Getting comfortable with Kali Linux & Windows environments

Understanding Linux Bash & Windows PowerShell scripting

Writing & executing Bash scripts for automation

Working with Python for penetration testing

Common penetration testing tools (Nmap, Netcat, Wireshark)

Windows command-line utilities for enumeration & privilege escalation Using PowerShell for security testing

Understanding OSINT (Open-Source Intelligence) techniques

Passive reconnaissance using Shodan, Google Dorking, WHOIS

Scanning & enumeration using Nmap, Netcat & Nikto

Banner grabbing & service detection

Identifying open ports & network vulnerabilities

Discovering potential targets & attack vectors

Automated vulnerability scanning with Nessus, OpenVAS, & Nmap Scripts

Manual exploitation vs automated exploits

Web application attacks including SQL Injection, XSS, CSRF & LFI/RFI

Exploiting common web vulnerabilities

Client-side attacks: attacking browsers, phishing techniques & JavaScript exploitation

Searching for exploits in ExploitDB & GitHub

Modifying & adapting exploits for specific targets

Transferring malicious payloads in Windows & Linux

Bypassing firewalls, IDS/IPS & antivirus software

Exploiting misconfigurations & vulnerabilities for privilege escalation

Windows & Linux privilege escalation techniques

Cracking & decrypting passwords with John the Ripper & Hashcat

Using Mimikatz & NTLM attacks

Bypassing firewalls using SSH tunneling & pivoting

Understanding Active Directory security & attack techniques

Attacking Kerberos authentication (Pass-the-Ticket, Golden Ticket)

Exploiting Windows & Linux vulnerabilities with Metasploit

Writing custom Metasploit modules

Using PowerShell scripts for post-exploitation

Fileless malware & PowerShell persistence techniques

End-to-end penetration testing engagement

Writing professional pentest reports

Solving 5 retired OSCP exam machines

Mock exam simulation & time management strategies

One-on-one doubt clearing & final review