Penetration Testing For Professionals

Breadcrumb Abstract Shape
Breadcrumb Abstract Shape
Breadcrumb Abstract Shape
13 মাসের কোর্স, 600+ প্রি রেকর্ডেড ক্লাস!! 
 
দীর্ঘ ১৩ মাসের কোর্স | 600+ প্রি-রেকর্ডেড ক্লাস | OSCP লেভেলের প্রশিক্ষণ
বাংলা ভাষায় প্রথমবারের মতো এমন একটি পেনেট্রেশন টেস্টিং কোর্স, যা আপনাকে প্রফেশনাল পেনেট্রেশন টেস্টার হিসাবে ইন্ডাস্ট্রিতে কাজ করার উপযোগী করে গড়ে তুলবে ।
আমাদের লক্ষ্য শুধু সার্টিফিকেশন নয়, বরং একজন দক্ষ সাইবার সিকিউরিটি প্রফেশনাল তৈরি করা।
 
 কোর্সে  প্রি রেকর্ডেড ক্লাস থাকবে। ভিডিওগুলো প্রতি সপ্তাহে মডিউল হিসাবে দেওয়া হবে। কোর্সের মাঝেই আপনি সাপোর্ট পাবেন কোর্স এর যেকোনো ক্লাস বিষয়ে যেকোনো সমস্যায় ডিসকাশন গ্রুপে পোস্ট করলে আমাদের Pentester প্যানেলের শিক্ষকরা আপনাকে সাহায্য করবে। সপ্তাহে একটি করে Problem Solving লাইভ সেশন হবে
 
ক্লাস রিলিজ হবে প্রতিদিন – রাত 10 টার পর! । সপ্তাহে 6 টা ক্লাস সিক্রেট টেলিগ্রাম চ্যানেলে আপলোড করা হবে। বাকী 1 দিন প্রাকটিস করবেন
 
⭕ 10 টা Exam নেওয়া হবে এবং টোটাল 10 টা Exam এ ৭০% মার্কস পেলে সার্টিফিকেট দেওয়া হবে।
 
⚠️Registration Deadline: March 30th, 2026
✅ক্লাস শুরু – 1st April, 2026
 
Device Requirement: 
⭕ PC with 4/8 RAM 
⭕ Storage HDD/ SSD – 125/250 GB

⭕ Tryhackme 1 month Subscription/Voucher

প্রতি দিন শেখার পিছনে Minimum 2 ঘন্টা সময় দিতে হবে, কারণ ৯০% Practical class থাকবে | Main Course Fee  40,000/-  কিন্তু PTP এর 4th ব্যাচ এর জন্য কোর্স ফি  নির্ধারণ করা হয়েছে 15,000/- 
 

Penetration Testing For Professionals: আপনার স্বপ্ন পূরণের সোপান

  • বাংলা ভাষায় প্রথমবারের মতো এমন একটি কোর্স, যা পুরোপুরি হাতে-কলমে শেখাবে কিভাবে একজন ইন্টারপ্রাইজ লেভেলের পেনেট্রেশন টেস্টার হওয়া যায়।
  • OSCP/CPTS মানের প্রশিক্ষণ দিয়ে আমরা তৈরি করি পেশাদার সাইবার সিকিউরিটি এক্সপার্ট।
  • হ্যান্ডস-অন ট্রেনিং এবং বাস্তব সমস্যা সমাধানের সক্ষমতা অর্জন করতে পারবেন এই কোর্সের মাধ্যমে।
 

কেন এই কোর্স আপনার জন্য BEST?

  • সঠিকভাবে স্কোপিং থেকে শুরু করে পেনেট্রেশন টেস্টিংয়ের সব ধাপ শেখানো।
  • প্রি-রেকর্ডেড ক্লাস এবং সাপ্তাহিক লাইভ সাপোর্ট সেশন।
  • ইন্ডাস্ট্রি-স্ট্যান্ডার্ড টুলস ব্যবহার করে বাস্তবসম্মত চ্যালেঞ্জ মোকাবেলার সুযোগ।
  • প্রফেশনাল রিপোর্ট রাইটিং এবং ক্লায়েন্ট প্রেজেন্টেশন শেখানোর মাধ্যমে আপনাকে প্রকৃত পেশাদার করে তোলা।
আপনি এইখানে সুযোগ পাবেন রিয়েল পেনটেস্টিং প্রজেক্টে কাজ করার যদি ইন্টারভিউ এ পাশ করতে পারেন ।  যেটি এই কোর্সকে অন্য সব কোর্স থেকে আলাদা করে । আপনি সার্টিফিকেট পেলেও ইন্ডাস্ট্রিতে কাজ পাবেন না যদি না আপনার রিয়েল ওয়ার্ল্ড এ কাজ করার এক্সপেরিয়েন্স থাকে 
 
