Cyber Security Training

Protect yourself from hackers & cyberattacks. Join Cyber security Training Course and prepare from CEH certification.

What you'll learn

Write a program that can map websites and discover all links, subdomains, files and directories
Run dictionary attacks and guess login information on login pages
Write a program that can discover hidden paths in websites
Learn how to crack Wireless Access Point passwords
Learn how to gain access to any type of machine: Windows/Linux/MacOS
SQL Injection, XSS, Command Injection and other techniques
Master Information Gathering and Footprinting
Discover how hackers exploit systems and learn how to keep your data safe.
Master the top tools and techniques needed to strengthen your organisation’s security.

Learn Website Application Penetration Testing from scratch
Code your own Advanced Backdoor that you can use in your Penetration Tests
Learn Networking & different Networking Protocols
Learn how to bypass Firewalls & Intrusion Detection System with Advanced Scanning
Sniff passwords over the local area network with Man In The Middle Attacks
Learn how to trick people into opening your program (i.e Social Engineering)
Bypass Anti-Virus Programs
Learn to prevent data breaches and safeguard your customer’s trust.
Leverage AI-driven techniques to enhance your ethical hacking skills and stay ahead of cyber threats.

Our Training Process

Practical Session

Assignment

Projects

Be Job Ready

Interview Preparation

Resume Building

Key Highlights

Personalized career coach
90% Practical Training
Certification
100% Placement Guarantee
Study material
Instant doubt solving
Guaranteed Internship
Case studies and Projects

Cyber Security Training

Introduction to Cybersecurity & VAPT

Cybersecurity fundamentals and the CIA triad
Threat, risk, vulnerability, attack surface and security controls
Common terms: vulnerability, exploit, payload, zero-day, PoC, CVE, CWE and CVSS
Phishing, spear phishing and social engineering
Types of hackers and threat actors
Malware overview: virus, worm, trojan, ransomware, spyware, rootkits and botnets
Red Team, Blue Team, Purple Team, SOC, VAPT and Penetration Testing
Vulnerability Assessment vs Penetration Testing vs Red Teaming
How a typical day looks in VAPT and SOC roles
Scope, authorization, Rules of Engagement and ethical boundaries
Practical activity: identify the attack surface of a fictional organization

Networking Fundamentals for VAPT

What is a network? LAN, WAN, WLAN, Internet and intranet
Common devices: router, switch, firewall, access point, proxy, load balancer, IDS/IPS and VPN
IPv4, IPv6, public/private addresses, loopback, gateway and MAC addresses
ARP, ICMP and basic DNS resolution
TCP vs UDP and the TCP three-way handshake
Common ports and protocols used during security assessments
OSI and TCP/IP models, encapsulation, packets, frames and segments
NAT and basic subnet/CIDR concepts
Wireshark: captures, filters, TCP streams, DNS and HTTP analysis
tcpdump fundamentals
Practical labs: inspect addressing, capture a TCP handshake, analyze DNS/HTTP traffic and identify protocols

Virtualization & VAPT Lab Setup

Virtualization, hypervisors, host and guest operating systems
VMware / VirtualBox concepts
Installing and configuring Kali Linux
NAT, Bridged, Host-only and Internal networking
Snapshots, cloning and safe isolation of vulnerable machines
Lab setup using intentionally vulnerable targets
Practical lab: build an isolated attacker/target environment and verify connectivity

Linux Fundamentals for VAPT

Linux architecture, distributions, shell and terminal
Linux vs Windows from a security tester’s perspective
Filesystem navigation and important directories
File creation, reading, copying, moving and deletion
Text processing: grep, cut, sort, uniq, wc, awk, sed, tr and xargs
Pipes, input/output redirection and command chaining
Users, groups, sudo, su and privilege concepts
File permissions, chmod, chown and chgrp
SUID, SGID and Sticky Bit
Processes, services and systemctl
Network commands: ip, ss, netstat, ping, traceroute, curl, wget, dig and nslookup
Package management, archives and environment variables
Practical labs based on finding files, identifying listening services, changing permissions and processing command output

Basic Cryptography for Security Testers

Need for cryptography and real-world use cases
Encoding vs encryption vs hashing
Base64, URL encoding, hexadecimal and ASCII
Hashing: MD5, SHA family, salting and password hashing
Symmetric vs asymmetric encryption
AES, RSA and public/private key concepts
Digital signatures and TLS/HTTPS basics
Decoding, decrypting and cracking terminology
Practical exercises using CyberChef/OpenSSL and basic hash identification

