en
CBO • Registration Pending Bulenga, Wakiso District, Uganda
"Where Talent Grows Together" Join Community
Security • Step-by-Step Curriculum

Ethical Hacking & Penetration Testing

Learn authorized offensive security step-by-step—from Linux & networking recon to PortSwigger web labs, TryHackMe rooms, privilege escalation, and executive reporting.

Track Progress 0/8 Steps (0%)
Sign in to save progress, pass the Mastery Test, and earn a verified MESHLUMA Certificate. Practice Mastery Test (5 Questions)
Practical Equipment & Study Requirements
What laptop, phone, internet, and free tools you need for this field—plus cloud options if your device is low-spec.
8GB+ Laptop (or Browser Labs)
Laptop / PC Specs

Minimum: 4GB–8GB RAM laptop with Chrome/Firefox (use TryHackMe AttackBox & PortSwigger browser labs without local VMs).

Recommended: Intel i5 / Ryzen 5, 16GB RAM, 512GB SSD for running Kali Linux VM, Burp Suite, and Nmap locally.

Free Cloud Option: TryHackMe AttackBox, PortSwigger Academy & OverTheWire SSH — run safely in browser without risking your host OS.

Phone & Internet

Phone-Friendly Start

You can practice OverTheWire Bandit on Android via Termux SSH (Steps 1–2), but web proxying & exploitation labs require a laptop.

Internet: 3–5 Mbps for browser labs, Burp updates, and VPN connections.

Free Software & Hardware Kit
Burp Suite Community (Free) Nmap Kali Linux / WSL2 Termux / OpenSSH

Hardware / Kit: None required — strictly test only authorized lab targets (never real systems without written permission).

Best Way to Study This Field Easily: Learn one vulnerability class at a time in PortSwigger Academy, then immediately exploit and patch it in the built-in lab.
Advanced Stage

Production patterns, architecture, automation, and security rigor.

Step 5 advanced ~20 hrs

Exploitation Frameworks & Vulnerability Chaining

Validate CVEs responsibly, chain low-severity bugs, and understand payload mechanics.

What You Will Learn
  • Metasploit modules & listeners
  • Manual exploit adaptation
  • Reverse vs bind shells
Hands-On Milestone Project: Root 3 retired beginner/medium lab boxes on TryHackMe or Hack The Box.
Step 6 advanced ~18 hrs

Linux & Windows Privilege Escalation

Audit SUID binaries, sudo rules, weak service permissions, and kernel misconfigurations.

What You Will Learn
  • Linux SUID, capabilities & cron privesc
  • Windows services & token privileges
  • Automated vs manual enum
Hands-On Milestone Project: Build a personal Linux/Windows privilege-escalation verification checklist.
Field Mastery Assessment

Ethical Hacking & Penetration Testing — Practical Mastery Assessment

Score 80% or higher (5 scenario questions) + submit your real practical capstone project after at least 7 days of study to earn a Verified MESHLUMA Certificate.

Sign In & Complete Study Steps to Unlock Test

Tests are given after studying all 8 steps to prove real practical mastery.

Sign In to Track Study & Unlock Test