The curriculum is arranged like a real security workflow. You don’t just learn commands — you learn when, why,
and in what order to use them.
Linux Basics with a Hacker’s MindsetModule 1
VM vs dual-boot vs VPS, apt/yum basics, Linux directory map (/etc, /var, /home), terminal workflow, and a
first toolkit: ls, cd, cat/less, grep, find, history.
Filesystem, Permissions & UsersModule 2
chmod/chown, SUID/SGID, sticky bit, common misconfigs, /etc/passwd & /etc/shadow, and mapping users after
you land a shell.
Processes, Services & systemdModule 3
ps/top/htop/pstree, background jobs, systemctl, unit files, and how to spot risky service configs from both
attacker and defender perspectives.
Networking Essentials for HackersModule 4
Interfaces/routes/ports using ip, ss/netstat, tcpdump, and how to understand what’s listening and where your
traffic flows. Intro to tunneling and pivots.
Shell Power: Bash, Pipes & AutomationModule 5
Pipes/redirection, grep/awk/sed, sort/uniq, bash basics, wordlist cleanup, recon data formatting, cron/at,
and common security gotchas.
SSH, tmux & Remote WorkflowsModule 6
Keys vs passwords, safe SSH habits, port forwarding, SOCKS proxy basics, and tmux workflows for long scans,
multiple shells, and stable sessions.
Logs, Monitoring & Forensics BasicsModule 7
/var/log, journalctl, auth/web logs, timeline-style analysis, what defenders see, and how attackers typically
try to hide.
Capstone: From Login to Loot (Safely)Module 8
End-to-end workflow: landing a shell, enumeration, privilege escalation mindset, evidence collection, port
forwarding, and clean documentation like an exam report.
