// OFFENSIVE SECURITY ACADEMY
From Zero to
Offensive Security Expert
Build practical offensive security skills through hands-on labs, realistic attack scenarios, PowerShell, C2 operations, wireless security, hardware hacking, penetration testing, and advanced offensive security techniques. Develop a strong security mindset and prepare for real-world cybersecurity challenges. Built for Pakistan’s next generation of cybersecurity professionals.
// BECOME AN OFFENSIVE SECURITY EXPERT
04 Tracks · 36 Modules · 250 Topics
24,988 PKR
One-Time Fee
79+
Topics Covered
Hands-On
Lab Exercises
Lifetime
Mentorship
// WHO THIS TRACK IS FOR
Absolute Beginners
No prior IT or hacking knowledge needed. Start from ground zero with step-by-step guidance on networking, Linux, and offensive security.
CS & IT Students
Move past dry university theory into live cyber labs, exploit delivery, and job-ready skills.
SysAdmins & SOC
Learn how attackers break perimeters and pivot smoothly from defense into Red Teaming.
Self-Taught Learners
Break free from random YouTube tutorials and build a disciplined, repeatable methodology to chain exploits from initial access to root.
01
IP addresses — public / private / static / dynamic
02
IPv4 vs IPv6
03
Ports & Services (HTTP, FTP, SSH, SMTP, DNS, SMB)
04
TCP/IP vs UDP — 3-way handshake
05
OSI Model (7 layers)
06
Subnetting basics — CIDR, netmask
07
Common protocols — ICMP, DNS, ARP, SMB
08
Port forwarding concepts
09
How websites work — client-server, DNS
10
Firewalls & IDS/IPS
01
Linux distributions overview
02
Shell basics & navigation
03
File operations & permissions
04
Text editing — vim/nano
05
Filters — grep, awk, sed
06
Package management
07
User & group management
08
Process management
09
Network management — ifconfig, ss, netstat
10
VirtualBox / VMware setup
11
Installing Kali Linux
12
Essential tools setup — Nmap, Metasploit, Burp
13
Cloud setup & SSH access
01
Passive vs active recon
02
WHOIS, Netcraft, Google dorking
03
Subdomain enumeration — Sublist3r, Amass
04
DNS recon — dig, nslookup, dnsrecon
05
Email harvesting & OSINT workflows
06
Active recon — zone transfer, ping sweeps
07
Automated recon — AutoRecon
01
Nmap — port scanning & service detection
02
Web server enumeration
03
FTP enumeration — anonymous access
04
SMB / NetBIOS share discovery
05
SMTP — VRFY, open relays
06
MySQL / DB enumeration
07
SSH — banner grabbing, weak creds
01
Man-in-the-Middle attacks
02
Port forwarding abuses & pivoting
03
Wireless attacks — evil twin, WPA/WPA2
01
Social media account attacks
02
Phishing page creation
03
Email spoofing setup
04
HID attacks — USB Rubber Ducky
05
Keylogger creation in Python
01
Windows exploits — EternalBlue
02
Reverse shell initial access
03
Bypass Windows Defender
04
PowerShell Empire — C2 basics
05
Persistence techniques
01
Ransomware concepts & defense
02
Malware creation overview
03
Steganography — hiding data in files
01
Full toolchain setup
02
Automated workflows — recon to persistence
03
C2 frameworks — PowerShell Empire
04
RATs and detection evasion
01
Responsible disclosure & legal boundaries
02
Detecting common attacks — logs, IDS
03
Hardening basics — Linux, Windows, network
01
Open-source intelligence workflows
02
Dark web access — secure & legal usage
03
Leak search & breach analysis
01
Weak file permissions exploitation
02
Sudo misconfigurations
03
Cron job exploitation
04
SUID / SGID abuse
05
Linux capabilities
06
NFS misconfigurations
07
SSH keys & config file abuse
08
Kernel exploits
09
Process hijacking
10
Port forwarding for internal access
11
User group abuse — docker, lxd
12
Vulnerable software exploitation
13
Auto-enumeration — LinPEAS, LinEnum
01
Full penetration test simulation
02
Report writing & documentation
03
Certification roadmap guidance
04
Career preparation & portfolio
