Which level am I?
☐ I can explain IP, ports, TCP vs UDP and DNS
☐ I use the Linux terminal comfortably
☐ I understand HTTP requests, cookies and sessions
☐ I have solved beginner lab machines on practice platforms
☐ I can write a short report of what I found

0-1 ticks → Beginner
2-3 ticks → Intermediate
4-5 ticks → Specialist tracks

# Run only against lab machines you are allowed to test
ping -c 3 10.10.10.5
nmap -sC -sV -oN scan.txt 10.10.10.5
# -sC default scripts, -sV versions, -oN save output
cat scan.txt | grep open

Lab Engagement Checklist
☐ Written scope: which IPs / URLs are allowed
☐ Recon notes saved
☐ Scan results saved with timestamps
☐ Each finding: evidence + steps to reproduce
☐ Risk rating for each finding
☐ Recommended fix for each finding
☐ Lab machines reset after the exercise

Finding: SQL injection in login form (lab app)
Severity: High
Location: /login, parameter 'username'
Evidence: application error revealed database query structure
Impact: attacker could bypass login or read data
Fix: use parameterised queries; validate input; least-privilege DB user
Reference: OWASP Top 10 — Injection

Ethical Hacking Rules
1. Test only systems you own or have written permission to test
2. Stay inside the agreed scope
3. Do not access, copy or change real data you do not need
4. Report findings only to the system owner
5. Practise on lab machines and legal practice platforms
6. Know that unauthorised access is an offence under India's IT Act, 2000

Common entry routes after an ethical hacking course
- SOC analyst (monitoring and alert triage)
- Junior VAPT / penetration tester
- Security support or IT security administrator
- Application security trainee
What helps: lab write-ups, practice platform progress,
clear communication and a relevant certification

Ethical Hacking Course Scorecard (1-5)
                     Course A   Course B   Course C
Right level for me     ___        ___        ___
Foundations covered    ___        ___        ___
Lab hours per week     ___        ___        ___
Methodology taught     ___        ___        ___
Report writing         ___        ___        ___
Legal and ethics       ___        ___        ___
Career support         ___        ___        ___
TOTAL                  ___        ___        ___

Questions for the demo class
1. Which lab machines or platforms will I use?
2. How many lab hours per week?
3. Will I write full reports on my findings?
4. Which certification does this prepare for, and is the exam fee included?
5. How are legal rules and scope taught?
6. What happens if I miss a session?

Lab Practice Log
Date      Machine/App      Technique learned      Write-up done?
______    ____________     __________________     ☐
______    ____________     __________________     ☐
______    ____________     __________________     ☐
Weekly goal: 2 machines + 1 full write-up