Cybersecurity · Course Deep Dive

What Uncodemy's Cybersecurity Course Actually Covers in 2026

SECTION 01Module 1 — Networking and OS foundations

Before you can secure or attack anything, you need to understand how systems and networks work. This module builds that base.

• Networking fundamentals: OSI and TCP/IP models, protocols, and how data moves across networks.
• IP addressing and subnetting: IPv4, IPv6, CIDR, and how networks are structured.
• Common protocols: HTTP, HTTPS, DNS, DHCP, FTP, SSH, and SMTP.
• Linux fundamentals: Command line, file permissions, users, processes, and package management.
• Windows fundamentals: Active Directory, group policy, permissions, and event logs.
• Security basics: CIA triad, risk, threats, vulnerabilities, and controls.
• Cryptography basics: Symmetric and asymmetric encryption, hashing, and digital certificates.
• Virtualization: Setting up virtual machines for safe practice environments.

SECTION 02Module 2 — Offensive security and ethical hacking

This module teaches you to think like an attacker — within legal and ethical boundaries.

• Reconnaissance: Passive and active information gathering using OSINT, WHOIS, and DNS enumeration.
• Scanning and enumeration: Port scanning, service detection, and vulnerability scanning with Nmap and Nessus.
• Vulnerability assessment: Identifying and prioritizing weaknesses in systems and applications.
• Exploitation: Using Metasploit and manual techniques to test vulnerabilities safely.
• Password attacks: Brute force, dictionary, and hash cracking with John the Ripper and Hashcat.
• Privilege escalation: Linux and Windows escalation techniques.
• Post-exploitation: Maintaining access, lateral movement, and covering tracks (in lab environments).
• Social engineering: Phishing, pretexting, and human-focused attack vectors.

SECTION 03Module 3 — Web application security

Web applications are the most common attack surface. This module covers how to find and fix web vulnerabilities.

• OWASP Top 10: The most critical web application security risks.
• SQL injection: Finding and exploiting injection flaws.
• Cross-site scripting (XSS): Stored, reflected, and DOM-based XSS.
• Cross-site request forgery (CSRF): Understanding and testing CSRF defenses.
• Broken authentication: Session management, credential stuffing, and auth bypass.
• Burp Suite: Intercepting, modifying, and analyzing web traffic.
• API security: Testing REST and GraphQL APIs for common flaws.
• Secure coding: Writing code that resists common attacks.

SECTION 04Module 4 — Defensive security, SOC, and cloud

Offense is only half the picture. This module teaches you how organizations detect, respond to, and prevent attacks.

• SOC operations: How a Security Operations Center works, and the analyst's role.
• SIEM: Splunk and ELK stack — collecting, correlating, and analyzing logs.
• Incident response: Detection, containment, eradication, and recovery.
• Threat intelligence: Using threat feeds and IOCs to improve detection.
• Endpoint security: EDR, antivirus, and host-based detection.
• Network security: Firewalls, IDS/IPS, and network monitoring.
• Cloud security: AWS and Azure security fundamentals, IAM, and shared responsibility.
• Compliance and governance: GDPR, DPDP Act, ISO 27001, and risk management.

SECTION 05Tools and platforms you'll use

You'll get hands-on with the tools that security professionals use every day.

• Nmap: Network discovery and port scanning.
• Wireshark: Packet capture and network traffic analysis.
• Metasploit: Exploitation framework for penetration testing.
• Burp Suite: Web application security testing.
• John the Ripper and Hashcat: Password cracking.
• Nessus and OpenVAS: Vulnerability scanning.
• Splunk and ELK: SIEM and log analysis.
• Kali Linux: The standard penetration testing distribution.

SECTION 06Live projects and portfolio work

This is where the course becomes real. You don't just learn — you build.

• Vulnerability assessment project: Assess a lab network and produce a professional report.
• Penetration testing project: Full engagement from recon to reporting on a target environment.
• Web application security project: Find and document vulnerabilities in a deliberately vulnerable app.
• SOC investigation project: Investigate a simulated security incident using SIEM.
• Cloud security project: Secure a cloud environment and document the configuration.
• Capture The Flag (CTF) challenges: Practice your skills in competitive, legal environments.

SECTION 07Certifications and placement support

The course prepares you for industry certifications — and helps you get hired.

• CompTIA Security+: The foundational security certification.
• CEH (Certified Ethical Hacker): The most recognized offensive security certification.
• CompTIA CySA+: For defensive security and SOC analyst roles.
• AWS Security Specialty: For cloud security roles.
• Resume and portfolio review: Your materials are rebuilt to highlight real project work.
• Mock interviews: Practice with instructors and get honest feedback.
• Hiring partner connections: Introductions to companies looking for cybersecurity talent.
• Batch repeat option: Revise any module at no extra cost.

SECTION 08Test yourself — Uncodemy Cybersecurity Course

SECTION 09Frequently asked questions

SECTION 10Related reads