Web Technology Fundamentals

Client-server architecture, frontend, backend, web server, application and database
HTML and CSS essentials for security testing
JavaScript basics, DOM, events and Fetch/XHR
HTTP requests and responses
HTTP methods, status codes and important headers
HTTP vs HTTPS and TLS basics
URL structure and URL encoding
Cookies, sessions and important cookie attributes
Authentication vs authorization
Same-Origin Policy and CORS basics
Forward, reverse and intercepting proxies
Practical labs: inspect browser requests, manipulate parameters, analyze cookies and trace login/session flows

Burp Suite Fundamentals

Intercepting proxy concepts and browser configuration
Installing and using the Burp CA certificate in a lab environment
Proxy, HTTP History, Repeater, Intruder, Decoder and Comparer
Target/Sitemap and scope configuration
Sequencer, Match and Replace and BApp Store overview
Practical labs: intercept, modify, replay and compare requests; test parameters and decode data

Python for Security Automation

Installation, environment setup and running scripts
Variables, data types, operators, strings and user input
Lists, tuples, dictionaries and sets
Conditions, loops and functions
File I/O and exception handling
Modules, pip and virtual environments
HTTP requests and JSON handling
Regular expressions and command-line arguments
Socket programming basics
Brief introduction to classes and objects
Practical mini-projects: port checker, HTTP header checker, URL status checker and hostname resolver

Git & GitHub Basics

Git vs GitHub, repositories and version control
Clone, status, add, commit, pull and push
Reading README files, releases and issues
.gitignore and the risk of committing passwords/API keys
Practical: clone and run an authorized security tool from a repository

Passive Reconnaissance & OSINT

Passive reconnaissance methodology and attack-surface discovery
WHOIS and domain intelligence
DNS records and passive DNS concepts
Passive subdomain discovery and certificate transparency
Search engine reconnaissance and indexed information
Technology fingerprinting
Historical content and archived websites
Public code repositories and exposed-secret concepts
Document/image metadata and public employee/email information
ASN/IP ownership and Internet-exposure search engines
Practical: build an attack-surface inventory for an authorized target or lab scenario

Active Reconnaissance, Scanning & Enumeration

Host discovery using ICMP, ARP and network ranges
Nmap fundamentals and scan strategy
TCP Connect, SYN, UDP, service/version and OS detection concepts
NSE introduction and interpretation of port states
Enumeration methodology: identify service → version → configuration → attack surface
FTP, SSH, HTTP/HTTPS, SMB, DNS, SNMP, SMTP and database enumeration
Web content, directory, file and virtual-host discovery
Practical: enumerate a multi-service lab host and produce an enumeration worksheet

Web Application Penetration Testing

End-to-end web application penetration testing methodology
Scope review, application mapping, attack-surface identification and role mapping
Information disclosure and sensitive-file discovery
Authentication testing: enumeration, password policy, rate limiting, reset flows and session handling
Authorization testing: horizontal/vertical privilege escalation, IDOR and forced browsing
SQL Injection: error-based, UNION-based, boolean/time-based blind concepts and validation
Cross-Site Scripting: reflected, stored and DOM-based; contexts, sources and sinks
CSRF and browser trust behavior
File upload security testing
Path traversal
OS command injection
SSRF
XXE
Server-Side Template Injection
Insecure deserialization concepts
CORS misconfiguration
Clickjacking
Business logic vulnerabilities and workflow abuse
Race-condition concepts
Security headers and client-side storage
JavaScript analysis and source maps
Vulnerability chaining and impact demonstration
Extensive guided and independent labs using intentionally vulnerable applications

Introduction to APIs

What APIs are and why applications use them
REST, SOAP and GraphQL overview
Endpoints, resources, methods, request/response bodies
JSON and XML
API authentication: API keys, Basic Auth, Bearer tokens, JWT and OAuth overview
Swagger/OpenAPI and Postman collections
Practical: send and inspect API requests using curl, Postman and Burp Suite

