Diwali offer: Flat 30% off on all courses plus free career counselling. Ends 5 Nov.Claim offer
Flagship Programme

1 Year Diploma in
Cyber Security

Our most comprehensive cyber security programme — covering everything from networking foundations to advanced penetration testing, forensics, SOC operations, and career placement.

1 Year 30 Modules Offline / Online Diploma Certificate 100% Placement Support

Course Overview

The 1 Year Diploma in Cyber Security is White Fortress Academy's flagship programme — the most complete cyber security education track we offer.


The programme covers seven certification-level tracks in one structured path — Linux, CEH (Certified Ethical Hacking), CCNA networking, WAPT (web application pentesting), MAPT (mobile application pentesting), CHFI (computer forensics) and Python for Hackers, included free. In total that is 30 modules covering 169 topics, every one taught with hands-on labs.


By the end of this programme, you won't just have a certificate — you'll have a portfolio of real hacking labs, a polished resume, and the skills to walk into a cyber security job with confidence.

Curriculum Overview

30 modules · 169 topics

Linux Operating System

3 modules
01

Linux Installation, Command Line & Text Tools

4 topics
  • What is Linux? and Installation
  • History & Linux Distributions
  • Kali Linux & Ubuntu Installation
  • Virtual Machines (VirtualBox / VMware)
  • First Boot & Desktop Tour
  • Command Line
  • Navigating Files & Directories
  • Terminal & Shell Basics
  • pwd, ls & cd
  • Creating & Copying Files
  • Moving & Deleting Files
  • Absolute vs Relative Paths
  • Wildcards
  • Basic Text Manipulation & Navigation
  • cat, head, tail & less
  • grep, cut, sort & uniq
  • Pipes & Redirection
  • find & locate
  • Text Editors
  • nano Basics
  • vi / vim Modes & Commands
  • Editing Configuration Files
  • Editor Shortcuts
02

Users, Permissions, Processes & Package Management

5 topics
  • User Roles & Management
  • root vs Standard Users
  • useradd, usermod & passwd
  • Groups & Group Management
  • sudo & the sudoers File
  • Permission Levels & Modifying Permissions
  • Read, Write & Execute
  • chmod: Symbolic & Numeric
  • chown & chgrp
  • SUID, SGID & Sticky Bit
  • Running Process on the System
  • ps, top & htop
  • Foreground & Background Jobs
  • kill, killall & Signals
  • Process Priority (nice / renice)
  • Package Management Tools
  • apt & dpkg
  • yum / dnf & rpm
  • Adding & Managing Repositories
  • Installing Tools from GitHub & Source
  • Linux Devices & How They Interact with Kernel
  • /dev & Device Files
  • Drivers & Kernel Modules (lsmod / modprobe)
  • udev Basics
  • lsusb, lspci & Hardware Info
03

Filesystem, Boot Process, Kernel & System Logs

6 topics
  • Linux Filesystem
  • Types & Partitioning
  • Filesystem Hierarchy Standard
  • ext4, xfs & NTFS
  • fdisk & parted
  • mount, umount & /etc/fstab
  • The Stages of the Linux Boot Process
  • BIOS / UEFI & POST
  • Bootloader: GRUB
  • Kernel & initramfs Loading
  • Init & Runlevels / Targets
  • Kernel (Most Important)
  • Kernel Architecture
  • Kernel Space vs User Space
  • System Calls
  • Kernel Parameters & sysctl
  • Kernel Updates & Hardening
  • Different Init Systems
  • SysV Init
  • Upstart
  • systemd
  • Managing Services with systemctl
  • Process Monitoring
  • Real-Time Monitoring (top / htop)
  • vmstat, iostat & free
  • lsof, netstat & ss
  • Finding Resource Bottlenecks
  • System Logs
  • /var/log Structure
  • syslog & journalctl
  • auth.log & Login Tracking
  • Log Rotation
  • Spotting Suspicious Activity

Certified Ethical Hacking (CEH)

