 HackTheBox / TryHackMe rooms
Lab 6: Run a full capstone penetration test on a client-like target
Deliverable:
□ A documented advanced exploit write-up
□ A cloud security audit report
□ A capstone pentest report ready for interviews
SECTION 04Tools & lab setup
You can't become an ethical hacker by reading alone. Here are the tools you'll master and the lab setup you'll build during the programme.
Daily Tracker:
Date: _________
☐ Attended class / watched recording
☐ Completed today's lab
☐ Practised on the lab VM
☐ Documented notes
☐ Pushed evidence to GitHub
☐ Reviewed yesterday's topics
☐ Planned tomorrow
Today's Key Learnings:
1.
2.
3.
Tomorrow's Priorities:
1.
2.
3.
Weekly Tracker:
Week: _____ (Phase 1 / 2 / 3)
Goals for this week:
1.
2.
3.
Daily Progress:
Mon: ☐☐☐
Tue: ☐☐☐
Wed: ☐☐☐
Thu: ☐☐☐
Fri: ☐☐☐
Sat: ☐☐☐
Sun: ☐☐☐
Weekly Wins:
1.
2.
3.
Challenges & Solutions:
1.
2.
Next Week's Goals:
1.
2.
3.
Monthly Tracker:
Phase: _____ (1 / 2 / 3)
Phase Goal:
_______________________________________________
Week 1 Progress: ☐☐☐
Week 2 Progress: ☐☐☐
Week 3 Progress: ☐☐☐
Week 4 Progress: ☐☐☐
Phase Wins:
1.
2.
3.
Tools Mastered:
1.
2.
3.
Labs Completed:
1.
2.
3.
CTF Challenges Solved: _____
Mock Exams Passed: _____
Certification Readiness: _____%
Next Phase's Goal:
_______________________________________________
SECTION 05Certification & exam prep
Uncodemy's programme is aligned with industry certifications such as CEH (Certified Ethical Hacker) and prepares you to sit the exams with confidence.
- CEH-aligned curriculum — every module maps to CEH exam objectives.
- Mock exams — timed practice tests with detailed answer walkthroughs.
- Lab-based exam readiness — real labs, not just theory, mirror the practical style of modern certifications.
- Trainer Q&A sessions — weekly doubt-solving with certified instructors.
- Resume & interview support — help presenting your certifications and labs to employers.
SECTION 06Interview Q&A — Ethical Hacking
Q1What is ethical hacking?
Ethical hacking is the practice of legally and authorisedly testing systems for vulnerabilities, with the goal of helping organisations fix them before malicious attackers can exploit them.
Q2What's the difference between a vulnerability and an exploit?
A vulnerability is a weakness in a system. An exploit is the specific technique or code that takes advantage of that weakness to cause harm or gain access.
Q3What is penetration testing?
Penetration testing is a structured, authorised simulation of a real-world attack against a system or network, with the goal of finding and documenting vulnerabilities before attackers do.
Q4What are the phases of a penetration test?
Reconnaissance, scanning and enumeration, exploitation, post- exploitation, and reporting. Many frameworks add pre-engagement scoping at the start.
Q5Why is reporting important in ethical hacking?
Because the value of a pentest is in the fixes it enables. Clear, actionable reports with risk ratings and remediation advice are what clients actually pay for.
SECTION 07Test yourself — Ethical Hacking quiz
Five questions. No sign-up.
0 / 5Pick an answer to see why it is right or wrong.
SECTION 08Frequently asked questions
Do I need prior IT experience to join?
No. Phase 1 starts from Linux and networking fundamentals. If you're from a non-IT background, our counsellors will guide you to the right starting point.
What certification will I be ready for?
The programme is aligned with CEH (Certified Ethical Hacker) objectives and includes mock exams. Your trainers will advise on which certification path suits your career goals.
Is all training done in a lab environment?
Yes — every phase includes hands-on labs on isolated virtual machines and intentionally vulnerable targets. You never test on live systems without authorisation.
What projects will I complete?
A reconnaissance report, a professional pentest report, a cloud security audit, and a full capstone penetration test on a client-like target — all documented for your portfolio.
What is the course duration?
The programme runs for 12 weeks across three phases. Weekday and weekend batches are available — book a free demo class to get the latest schedule and fee details.
Is placement support included?
Yes — resume rebuilds, portfolio review, mock interviews and interview scheduling for ethical hacking and cybersecurity roles are part of the programme.
SECTION 09Related reads
Classroom & online · Noida
Start your ethical hacking journey
Our Ethical Hacking Training Course takes you from foundations to advanced exploitation — with live labs, CTF challenges, and placement support.
₹32,999 · full programme- 12-week instructor-led programme
- Live labs & CTF challenges
- CEH-aligned certification prep
- Weekday & weekend batches