Master essential tools, techniques, and concepts in Vulnerability Assessment and Penetration Testing (VAPT) to land your first job.
Intermediate
120h
vapt
penetration-testing
cyber-security
ethical-hacking
Card legend
Topic
Milestone
Task
Note
Decision
Project
Grouped
- AI Assist
- Progress
Sign in to use AI Assist
Sign In
Proof of Competence
0%
0 / 21 checkpoints declared
0/11 evidence needed for 100% — max 50% without proof
Foundational Knowledge and Environment Setup
You can explain the differences between vulnerability assessment and penetration testing and the ethical boundaries involved
Milestone
Write a summary comparing vulnerability assessment and penetration testing (cover key distinctions)
Checkpoint
You can set up and configure a dedicated penetration testing environment with virtual machines and networking isolation
Milestone
Set up Kali Linux in a VM and confirm networking isolation (able to test targets safely)
Checkpoint
Build a small home lab including a vulnerable machine (e.g., Metasploitable) and your testing VM
Project
Core VAPT Tools Mastery
You can perform comprehensive network and host discovery using Nmap and supporting tools, enumerating open ports and services
Milestone
Scan a local network with Nmap and identify at least three hosts with open ports (report results)
Checkpoint
Document a network scan report including service versions and possible vulnerabilities
Project
You can exploit common vulnerabilities using Metasploit and perform password attacks with brute force tools
Milestone
Successfully exploit a vulnerable service in your lab using Metasploit (gain shell or session)
Checkpoint
Vulnerability Assessment and Reporting
You can run and interpret automated vulnerability scans and differentiate false positives from real threats
Milestone
Generate and analyze a full vulnerability scan report on a target system (identify critical vulnerabilities)
Checkpoint
Create a remediation report template based on scan results and prioritize fixes
Project
You can manually discover and exploit common web vulnerabilities using proxy tools and custom scripts
Milestone
Intercept and modify HTTP requests with Burp Suite to exploit a basic SQL injection vulnerability (demonstrate data extraction)
Checkpoint
Build a minimal custom scanner script that detects a specific vulnerability class (e.g., open redirects)
Project
Advanced Tools and Soft Skills
You can perform post-exploitation activities and escalate privileges on compromised machines responsibly
Milestone
Conduct privilege escalation on a vulnerable VM and document the process (verify elevated access)
Checkpoint
You can produce professional penetration testing reports and communicate findings effectively to stakeholders
Milestone
Draft a sample VAPT report including executive summary, technical findings, and remediation recommendations
Checkpoint
Present a mock VAPT report to a peer or mentor and incorporate feedback
Project