6 modules
04

Ethical Hacking Foundations, Networking & VPN

3 topics
  • Introduction to Ethical Hacking
  • Hacking Concepts & Phases
  • Types of Hackers
  • CIA Triad & Security Elements
  • Legal & Ethical Rules
  • Lab Setup
  • Networking Basics & Web Applications
  • OSI & TCP/IP Models
  • Ports & Protocols
  • How Web Applications Work (HTTP)
  • Client–Server Architecture
  • Virtual Private Network (VPN)
  • VPN Concepts & Types
  • Tunnelling Protocols
  • Setting Up a VPN
  • Anonymity & Its Limits
05

Footprinting, Enumeration, Google Hacking & Social Engineering

4 topics
  • Digital Footprinting
  • Footprinting Concepts
  • WHOIS & DNS Lookups
  • OSINT Tools
  • Website & Subdomain Recon
  • Enumeration
  • NetBIOS & SMB
  • SNMP & LDAP
  • DNS & FTP Enumeration
  • Banner Grabbing
  • Email Hacking and Social Engineering
  • Phishing Techniques
  • Email Header Analysis
  • Social Engineering Types
  • Awareness & Defence
  • Google Hacking
  • Google Dorking Operators
  • Finding Exposed Files
  • Google Hacking Database (GHDB)
  • Defending Against Dorks
06

Sniffing, Network Scanning, Password Cracking & Wi-Fi Hacking

5 topics
  • Sniffing
  • Packet Capture with Wireshark
  • ARP Poisoning
  • MITM Concepts
  • Detection & Defence
  • Network Scanning
  • Nmap Scan Types
  • Service & OS Detection
  • Nmap Scripts
  • Firewall & IDS Evasion Concepts
  • Network Hacking & Security
  • Network Attack Vectors
  • Router & Switch Weaknesses
  • Traffic Analysis
  • Network Hardening
  • Password Cracking
  • Password Attack Types
  • Hashcat & John the Ripper
  • Wordlists & Rules
  • Password Policies
  • Wifi Hacking
  • Wi-Fi Standards & Encryption
  • WPA/WPA2 Handshake Capture
  • Evil Twin Concepts
  • Wireless Defence
07

Malware, Ransomware, Cloud, IoT & Cryptography

5 topics
  • Virus
  • Worms
  • Trojans
  • Malware Types
  • Trojan Infection Methods
  • Detection Techniques
  • Countermeasures
  • Ransomware Prevention
  • How Ransomware Works
  • Attack Lifecycle
  • Backup & Recovery
  • Prevention Controls
  • Cloud Computing
  • Cloud Service Models
  • Shared Responsibility
  • Cloud Threats
  • Cloud Security Controls
  • IoT (Internet of Things)
  • IoT Architecture
  • IoT Attack Surface
  • Firmware Basics
  • IoT Defence
  • Cryptography and Cryptanalysis
  • Symmetric & Asymmetric Encryption
  • Hashing & Digital Signatures
  • PKI & Certificates
  • Cryptanalysis Attacks
08

Web Application Hacking, XSS, SQL Injection & Web Servers

4 topics
  • Web Application Hacking
  • Web App Architecture
  • OWASP Top 10
  • Burp Suite Basics
  • Common Attack Flow
  • XSS Attack & Defense
  • Reflected XSS
  • Stored XSS
  • DOM XSS
  • Payload Basics
  • Cookie Theft Concepts
  • Prevention
  • SQL Injection
  • SQLi Types
  • Union & Blind SQLi
  • SQLMap Basics
  • Prevention
  • Web Server Hacking
  • Web Server Architecture
  • Server Misconfigurations
  • Directory Attacks
  • Server Hardening
09

