End-to-end VAPT engagement
Conduct a full vulnerability assessment and penetration test on a deliberately vulnerable lab network: reconnaissance, scanning, exploitation, and a professional VAPT report.
NmapMetasploitNessus
Home / Courses / Cyber Security
Cyber Security
Ethical hacking, penetration testing, VAPT, and SOC analysis, with hands-on labs using the same tools that real security professionals use.
Curriculum
Four modules covering networking fundamentals, ethical hacking and penetration testing, web application security, and SOC/incident response.
Wk 1: Networking, OSI model, TCP/IP, DNS, HTTP/HTTPS, protocols common in attacks
Wk 2: Linux command line, file system, permissions, process management, Kali Linux setup
Wk 3: Python for security: port scanners, password crackers, automation scripts
Wk 4: Cryptography: symmetric/asymmetric encryption, PKI, SSL/TLS, hashing, digital signatures
Wk 5: Penetration testing methodology, VAPT lifecycle, legal and ethical frameworks
Wk 6: Reconnaissance: passive OSINT, active scanning, Shodan, Maltego
Wk 7: Vulnerability scanning with Nmap and Nessus; CVE database; CVSS scoring
Wk 8: Exploitation with Metasploit: payloads, staged vs stageless, post-exploitation
Wk 9: Password attacks: Hashcat, John the Ripper, rainbow tables, brute force and dictionary attacks; VAPT report writing
Wk 10: Web application architecture, HTTP internals, Burp Suite setup and proxy interception
Wk 11: OWASP Top 10: injection, broken auth, sensitive data, XEE, broken access control, CSRF
Wk 12: SQL injection in depth: manual, automated (SQLmap), blind injection; XSS: reflected, stored, DOM
Wk 13: API security testing, JWT attacks, OAuth vulnerabilities, WAF bypass techniques
Wk 14: SOC workflow, SIEM tools (Splunk basics, ELK stack), log analysis, alert triage
Wk 15: Incident response playbooks, digital forensics basics, cloud security (AWS IAM misconfigurations, security groups, WAF)
Wk 16: Wireless security (Aircrack-ng, WPA cracking), capstone VAPT engagement, CEH mock exams
Hands-on Labs & Projects
All labs run in an isolated virtual environment, no production systems at risk. The same tools, same methodology, same documentation standard as a real penetration testing engagement.
Conduct a full vulnerability assessment and penetration test on a deliberately vulnerable lab network: reconnaissance, scanning, exploitation, and a professional VAPT report.
Find and exploit OWASP Top 10 vulnerabilities on a practice web application using Burp Suite, SQLmap, and manual techniques, and write a remediation report.
Analyse a simulated attack scenario in a SIEM environment, identify the attack vector, timeline, compromised systems, and produce an incident response report.
A complete black-box pentest on a lab environment with no prior information, reconnaissance through exploitation to a professional client-ready VAPT report.
Career Outcomes
We don't promise "100% placement"; no honest institute can. Here's what we actually provide, and what you can realistically expect.
Typical starting salaries in Pune for security analyst and pentester roles, an observation, not a guarantee.
Full CEH v12 syllabus covered with mock exams throughout. CompTIA Security+ concepts also covered.
A TechSummitTrainers completion certificate for this program once you finish the course and capstone project.
Roles this prepares you for
Schedule & Format
Attend live from our FC Road centre or join remotely. Your choice, every session.
All hacking labs run in a dedicated virtual network, isolated from the internet and each other.
Every session runs live, and is recorded so you can revisit lab steps as many times as you need.
Bring your own laptop. The lab environment is set up and supported by your mentor throughout the course.
Course FAQ
No. This course starts with networking fundamentals and Linux basics. You will learn Python and Bash scripting as part of the security toolkit. Prior programming experience is helpful but not required.
VAPT stands for Vulnerability Assessment and Penetration Testing, the core methodology of ethical hacking. The course covers VAPT methodology in full: reconnaissance, scanning, exploitation, post-exploitation, and professional report writing.
The course prepares you for the Certified Ethical Hacker (CEH v12) from EC-Council and covers concepts aligned with CompTIA Security+. Exam registration fees are paid directly to the certifying body.
