A fully isolated Kali Linux environment pre-loaded with Metasploit, targeting 3 deliberately vulnerable VMs. Practise exploitation, post-exploitation and pivoting.

Capture and dissect live traffic on a simulated enterprise network. Identify anomalies, map protocols, and practice filtering with Wireshark’s powerful display filter syntax.

Implement AES-256, RSA key pairs and digital signatures in a sandboxed Python environment. Observe encryption in action and test key sizes against timing attacks.

Use the Autopsy forensic suite to investigate a simulated compromised disk image. Recover deleted files, build a timeline, and identify the attacker’s footprint.

Run automated scans with OWASP ZAP and Nikto against a vulnerable web app (DVWA). Learn to triage scan results and validate findings manually using Burp Suite.

Walk through a full risk assessment cycle for a fictional financial institution. Identify assets, threats and vulnerabilities, calculate risk scores, and produce a risk register.