Metasploit, System Hacking, Pentesting, Reverse Engineering & AI

10 topics
  • Metasploit Framework
  • Framework Architecture
  • Modules & Payloads
  • Exploitation Workflow
  • Meterpreter Basics
  • System Hacking & Security
  • System Hacking Phases
  • Privilege Escalation
  • Covering Tracks
  • System Hardening
  • Firewalls & Honeypots
  • Firewall Types
  • IDS & IPS
  • Honeypot Setup
  • Evasion Concepts
  • Penetration Testing
  • Pentest Phases
  • Scoping & Rules of Engagement
  • Tools Workflow
  • Reporting
  • Reverse Engineering
  • Disassembly Basics
  • Static vs Dynamic Analysis
  • Debuggers
  • Binary Protections
  • Blockchain Technology
  • Blockchain Basics
  • Consensus & Smart Contracts
  • Blockchain Attacks
  • Security Practices
  • Artificial Intelligence
  • AI & ML Basics
  • AI in Cyber Security
  • AI-Driven Threats
  • Responsible AI Use
  • Hacking with AI
  • AI-Assisted Recon
  • Prompt-Driven Automation
  • AI Tools for Pentesters
  • Limits & Ethics
  • DOS Attack
  • DoS vs DDoS
  • Attack Types
  • Botnets
  • Mitigation
  • Windows & Linux Password cracking
  • Windows SAM & NTLM
  • Linux Shadow File
  • Offline Cracking
  • Defence

CCNA — Cisco Certified Network Associate

4 modules
10

Networking Fundamentals, Number System & Packet Tracer

3 topics
  • Networking Fundamentals
  • Network Types & Topologies
  • OSI & TCP/IP
  • Devices & Cabling
  • IP Basics
  • Number System
  • Binary & Decimal
  • Hexadecimal
  • Conversions
  • Binary Logic for IPs
  • Cisco Packet Tracer (Practical)
  • Interface Tour
  • Building Topologies
  • Device CLI Basics
  • Simulation Mode
11

Routing, WAN Technologies & Troubleshooting

4 topics
  • Exploring Functions of Routing
  • Router Role
  • Routing Table
  • Static Routing
  • Default Routes
  • Dynamic Routing
  • RIP
  • OSPF
  • EIGRP
  • Route Selection
  • WAN Technologies
  • WAN Concepts
  • PPP & Leased Lines
  • MPLS Overview
  • Internet Connectivity
  • Troubleshooting Basic Connectivity
  • ping & traceroute
  • Layered Troubleshooting
  • Interface Issues
  • Common Faults
12

NAT, ACLs, Remote Access & Load Balancing

4 topics
  • NAT (Network Address Translation)
  • Static NAT
  • Dynamic NAT
  • PAT
  • Verification
  • ACL (Access Control Lists)
  • Standard ACLs
  • Extended ACLs
  • Named ACLs
  • ACL Troubleshooting
  • Telnet and SSH
  • Remote Access Basics
  • Enabling SSH
  • Securing VTY Lines
  • Telnet vs SSH
  • Load Balancing Technology
  • Load Balancing Concepts
  • Equal-Cost Paths
  • Gateway Redundancy (HSRP)
  • Use Cases
13

Layer 2, VLANs, Switching, Servers, Subnetting & Network Projects

11 topics
  • Layer 2 Protocols
  • Ethernet Frames
  • ARP
  • CDP & LLDP
  • MAC Address Tables
  • VLAN (Virtual LANs)
  • VLAN Creation
  • Access & Trunk Ports
  • Inter-VLAN Routing
  • VLAN Troubleshooting
  • Port-Security
  • Port Security Concepts
  • Sticky MAC
  • Violation Modes
  • Verification
  • Setting Up Servers
  • DHCP Server
  • DNS Server
  • Web & FTP Server
  • Server Testing
  • Firewall
  • Firewall Basics
  • Zones & Rules
  • Stateful Inspection
  • Basic Configuration
  • Switching
  • Switch Operation
  • MAC Learning
  • Switch Configuration
  • EtherChannel
  • QoS (Quality of Service)
  • QoS Concepts
  • Classification & Marking
  • Queuing
  • Voice & Video Priority
  • STP (Spanning Tree Protocol)
  • Loops & Broadcast Storms
  • Root Bridge Election
  • Port States
  • PortFast & RSTP
  • Subnetting
  • Subnet Masks & CIDR
  • Subnetting Practice
  • VLSM
  • IPv6 Basics
  • Small Office Network Implementation (Project 1)
  • Network Design
  • Addressing Plan
  • Device Configuration
  • Testing & Documentation
  • Multi-Site Network Infrastructure with VLAN Segmentation & ACL Security (Project 2)
  • Multi-Site Design
  • VLAN Segmentation
  • ACL Security Policy
  • Final Validation

