Ethical Hacking & Red Team
Learn to attack systems the way a real adversary does, legally, in a lab built for it — then write the report that makes the findings worth paying for.
12wk
Course Length
26
Lessons & Labs
9
Modules
From Complete Beginner To Job-Ready Hacker
This is the course we wish existed when we started. It assumes nothing — no prior security background, no networking degree — and takes you all the way to running a real penetration test end to end. Every concept is taught with a keyboard in your hands, not a slide on a screen.
You build your own lab, learn how attackers think, and then practise every technique against an isolated network modelled on a mid-sized company: a public web tier, an internal Active Directory domain and a segmented finance subnet. By the final module you are chaining findings, escalating privileges, moving laterally and writing it all up the way a client actually needs it.
Skills You Leave With
- Set up and run your own Kali Linux hacking lab safely and legally.
- Understand networking, Linux and the TCP/IP stack well enough to attack them.
- Perform passive and active reconnaissance without tripping detection.
- Find, verify and safely exploit web and network vulnerabilities.
- Escalate privileges on Linux and Windows, then move laterally through a domain.
- Attack Active Directory — Kerberoasting, delegation abuse and ACL paths.
- Write a professional findings report with impact and remediation a client can act on.
- Run a full engagement end to end, from scope to signed-off report.
- Escalate from a foothold to domain administrator in a real AD lab.
- Write findings a client will actually act on, with evidence and CVSS.
- Stay inside the law: scope, authorisation and rules of engagement.
9 Modules, 26 Lessons
- How the internet actually works 34 min
- Linux command line from scratch 46 min
- Networking & TCP/IP for hackers 42 min
- Lab: build your Kali environment 60 min
- Assignment: map your home network —
- OSINT without touching the target 38 min
- Host discovery & port scanning with Nmap 45 min
- Service and version fingerprinting 37 min
- Lab: map the target network 120 min
- Injection: SQL, command and template 52 min
- Broken authentication and sessions 44 min
- Access control and IDOR chains 39 min
- Lab: compromise the public web tier 150 min
- Finding and using public exploits safely 40 min
- The Metasploit framework end to end 55 min
- Payloads, listeners and reverse shells 43 min
- Lab: gain your first foothold 150 min
- Linux: SUID, capabilities and cron paths 48 min
- Windows: tokens, services and unquoted paths 51 min
- Credential harvesting and reuse 37 min
- Lab: root three hosts 180 min
- Domain enumeration and attack paths 46 min
- Kerberos abuse: roasting and delegation 55 min
- Lab: reach the finance subnet 210 min
- Rating severity honestly 33 min
- Writing remediation a developer can use 40 min
- Final assessment: full engagement 48 hrs
- Certificate issue and review —
- How AD trusts, tickets and delegation really work 48 min
- Kerberoasting and AS-REP roasting in practice 42 min
- Mapping attack paths with BloodHound 38 min
- Lab: foothold to Domain Admin in an isolated forest Graded
- Scoring findings honestly with CVSS 30 min
- Writing for the board and for the engineer, in one document 34 min
- Lab: produce a full client-ready report from your engagement Graded
"I started this course not knowing what a terminal was. Twelve weeks later I passed my first real interview by walking them through an engagement I ran in the lab."
— Graduate, Cohort 9LKR 14,500 / course
90 days of lab access after the final session.
- Duration 12 weeks
- Lessons 26
- Graded labs 9
- Level All Levels
- Live sessions 2 / week
- Language English & Sinhala
- Certificate Included
Seats fill fast — next cohort opens the first Monday of the month
Tell us which course and when you would like to start — we reply with the next available cohort. Get in touch or call +94 76 759 0967.
- A laptop with 8GB+ RAM that can run a virtual machine.
- Curiosity and willingness to break things — no security background needed.
- Basic comfort using a computer; everything else is taught from zero.
Nipun Dinudaya
Lead InstructorTeaches every Velpoint course personally, from the first Linux command to the final client-ready report. Cohorts are capped at 20 so every lab submission is reviewed by hand and nobody gets left behind.
Everything You Get Access To
All of this is yours from day one, with 90 days of lab access after the final session.
Kali Linux Lab Setup Guide
Step-by-step PDF to build your own virtual hacking lab from scratch, safely and offline.
Nmap & Enumeration Cheat Sheet
Every scan flag, NSE script and enumeration command you will reach for, on one page.
Privilege Escalation Checklists
The Linux and Windows privesc checklists our testers actually run on engagements.
Penetration Test Report Template
The client-ready report format you write your final engagement in — findings, impact, remediation.
Isolated Target Network
Your own copy of the corporate lab — 18 hosts, 4 segments — resettable for 90 days.
Curated Reading & Practice List
Recommended books plus a sequenced set of Hack The Box and TryHackMe rooms to keep practising.
Rules of Engagement Template
The scope and authorisation document to sign before you touch a client system.
Privilege Escalation Playbook
Linux and Windows escalation checks in the order that finds things fastest.
Other Courses
Zero to Job Ready
Cyber Security Career Track
Our full syllabus in one guided programme: networking, Linux, Windows, security fundamentals, offence, defence and a portfolio project — taught live, zero to job-ready.
Absolute Beginner
Cyber Security Essentials
The honest starting point. Understand how computers, networks and real attacks work, harden your own devices, and build your first lab — no IT background needed.
Not Sure This Is Your Level?
Tell us where you're starting from and we'll point you
to the right course — no obligation.