7
Core Modules
38
Topics Covered
Advanced
Difficulty Level
Capstone
Final Project
01
Welcome and introduction
02
What is a Command & Control framework
03
Brief overview of C2 frameworks
04
Why Sliver C2
05
Legal & ethical boundaries — don't go to prison
01
Servers, implants, and beacons
02
Supported protocols
03
Installing Sliver on your Kali VM
04
Exploring the Sliver CLI
05
Generating your first implant — walkthrough
01
Implant customization
02
Introduction to hands-on labs
03
Demo — generating & delivering implants on Linux targets
04
Demo — generating & delivering implants on Windows targets
01
Top five Armory tools
02
Unlocking the Armory
03
Session management
04
System & user enumeration
05
Extracting credentials from Edge browser
06
Privilege escalation
07
Credential harvesting
01
Network pivoting concepts
02
Exposing internal ports
03
Pivoting in practice
04
Persistence concepts
05
Scheduled tasks
06
Registry run keys
07
Service creation
01
Windows Defender overview
02
Defender bypass sandbox introduction
03
Static evasion techniques
04
Runtime evasion techniques
05
Demo — process injection
06
Staged vs stageless payloads
07
Demo — AV bypass walkthrough
01
Capstone walkthrough — full attack chain
02
Capstone walkthrough — evasion & persistence
03
Capstone walkthrough — final debrief
7
Core Modules
58
Topics Covered
84
Video Lessons
Hands-On
Radio Labs
01
802.11 standards — frequencies, channels & bands
02
Wi-Fi adapter chipsets & monitor mode support
03
Airmon-ng — enabling monitor mode
04
Airodump-ng — discovering APs & clients
05
Aireplay-ng — deauthentication & packet injection
06
Targeting BSSIDs, ESSIDs & channels
07
Capturing the WPA/WPA2 four-way handshake
08
Aircrack-ng — dictionary attacks on captures
09
WEP encryption — why it fell
10
Building effective Wi-Fi wordlists
01
From capture files to crackable hashes
02
GPU-accelerated cracking with hashcat
03
Rule-based & mask-based attacks
04
PMKID attacks — cracking without a client
05
Default password schemes of ISP routers
06
Optimizing attacks for GPU performance
07
Clientless cracking — techniques & limits
08
Organizing wordlists & attack workflows
09
Reporting cracked credentials responsibly
01
Rogue AP concepts — abusing client trust
02
Deauthentication attacks with mdk4
03
Building your own AP with hostapd
04
Evil twins — cloning legitimate networks
05
Karma attacks & probing clients
06
Harvesting credentials through rogue portals
07
Routing victims through rogue infrastructure
08
Detecting & defending against rogue APs
01
802.1X, EAP & RADIUS architecture
02
EAP methods — PEAP, EAP-TLS, EAP-TTLS
03
Hosting a fake enterprise network
04
Harvesting enterprise credentials
05
Abusing weak certificate validation
06
Downgrade attacks against EAP methods
07
Hardening WPA-Enterprise deployments
01
Captive portals — how networks gate access
02
Deploying rogue captive portals
03
Designing credential-harvesting portals
04
DNS spoofing to drive victims to portals
05
Bypassing MAC-based authentication
06
Social engineering onto fake portals
07
Captive portal security best practices
01
Bettercap overview & setup
02
Sniffing traffic on rogue networks
03
Capturing credentials & cookies in transit
04
DNS & HTTP spoofing modules
05
Downgrade techniques & their limits
06
Proxies & content injection
07
Automating attacks with caplets
08
Detecting bettercap activity on networks
01
Kismet architecture — passive discovery
02
Capture sources & channel hopping
03
Tracking APs & clients over time
04
Wardriving workflows & GPS mapping
05
Detecting rogue & evil twin APs
06
Real-time wireless alerting
07
Kismet as a wireless IDS
08
Visualizing the RF environment
09
Building a wireless monitoring kit
9
Core Modules
74
Topics Covered
74
Video Lessons
Beginner
Entry Level
01