WAPT — Web Application Penetration Testing

6 modules
14

Web Fundamentals, SQL Basics, Subdomain Hijacking & Burp Suite

4 topics
  • Web Application Functionality
  • SQL Fundamentals
  • DNS Enumeration
  • HTTP Request & Response
  • SQL Basics
  • DNS Records
  • DNS Enumeration Tools
  • SQL Injection Attacks
  • Google Dorking
  • Vulnerabilities and Exploits
  • SQLi Basics
  • Google Dorking
  • Vulnerability Databases
  • Exploit Research
  • Malicious Subdomain Hijacking
  • Subdomain Discovery
  • Dangling DNS Records
  • Takeover Process
  • Prevention
  • Learning How to Use Burp Suite
  • Proxy & Intercept
  • Repeater
  • Intruder
  • Scanner & Extensions
15

Advanced SQL Injection & Automated SQLi Tools

4 topics
  • WAF Bypass
  • Error-Based SQL Injection
  • WAF Fingerprinting
  • Bypass Techniques
  • Error-Based Payloads
  • Data Extraction
  • Blind SQL Injection
  • Boolean-Based Blind SQLi
  • Inference Techniques
  • Payload Crafting
  • Mitigation
  • Blind (Time-Based) SQL Injection
  • Time Delay Functions
  • Confirming Injection
  • Extracting Data
  • Mitigation
  • SQLMap
  • Havij
  • SQL Ninja
  • SQLMap Usage
  • Havij Overview
  • SQL Ninja Overview
  • Tool Comparison
16

XSS, Command Injection, File Inclusion, Log4J, DVWA, XXE & CSRF

7 topics
  • XSS (Cross-Site Scripting)
  • Reflected XSS
  • Stored XSS
  • DOM XSS
  • XSS Prevention
  • OS Command Injection / RCE
  • Command Injection Basics
  • Blind Injection
  • RCE Escalation
  • Input Sanitisation
  • File Inclusion Vulnerability & Directory Traversal
  • Local File Inclusion
  • Remote File Inclusion
  • Path Traversal Payloads
  • Prevention
  • Exploiting Log4J
  • Log4Shell Overview
  • JNDI Lookups
  • Lab Exploitation
  • Patching & Mitigation
  • DVWA Framework
  • DVWA Setup
  • Security Levels
  • Practising Vulnerabilities
  • Challenge Walkthroughs
  • XXE (XML External Entity)
  • XML Basics
  • XXE Payloads
  • File Read via XXE
  • Prevention
  • Cross-Site Request Forgery (CSRF)
  • CSRF Mechanics
  • Crafting a PoC
  • Token Bypass Basics
  • Prevention
17

Web Scanners, Nessus, Misconfiguration & Information Disclosure

6 topics
  • Automated Web App Scanners
  • Scanner Types
  • Running Scans
  • Interpreting Results
  • Scanner Limitations
  • Nessus Scanner
  • Installation
  • Scan Policies
  • Reading Reports
  • False Positives
  • XML-RPC Vulnerability
  • XML-RPC Basics
  • WordPress xmlrpc.php
  • Brute-Force & Pingback Abuse
  • Disabling XML-RPC
  • Security Misconfiguration & Information Disclosure
  • Default Credentials
  • Verbose Errors
  • Exposed Files
  • Hardening Checklist
  • HTML Injection
  • HTML Injection Basics
  • Reflected vs Stored
  • Content Spoofing
  • Prevention
  • Source Code Disclosure
  • Common Leak Sources
  • Backup & Config Files
  • Git Exposure
  • Prevention
18