API Penetration Testing

API penetration testing methodology and endpoint discovery
API versions, hidden endpoints and parameter discovery
Authentication and token testing
JWT security testing concepts
BOLA/IDOR and Broken Function Level Authorization
Mass assignment and excessive data exposure
Rate limiting and resource-consumption testing
Injection and file-upload testing through APIs
HTTP method and Content-Type manipulation
CORS in APIs
GraphQL introspection, queries and mutations
Practical coverage of the OWASP API Security Top 10 in controlled labs

Windows Fundamentals for VAPT

Windows architecture and filesystem basics
Users, groups, Administrator, SYSTEM and UAC
Processes, services, Registry and NTFS permissions
Core commands: whoami, hostname, ipconfig, netstat, tasklist, systeminfo and net commands
PowerShell basics for security testers
SMB, RDP, WinRM and Windows Firewall concepts
Practical: enumerate a Windows lab system and identify exposed services and local configuration

Network Penetration Testing

End-to-end network penetration testing methodology
Scope, host discovery, port scanning and service enumeration
Deep practical enumeration of common network services
Vulnerability research using CVEs, vendor advisories and public technical references
Version validation and avoiding false assumptions
Password security testing concepts: dictionary attacks, spraying and credential reuse in authorized labs
Metasploit Framework architecture and safe lab usage
Exploit, payload, reverse shell, bind shell and listener concepts
Controlled exploitation and session handling
Linux privilege-escalation fundamentals: sudo, SUID, cron, permissions, exposed credentials and services
Windows privilege-escalation fundamentals: services, permissions, stored credentials and common misconfigurations
Basic pivoting, tunneling and port-forwarding concepts
Practical multi-host network assessment

Vulnerability Assessment & Management

Vulnerability scanning vs vulnerability assessment vs penetration testing
Scanner concepts: Nessus, OpenVAS/Greenbone and enterprise scanner workflows
Authenticated vs unauthenticated scans
Scan configuration and safe scanning considerations
False positives, false negatives and manual validation
CVE, CWE and CVSS
Severity vs business risk
Prioritization using exploitability, exposure, asset criticality and business impact
Remediation, retesting and vulnerability lifecycle
Practical: review scanner findings, validate selected findings and prioritize remediation

VAPT Reporting & Professional Workflow

Assessment lifecycle: kickoff, scope, testing, evidence, reporting and retesting
Executive summary, scope, methodology, limitations and risk summary
Writing technical findings with title, severity, CVSS, CWE, affected asset, description, impact, reproduction, evidence and remediation
Writing clear reproduction steps and useful remediation guidance
Technical impact vs business impact
Evidence handling: screenshots, requests/responses, commands and logs
Communicating with developers, management and clients
Retest statuses: fixed, partially fixed, not fixed, risk accepted and unable to retest
Practical: write and peer-review professional vulnerability findings

Final Capstone VAPT Assessment

Students receive an authorized lab environment containing web, API, Linux and Windows/network components
Review scope and plan the assessment
Perform reconnaissance, scanning, enumeration and vulnerability discovery
Validate findings and demonstrate impact safely
Assign severity and prioritize findings
Prepare a concise executive summary and technical findings
Present key findings and remediation recommendations

Skills you will gain

Cyber Security Ethical Hacking Linux VAPT Bug Bounty Python Networking Servers

Course Certification

Become a Certified Cyber Security Expert with TryCatch Classes and enhance your career prospects to the next level.

This certificate serves as an official badge of your successful Ethical Hacking training course completion, highlighting your expertise.

Students Reviews

I took a Cyber security and Python course at TryCatch Classes. I learned a lot about cyber security, which helped me become a cyber security freelancer. I’ve already found and fixed 100 bugs in many government websites. I’m really proud of what I’ve achieved, especially being recognized by the government for my work.

Aditya Patel

Cyber Security Freelancer

Hi my name is Bhagyashri Gunjate. I have completed full stack web development course from Trycatch and saying this happily that I also got my first job from TryCatch. Although I have gap of 4 years after completing my engineering Mohnish and Mehul Sir gave me confidence that I can do it and at this age also I can be succeed in web development field. Talented and passionate faculty helps me to resolve my query and made my base and logic strong. They initiated new ways of thinking to improve project query and my personal performance as well. Also this helped me to improve my speed to produce codes faster and get things done more accurately. Mehul Sir and Monish Sir was so helpful that they always kept my motivation and confidence high. They gave me projects that are more skilful and as per industry standards which directly helps me to get my first job journey. I highly recommend Try Catch classes to everyone who wanted to upscale their knowledge and career in Web Development field.

dnone

Full Stack Developer
Company

Jane Doe

Software engineer
Ola

Jane Doe

Software engineer
Ola

Jane Doe

Software engineer
Ola

Jane Doe

Software engineer
Ola

Genuine reviews for our Cyber Security Training

Sanjana Mishra

Cyber Security Expert

This course was amazing! Learned tons about hacking & protecting myself online. The teacher was super cool and made it easy to understand, even for beginners like me. Highly recommend!