Course introduction & what you will build
02
Before opening your router box — lab requirements
03
Ethical hacking & responsible disclosure
01
Section intro
02
What is electricity — part 1
03
What is electricity — part 2
04
Schematics, voltage sources, resistors & Ohm's law
05
Kirchhoff's voltage law & series circuits
06
Parallel circuits & Kirchhoff's current law
07
Circuit Lab — simulation demo
08
Reading schematics
09
Section challenge
10
Section challenge — solution walkthrough
01
Electrical lab safety
02
Opening the router
03
ESD precautions
04
Introduction to PCBs
05
Introduction to digital multimeters
06
Measuring voltage with a DMM
07
Measuring resistance with a DMM
08
Measuring continuity with a DMM
09
Measuring current with a DMM
01
AC vs DC power
02
Capacitors
03
Demoing filters with Circuit Lab
04
Inductors
05
Diodes
06
Transistors
07
Transistor circuit lab example
08
Electronic communications & signals
01
Introduction to UART — part 1
02
Attaching header pins — solderless
03
Attaching header pins — soldering (optional)
04
Logic analyzers — sigrok & PulseView
05
Introduction to UART — part 2
06
Hardware hacking CTF
01
IoT architecture & attack surface
02
Internet-facing IoT devices
03
Hardware OSINT via FCC ID
04
Embedded system components
05
Locating & reading datasheets
06
Locating firmware online
07
Lab network setup
08
Nmap scans against the router
09
Exploring past CVEs
10
Section & notes review
01
Initiating a UART shell
02
Boot logs & the bootloader
03
Exfiltrating files with TFTP
04
Transferring tools onto devices with TFTP
05
Hunting interesting files & passwords
06
Reviewing files & cracking passwords
07
Checking running processes & network connections
08
Prompting additional console logging
09
Serial connections via Python
10
Tricky UART connections
11
Troubleshooting UART
12
Section & notes review
01
Firmware extraction methods
02
Serial Peripheral Interface — part 1
03
Serial Peripheral Interface — part 2
04
Extracting firmware from ROM
05
Firmware analysis
06
Inspecting firmware & manual extraction
07
Enumerating the root file system
01
Introduction to reverse engineering
02
Reverse engineering a decryption function — part 1
03
Reverse engineering a decryption function — part 2
04
Decrypting configuration files
05
Auditing util_execSystem for command injection
06
Tracing function calls
07
Section & notes review
08
End-of-course challenge
09
Course wrap-up & next steps
Why Just Hacked On
BUILT FOR THOSE WHO THINK BEYOND THE OBVIOUS
Pakistan’s Offensive Security Academy
JUST HACKED ON is Pakistan’s only academy dedicated to practical offensive security training, with a focus on ethical hacking, penetration testing, red teaming, exploitation, and real-world attack methodologies..
Skills Over Certificates
We focus on building practical offensive security skills, technical depth, and an attacker mindset not simply selling certificates or theory-based courses.
One-Time Fee. Lifetime Mentorship.
Our offensive security programs are designed around a one-time fee with lifetime mentorship, giving learners continued access to technical guidance beyond course completion.
ISO 21001 Registered
JUST HACKED ON is ISO 21001 registered, demonstrating our commitment to structured and quality-focused educational practices.
Practical. Offensive. Hands-On
Learn through hands-on labs, real-world attack scenarios, exploitation, privilege escalation, web security, network penetration, Active Directory, mobile security, and IoT hacking.
Built Beyond The Classroom
Go beyond completing a course. Develop the methodology, offensive tradecraft, and practical capabilities required to progress from learner to security practitioner.
Become a Cyber Warrior
EXPLOIT OR GET EXPLOITED
Turn Sleepless Nights into Exploits with Just Hacked On !