Disclaimer

The instructor is not linked to OFFSEC in any manner. The course is independently created to better prepare for the Enterprise Level Pentesting. As we have 4 years+ Experience in Pentesting & RED Teaming.

“Hacked by Himel” A ISO/IEC 27001 Certified  Platform has a clear ethics in Cyber security world, we are working to ensure data security of all Companies, Organizations, Countries and Peoples’, we follow the Cyber Security Act 39, 2023 of Bangladesh Govt as well.  So, if you have intension to learn un-ethics technical learning from us, then we are discouraging to you to join this course; honestly, besides, we are very strict to follow our ethical principles. 

❣️For Any Query: https://t.me/hackedbyhimel

❣️Call Now: 01951045900
https://wa.me/+8801951045900

 
Show More

Course Content

Introduction to Penetration Testing & Methodologies
This module introduces the core concepts, processes, and methodologies of penetration testing. Learners will understand the purpose, benefits, types, strategies, and cost considerations of pentesting, along with the difference between automated and manual testing. The module also covers pentesting phases, methodologies, ethics, required qualifications, and associated risks, providing a solid foundation for real-world and professional penetration testing.

  • What is Penetration Testing
  • Benefits of Conducting Pentesting
  • Pentesting Service Delivery Model
  • ROI For Penetration Testing
  • Types of Penetration Assessment
  • Strategies of Penetration Testing
  • Penetration Testing Cost & Comprehensiveness
  • Automated and Manual Pentesting
  • Common Areas of Pentesting
  • Process of Penetration Testing
  • Phase of Penetration Testing
  • Penetration Testing Methodologies
  • When Should Penetration Testing Be Performed
  • Ethics of a Penetration Tester
  • Qualification of a Pentester
  • Risk Associated With Penetration testing

Laws and Regulations of Data Protection
Overview of key data protection regulations in Bangladesh, USA, Europe (GDPR), UK (UK GDPR), India (DPDP Act), and China (PIPL), focusing on legal compliance and ethical handling of data during penetration testing.

Penetration Testing Scope & Engagement
This module covers how to plan, scope, and formalize a penetration testing engagement. Learners will understand pre-engagement activities, RFP handling, scoping meetings, assessment types, testing strategies, in-scope and out-of-scope assets, deliverables, timelines, team staffing, cost estimation, and proposal submission, ensuring clear, legal, and effective pentest engagements.

Handling Legal Issues in Pentesting
This module explains how to manage legal risks in penetration testing engagements. Learners will understand the importance of legal counsel, pentesting contracts, authorization documents (Get-Out-of-Jail-Free letter), confidentiality/NDA clauses, legal vetting of engagement letters, and team independence checks, ensuring pentests are conducted lawfully, ethically, and safely.

Preparation For the Pentest
This module focuses on final preparation steps before executing a penetration test. Learners will cover reviewing the engagement letter, maintaining engagement logs, conducting kickoff meetings, preparing the SOW, obtaining required legal and client permissions, onsite coordination, and mission briefings, ensuring the pentest starts organized, authorized, and risk-free.

Professional Open-Source Intelligence (OSINT)
This module provides a comprehensive, hands-on approach to OSINT for penetration testing and investigations. Learners will gather intelligence using web, DNS, search engines, social media, email, images, business, wireless, and people-based OSINT, leveraging both manual techniques and automation tools. The module also covers sock puppets, note-keeping, lab building, real-world case studies, and OSINT report writing, enabling students to collect, analyze, and present actionable intelligence professionally.

Professional FootPrinting
This module focuses on professional footprinting and enumeration techniques used during the early stages of penetration testing. Learners will understand enumeration principles and methodologies while gathering detailed intelligence about domains, cloud resources, staff, and network services. The module covers hands‑on enumeration of common protocols and services such as FTP, Telnet, NTP, SNMP, SMB, NFS, DNS, SMTP, IMAP/POP3, MySQL, MSSQL, along with Linux and Windows remote management protocols, enabling accurate attack surface mapping for advanced exploitation.