Posted on

Google

Aditya Mokashi

Cyber Security Expert

Thanks to this course! The instructors were experts and answered all my questions. Learned about different cyber threats and many informative topics that helped me get my first job. Definitely worth it!

Posted on

Google

Niharika Basu

Cyber Security Expert

Great course for anyone who wants to understand cyber security better. Learned about different types of attacks and how to defend myself. The course was challenging but rewarding, and I feel much more prepared now.

Posted on

Google

Niharika Basu

Cyber Security Expert

Posted on

Google

Milind Sonawane

Cyber Security Expert

The course content was top-notch, the instructor was super knowledgeable and helpful, and the entire experience was professional and well-organized. 5 stars all around!

Posted on

Google

Milind Sonawane

Cyber Security Expert

The course content was top-notch, the instructor was super knowledgeable and helpful, and the entire experience was professional and well-organized. 5 stars all around!

Posted on

Google

Kavya Chitale

Cyber Security Expert

Cyber security lectures are super engaging, and the projects are challenging but fun. I’m learning tons about cyber threats and how to defend against them. Definitely worth it!

Posted on

Google

Preeti Sharma

Cyber Security Expert

Big thanks to all professors for making cyber security so easy to understand! Overall, it helped me understand the importance of cyber security and how to stay.

Posted on

Google

Software Developer

Posted on

Google

Software Developer

Posted on

Google

Software Developer

lorem

Posted on

Google

Student's Portfolio

UX-UI Designer

Mansi Sanghani

UX-UI Designer

Mansi Sanghani

UX-UI Designer

Mansi Sanghani

UX-UI Designer

Mansi Sanghani

UX-UI Designer

Mansi Sanghani

UX-UI Designer

Mansi Sanghani

UX-UI Designer

Mansi Sanghani

UX-UI Designer

Mansi Sanghani

UX-UI Designer

Mansi Sanghani

UX-UI Designer

Frequently Asked Questions (FAQs)

What is the duration of the course?

Total duration is approximately 9-10 months along with Live Projects.

Is there 100% Placement Guarantee after the course is over?

We provide 100% placement guarantee in our Cyber Security training course in Mumbai.

Are there any prerequisites before starting Cyber Security Training?

No previous coding experience needed.

Who teaches Cyber Security?

At TryCatch, our team consists of seasoned experts with over 15+ years of experience. A skilled Cyber Security Expert will be guiding students, encouraging them to ask questions without hesitation, and enabling us to effortlessly address all your inquiries.

Is the course Online or Offline?

This Cyber Security course is available offline & online both. You may choose whatever is feasible for you.
Offline course can be done at our Borivali Branch in Mumbai.
Online Live Course can be done on Zoom or Google Meet.

Who can learn Cyber Security?

This course is designed for everyone, even if you’re studying Commerce, Arts, or Mechanical subjects, or if you’re still in school. It doesn’t matter what your background is, you can definitely learn this course.

Do I need prior experience in Cyber Security?

No, prior experience is not required. This course is designed to cater to both beginners and those with some background in Cyber security.

What software and tools do I need for this course?

All the tools required for this training will be installed during the course.

Will I receive a certificate upon course completion?

Upon completion of the course, you will receive an official global Cyber Security certificate. This certificate serves as an official badge of your successful course completion, highlighting your expertise.

Can I interact with instructors and ask questions during the course?

Absolutely! Our instructors are always available to answer all your questions and solve your doubts.

Are there any real-world projects or case studies in the course?

Yes, we incorporate real-world projects and case studies into the course to help you apply what you’ve learned in practical scenarios.

Is there a money-back guarantee if I’m not satisfied with the course?

We offer a satisfaction guarantee. If you are not satisfied with the course within a specified timeframe, you can request a refund.