01
PHASE 01
Networking Fundamentals
Understand how systems talk to each other before you test them.
- OSI & TCP/IP model
- IPv4, subnetting, routing
- DNS, DHCP, NAT
- Wireshark packet analysis
CYBER SECURITY LEARNING ROADMAP
From networking to red teaming.
Build a real offensive mindset.
Start with the network, move through Linux and web fundamentals, then layer in exploitation, privilege escalation and red team tradecraft. Each stage is designed to turn theory into a repeatable workflow.
LEARNING SEQUENCE
Follow the path from foundational access to adversary emulation.
02
PHASE 02
Linux & Kali Workflow
Build the command-line habits that keep every offensive step repeatable and reviewable.
- Kali Linux basics
- Shell scripting
- Permissions, users, services
- System reconnaissance
03
PHASE 03
Web & Application Basics
Learn the request flow, trust boundaries and application logic that attackers abuse.
- HTTP, cookies, sessions
- Browsers, headers, APIs
- OWASP Top 10 basics
- Request tampering
04
PHASE 04
Vulnerability Discovery
Turn curiosity into evidence by scanning, enumerating and correlating weak signals.
- Port scanning & service checks
- Vulnerability context
- Web fuzzing
- Proof-of-impact validation
05
PHASE 05
Windows & Active Directory
Map identity, trust and privilege flows inside enterprise systems.
- Windows services
- Local privilege escalation
- AD users, trusts, groups
- Kerberos and token abuse
06
PHASE 06
Exploitation & Privilege Escalation
Translate a foothold into system control with careful validation and step-by-step reasoning.
- Exploit chaining
- Privilege escalation
- Credential theft
- Persistence review
07
PHASE 07
Post-Exploitation & C2
Keep operations controlled, resilient and observable while moving deeper into a target.
- Beaconing concepts
- Command-and-control flow
- Lateral movement
- Loot prioritisation
08
ADVANCED PROFESSIONAL PROGRAMME
Red Teaming & Adversary Simulation
Think like an adversary. Build a stronger defense. Plan authorized, threat-informed exercises and turn safe emulation into better detection and measurable resilience.
- Scope, authorization & success criteria
- Threat intelligence & ATT&CK mapping
- Safe emulation & detection collaboration
- Executive reporting, remediation & retest
Ready for the full academy experience? Open the learning library and move from foundational study into labs, exercises and CTF practice.
Open learning library