Professional Vulnerability Assessment
This module introduces learners to systematic vulnerability assessment and scanning. It covers assessment standards, CVSS scoring, and CVE tracking, along with practical guidance on using leading tools like Nessus and OpenVAS. Students will learn how to configure scans, interpret results, handle scanning issues, and export findings, building the skills needed to identify and prioritize vulnerabilities in professional penetration testing engagements

Network Penetration Testing – External
This module covers end‑to‑end external network penetration testing from initial planning to final reporting.

Modern Internal Network Pentesting
This module provides a deep, hands-on understanding of Active Directory in internal network penetration testing. Learners will build realistic AD labs, understand authentication mechanisms (NTLM, Kerberos), and perform enumeration, credential harvesting, lateral movement, pivoting, exploitation, persistence, and privilege escalation using real-world techniques and tools. The module concludes with Active Directory hardening strategies, preparing learners to both attack and secure enterprise Windows environments professionally.

File Transfer During Assessment

Port Forwarding, Pivoting & Tunnelling

Network Penetration Testing – Perimeter Devices
This module focuses on testing and bypassing perimeter security controls such as firewalls and IDS. Learners will assess firewall configurations, ACLs, detection capabilities, and vulnerabilities using practical techniques including traceroute, hping, nmap, and Nessus. The module also covers IDS evasion and bypass techniques, such as spoofing, flooding, traffic replay, and anonymity methods, enabling students to evaluate and report the effectiveness of enterprise perimeter defenses.

Bug Bounty For Professional
This module teaches end-to-end web application bug bounty hunting, covering recon, enumeration, content discovery, vulnerability exploitation, WAF evasion, and professional reporting, preparing learners for real-world web security assessments.

Web Application Penetration Testing (Advanced)
This module provides a complete, professional approach to web application penetration testing, covering pre-engagement, server-side, client-side, and advanced testing techniques. Learners will identify and exploit modern web vulnerabilities, including authentication, authorization, session management, injection flaws, business logic issues, API and advanced attack vectors, using real-world labs and scenarios to prepare for enterprise-grade web pentesting engagements.

API Pentesting For Professional
This module delivers a hands-on, end-to-end approach to API security testing. Learners will understand API fundamentals, set up realistic labs, and perform reconnaissance, enumeration, and endpoint analysis. The module covers authentication and authorization flaws (BOLA, BFLA, JWT attacks), injection vulnerabilities, rate-limiting issues, mass assignment, excessive data exposure, SSRF, and vulnerability chaining, concluding with a final capstone challenge to simulate real-world API pentesting

Linux Privilege Escalation
This module focuses on Linux enumeration and privilege escalation techniques used in real-world penetration testing. Learners will perform manual and automated enumeration, identify sensitive credentials and weak permissions, and exploit cron jobs, SUID/SGID binaries, and SUDO misconfigurations. The module also covers kernel exploitation, Linux capabilities abuse, service-level attacks (MySQL UDF), NFS exploitation, Docker escalation, and concludes with an advanced practical assessment, building strong hands-on Linux post-exploitation skills.

Windows Privilege Escalation
This module delivers a comprehensive, hands-on approach to Windows privilege escalation. Learners will perform manual and automated enumeration, understand UAC and Windows privilege architecture, and exploit service misconfigurations such as DLL hijacking, unquoted service paths, and weak permissions. The module covers credential harvesting, registry-based attacks, token impersonation techniques (RoguePotato, PrintSpoofer, JuicyPotato), and advanced exploits including kernel vulnerabilities, UAC bypasses, and insecure system components. It concludes with an advanced practical assessment, equipping learners with real-world Windows post-exploitation skills

Documentation & Report Writing During Pentesting

Tags

A course by

M

Course Includes:

  • Price:
    Original price was: ৳ 40,000.00.Current price is: ৳ 15,000.00.
  • Instructor:mdhimelatikh
  • Lessons:754
  • Level:Expert
৳ 15,000.00 ৳ 40,000.00

Courses You May Like

active directory pentest
Original price was: ৳ 25,000.00.Current price is: ৳ 6,999.00.
  • 93 Lessons
  • 0 Students
Network Pentesting
Active Directory Pentesting & Red Teaming