Ethical hacking, testing systems you are authorised to test, is completely legal and in high demand. This course covers only authorised penetration testing on practice lab environments. Hacking without permission is a criminal offence under the IT Act 2000, which is covered clearly in the course.
Kali Linux, Metasploit, Nmap, Burp Suite, Wireshark, Nessus, John the Ripper, Hashcat, SQLmap, and Aircrack-ng, the core toolkit used in real penetration testing engagements.
Recordings of every live session are shared within 24 hours, so you can catch up. Hands-on lab sessions are best attended live.
The course fee is discussed during your free demo call. We offer flexible payment options. Contact us to know more.
Penetration Tester, SOC Analyst, Security Analyst, Information Security Analyst, and Cyber Security Engineer. Fresher salaries in Pune for security roles range from ₹3.5 LPA to ₹8 LPA based on certifications and company.
Yes. Batch timings are confirmed at your free demo based on current batch schedules, with morning and evening options available.
Yes. Network security (firewalls, IDS/IPS, VPN, protocol attacks) is a full module. Cloud security (AWS security groups, IAM, WAF, common cloud vulnerabilities) is covered in the final module.
A SOC Analyst monitors systems for attacks and responds to security incidents, a defensive role. A Penetration Tester proactively attacks systems (with permission) to find vulnerabilities, an offensive, consulting role. This course gives you skills and exposure to both paths.
Any graduate or undergraduate degree qualifies, BE/B.Tech, BCA, BSc IT, MCA, or any other discipline. Basic computer literacy and an interest in security are the only real prerequisites.
Other tracks at TechSummitTrainers
Cyber security is the practice of protecting systems, networks, and data from digital attacks, unauthorised access, and damage. As Indian businesses move operations online and to the cloud, the attack surface has exploded, and the workforce to defend it has not kept pace. India's cyber security skills shortage is estimated in the hundreds of thousands of positions, making it one of the most acute hiring gaps in the country's technology sector.
In Pune specifically, demand is driven by the city's large IT services sector (companies running SOC operations for global clients), fintech and banking firms with strict regulatory compliance requirements, and product companies with significant AWS and cloud exposure. For fresh graduates, cyber security offers one of the fastest paths to a specialised, well-paid role without needing years of prior experience.
Ethical hacking, also called penetration testing or white-hat hacking, is the authorised attempt to find vulnerabilities in a system before malicious attackers do. The key distinction is authorisation: a penetration tester works with explicit written permission from the system owner, following a defined scope and methodology, and produces a report documenting findings and recommended fixes.
Hacking without permission is a criminal offence under India's IT Act 2000, with penalties including imprisonment. This course covers only authorised penetration testing on isolated lab environments. The legal and ethical framework is a core part of the curriculum, not an afterthought, because every professional in this field must understand it.
VAPT (Vulnerability Assessment and Penetration Testing) is the standard methodology for assessing the security posture of an organisation's systems. Vulnerability Assessment identifies potential weaknesses systematically; Penetration Testing actively exploits those weaknesses to demonstrate their real impact. Together, VAPT gives organisations a clear, evidence-based picture of their security risks.
Companies need VAPT for compliance (PCI-DSS, ISO 27001, RBI guidelines for banks), for insurance requirements, and because a formal VAPT report is required before many enterprise contracts. VAPT is a billable consulting service, penetration testers often work as freelancers or at security consulting firms, in addition to in-house roles.
A Security Operations Centre (SOC) Analyst monitors an organisation's IT infrastructure for security threats in real time. Using SIEM (Security Information and Event Management) tools like Splunk and ELK, SOC analysts correlate logs from across the network, identify suspicious activity, and escalate or respond to incidents. It is a high-demand, entry-level-accessible role in Indian IT services, banking, and enterprise technology companies.
TechSummitTrainers is located at Office No. 509, Kushal Wallstreet, Fergusson College Road, Shivajinagar, central Pune. All labs in this course run in a fully isolated virtual environment using real tools and real attack scenarios. The practitioner-led format means every concept is taught in the context of how it's actually used on an engagement. Batches are kept small so every student gets individual attention during lab sessions. Both classroom and online attendance are supported, with every session recorded.
Book your free demo today. No payment, no commitment. Next batch starts Nov 10, 2026.
Get a Call Back →