طاها رضوی

• مقدماتی
• مسیر قرمز
• ۸ درس

دربارۀ این دوره

مخاطبان

• علاقه‌مندان به مباحث امنیت
• علاقه‌مندان به تست نفوذ
• مشاوران و طراحان فناوری اطلاعات
• کارشناسان شبکه و زیرساخت

پیش‌نیازها

• این دوره، پیش‌نیازی لازم ندارد و تمامی سرفصل‌ها، از پایه، آموزش داده می‌شود.

• Foundations of Ethical Hacking & Pentesting
  • What penetration testing is vs. vulnerability assessment
  • Security terminology
  • Pentesting methodology overview
  • Types of assessments (black/white/gray box)
  • Rules of engagement & authorization
  • Legal & ethical frameworks
• Networking Essentials for Pentesters
  • OSI & TCP/IP models
  • IP addressing, subnets, routing basics
  • Common network protocols (DNS, HTTP/S, SMB, FTP, SSH)
  • Ports and services concepts
  • Packet flow fundamentals
• Linux & Pentesting Work Environment
  • Introduction to Linux basics
  • Filesystem navigation
  • Installing and using a security-focused distro
  • Virtualization setup
    • VirtualBox/VMware
    • Networking modes (NAT vs host-only)
  • Safe lab environment principles (isolated networks)
• Information Gathering & Reconnaissance
  • Passive Recon
    • DNS lookups, WHOIS, certificate transparency
    • OSINT basics (Shodan overview, not hands-on)
    • Footprinting vs reconnaissance
  • Active Recon
    • Network discovery concepts
    • Introduction to scanning tools (Nmap fundamentals only)
• Vulnerability Scanning & Assessment
  • Common vulnerability types (high-level: misconfigurations, weak passwords, outdated services)
  • Intro to CVE/CVSS scoring
  • Vulnerability scanners (Nessus Essentials/OpenVAS basics)
• Basics of Exploitation Concepts
  • What exploitation means in a pentest
  • Common low-risk lab examples
    • default credentials
    • insecure network services
    • outdated software
  • Intro to Metasploit framework navigation only
    • modules overview
    • safe interaction with intentionally vulnerable machines (e.g., Metasploitable)
• Reporting & Communication
  • Anatomy of a professional report
    • executive summary
    • technical findings
    • risk ratings
    • remediation recommendations
  • Documentation during testing
• Final Practical & Review
  • Guided assessment of small lab netwo
  • Wrap-Up
    • Next steps & certification paths
    • Preview of advanced course topics

گواهینامه‌ی دوره