- Home
- Masterclasses
- Ethical Hacking
Ethical Computer Hacking
Pure hands-on hacking. Learn the same techniques real attackers use — legally and ethically. Penetration testing from reconnaissance through to writing the final report.
Free after redundancy in Wales with Welsh Government ReAct+ funding
What you'll learn on the Ethical Hacking course.
Ethical hackers are the people organisations pay to break into their own systems — to find the vulnerabilities before criminals do. It's one of the most exciting and well-paid career paths in tech.
This five-day course is pure practical. Kali Linux, real vulnerability scanners, real exploits against practice targets. By Friday you'll have conducted a full penetration test and written a professional report.
You need basic IT confidence — understanding of networking, operating systems, and the command line is helpful but not essential. Curiosity and persistence matter more.
Five days, one step at a time.
Mornings are taught sessions. Afternoons are hands-on labs where you build something real.
-
Day 1
Hacking Methodology & Setup
The ethical framework, legal boundaries, and the Kali Linux toolkit that forms the basis of every penetration test.
- Ethical hacking vs criminal hacking
- Legal frameworks & authorisation
- Penetration testing methodology
- Kali Linux setup & tools
- Virtual lab environment
- Scope & rules of engagement
LabSet up your Kali Linux environment and practice lab
-
Day 2
Reconnaissance & Scanning
Before you hack, you gather intelligence. OSINT, port scanning, service enumeration — the art of finding targets.
- OSINT (open-source intelligence)
- DNS enumeration
- Nmap port scanning
- Service version detection
- Vulnerability scanning (OpenVAS)
- Mapping the attack surface
LabConduct full reconnaissance and vulnerability scan of a target
-
Day 3
Vulnerability Exploitation
The core of ethical hacking. Exploit real vulnerabilities in practice systems — safely, legally, and methodically.
- Exploitation frameworks (Metasploit)
- Common vulnerability types
- Buffer overflows (conceptual)
- Privilege escalation
- Lateral movement
- Post-exploitation basics
LabExploit multiple vulnerabilities in a practice environment
-
Day 4
Web Application Security
Most attacks target web applications. SQL injection, XSS, authentication flaws — the OWASP Top 10 in practice.
- OWASP Top 10 overview
- SQL injection
- Cross-site scripting (XSS)
- Authentication & session attacks
- Burp Suite introduction
- Secure coding principles
LabFind and exploit vulnerabilities in a practice web application
-
Day 5
Reporting & Remediation
The hack is only half the job. Professional penetration testers live or die by the quality of their reports.
- Report structure & standards
- Risk rating methodologies
- Evidence documentation
- Remediation recommendations
- Executive summary writing
- Client presentation skills
CapstoneWrite and present a full penetration test report

Three real projects for your CV.
You leave with work you can show an employer, not just a certificate.
Full Penetration Test Report
A professional-grade pentest report covering methodology, findings, risk ratings and remediation — your interview portfolio piece.
Practical Hacking Portfolio
Documented evidence of reconnaissance, scanning, exploitation and web app testing across multiple targets.
Live Security Audit
A complete security audit of a practice system — demonstrating end-to-end penetration testing capability.
Is this course right for you?
Best for: IT staff, security curious, career changers.
This is for you if…
- You're fascinated by how hacking actually works
- Career changers wanting to enter penetration testing
- IT support staff wanting to specialise in security
- You completed our Cyber Security bootcamp and want more
- You enjoy problem-solving and puzzle-like challenges
It's probably not for you if…
- You have zero IT experience (start with our Cyber Security bootcamp)
- You want defensive-only security without offensive skills
- You're looking for management-level governance (try our AI + Cyber course)
- You want to hack for malicious purposes — this is strictly ethical
Your next chapter starts a week on Monday.
Five days is all it takes. Check you qualify, then reserve your place on the next Ethical Hacking course.


