NOA Labs
🎯 Offensive Security · Corporate training

Ethical Hacking & Penetration Testing

A full authorised penetration-testing methodology — recon, exploitation, Active Directory, web and reporting — practised only in an isolated lab range.

Register your company → See the full outline ↓
$99 per employee · complete course
🗓️
4 weekends
Sat & Sun
⏱️
32 hours
8 live sessions
🎯
Advanced
Level
🧪
8 labs
Hands-on

Default hours 10:00 AM–2:00 PM (Asia/Karachi). Company pays — employees never pay individually.

About this training

Participants learn to think like attackers and work like professionals. The programme follows an industry methodology from scoping and rules of engagement through reconnaissance, vulnerability analysis, exploitation, privilege escalation, Active Directory attacks and post-exploitation, finishing with a full report readout. All practical work takes place in NOA Labs' isolated, purpose-built lab range; participants sign an authorised-use agreement and never test systems they do not own or have written permission to test.

Who it's for: Security engineers, SOC analysts moving to offensive roles, system administrators and developers in security teams.

What your team will be able to do

  • ✔Scope an engagement and write rules of engagement
  • ✔Perform reconnaissance and vulnerability analysis methodically
  • ✔Exploit and escalate privileges on Linux and Windows lab hosts
  • ✔Attack and defend a lab Active Directory environment
  • ✔Write a professional report with risk ratings and remediation

Advanced course outline

🔒 Session notes & lab guides unlock for enrolled employees
Weekend 1
Weekend 1 · Saturday

Ethics, law & engagement planning

Doing it legally, safely and professionally.

  • ▸Legal framework: PECA 2016 and unauthorised access
  • ▸Scoping, rules of engagement and authorisation letters
  • ▸Testing methodologies (PTES, OWASP WSTG)
  • ▸Safe testing in production environments
  • ▸Lab range orientation
🧪 Lab: Write rules of engagement for a bank test 🔒 Session notes 🔒 Lab guide
Weekend 1 · Sunday

Reconnaissance & enumeration

Finding the attack surface.

  • ▸Passive OSINT: DNS, certificates, leaked credentials
  • ▸Active scanning with Nmap
  • ▸Service enumeration (SMB, LDAP, HTTP, SNMP)
  • ▸Organising findings
  • ▸Avoiding noisy scans
🧪 Lab: Enumerate the lab range 🔒 Session notes 🔒 Lab guide
Weekend 2
Weekend 2 · Saturday

Vulnerability analysis & exploitation

From finding to foothold.

  • ▸Vulnerability research and CVE triage
  • ▸Exploit selection and safety
  • ▸Metasploit fundamentals
  • ▸Manual exploitation
  • ▸Password attacks and credential reuse
🧪 Lab: Gain an initial foothold 🔒 Session notes 🔒 Lab guide
Weekend 2 · Sunday

Web application penetration testing

Testing the applications banks expose.

  • ▸Burp Suite workflow
  • ▸Authentication and session testing
  • ▸Access control and business logic testing
  • ▸Injection and file-upload attacks
  • ▸Chaining low-severity issues
🧪 Lab: Test a lab internet-banking portal 🔒 Session notes 🔒 Lab guide
Weekend 3
Weekend 3 · Saturday

Privilege escalation

From user to root and SYSTEM.

  • ▸Linux privilege escalation: SUID, sudo, cron, kernel
  • ▸Windows privilege escalation: services, tokens, unquoted paths
  • ▸Credential harvesting from hosts
  • ▸Automated enumeration scripts
  • ▸Defensive fixes
🧪 Lab: Escalate privileges on lab hosts 🔒 Session notes 🔒 Lab guide
Weekend 3 · Sunday

Active Directory attacks

How attackers take over Windows domains.

  • ▸AD enumeration with BloodHound
  • ▸Kerberoasting and AS-REP roasting
  • ▸Pass-the-hash and relay attacks
  • ▸Path to Domain Admin
  • ▸Tiered administration as defence
🧪 Lab: Domain compromise in the lab 🔒 Session notes 🔒 Lab guide
Weekend 4
Weekend 4 · Saturday

Post-exploitation & lateral movement

Demonstrating business impact responsibly.

  • ▸Pivoting and tunnelling
  • ▸Lateral movement techniques
  • ▸Demonstrating impact without causing harm
  • ▸Clean-up and restoring systems
  • ▸Detection opportunities for blue teams
🧪 Lab: Pivot to a segmented network 🔒 Session notes 🔒 Lab guide
Weekend 4 · Sunday

Reporting & readout

The deliverable that clients actually pay for.

  • ▸Report structure: executive summary to technical detail
  • ▸Risk rating with CVSS and business context
  • ▸Writing actionable remediation
  • ▸Presenting to executives and engineers
  • ▸Retesting and closure
🧪 Lab: Capstone report and readout 🔒 Session notes 🔒 Lab guide
📝
Final assessment & certificate
Multiple-choice assessment plus attendance requirement → verifiable QR certificate.

Enrol your team in Ethical Hacking & Penetration Testing

One invoice for the whole team, volume discounts applied automatically.

Register your company → All corporate courses