Access Control, File Uploads, Host Header, Authentication, Sessions & SSRF

6 topics
  • Broken Access Control & Its Types
  • IDOR
  • Privilege Escalation
  • Forced Browsing
  • Access Control Testing
  • Upload File Restriction Vulnerability
  • Unrestricted Uploads
  • Extension & MIME Bypass
  • Web Shell Concepts
  • Secure Upload Design
  • Host Header Injection
  • Host Header Basics
  • Password Reset Poisoning
  • Cache Poisoning
  • Prevention
  • Broken Authentication
  • Weak Credentials
  • Brute-Force Attacks
  • MFA Bypass Basics
  • Secure Authentication
  • Session Fixation & Session Hijacking
  • Session Lifecycle
  • Fixation Attacks
  • Hijacking Techniques
  • Secure Session Handling
  • SSRF (Server-Side Request Forgery)
  • SSRF Basics
  • Internal Service Access
  • Cloud Metadata Risk
  • Prevention
19

Mutillidae, Template Injection, Open Redirection & Responsible Disclosure

5 topics
  • Mutillidae Practice
  • Mutillidae Setup
  • OWASP Top 10 Labs
  • Guided Exercises
  • Review
  • SSTI & CSTI (Server-Side Template Injection & Client-Side Template Injection)
  • Template Engines
  • SSTI Detection
  • CSTI Basics
  • Prevention
  • Open Redirection
  • Redirect Mechanics
  • Exploitation & Phishing Use
  • Filter Bypass
  • Prevention
  • Responsible Disclosure Programs
  • Disclosure Policies
  • Bug Bounty Platforms
  • Writing Reports
  • Etiquette
  • NCIIPC
  • NCIIPC Overview
  • Critical Information Infrastructure
  • Reporting Vulnerabilities
  • Legal Framework

MAPT — Mobile Application Penetration Testing

4 modules
20

Android Fundamentals, Security Framework, Emulator & ADB

6 topics
  • Getting Started with Android
  • Android Overview
  • Versions & Ecosystem
  • Lab Setup
  • Android Basics
  • Android Security Framework
  • Security Architecture
  • Application Sandboxing
  • Permissions Model
  • Security Updates
  • Android Application Development
  • App Basics
  • Android Studio
  • Building a Simple App
  • Secure Coding Basics
  • Core Components of Android Applications
  • Activities
  • Services
  • Broadcast Receivers
  • Content Providers
  • Mastering the Android Studio Emulator
  • Creating AVDs
  • Emulator Settings
  • Network Configuration
  • Rooted Emulators
  • Unlocking the Power of Android Debug Bridge (ADB)
  • ADB Setup
  • Common Commands
  • Shell Access
  • Installing & Pulling Files
21

Boot Sequence, Reverse Engineering, OWASP Mobile Top 10 & Traffic Analysis

6 topics
  • Understanding the Android Boot Sequence
  • Boot ROM & Bootloader
  • Kernel & Init
  • Zygote
  • System Server
  • Android Application Reverse Engineering
  • APK Structure
  • Decompiling Apps
  • Smali Basics
  • Repackaging & Signing
  • Analyzing DEX Files
  • DEX Format
  • dex2jar & JADX
  • Reading Decompiled Code
  • Obfuscation Basics
  • OWASP Top-10 Vulnerabilities (Mobile)
  • Top 10 Overview
  • Risk Ratings
  • Mapping Findings
  • Test Checklist
  • Analyzing Traffic
  • Proxy Setup
  • Burp with Android
  • Certificate Installation
  • SSL Pinning Basics
  • Unzipping Android Applications
  • APK as a ZIP
  • Inspecting Resources
  • AndroidManifest Analysis
  • Hidden Files
22

Insecure Logging, Data Storage, Content Providers, Injection & DoS

5 topics
  • Insecure Logging
  • Logcat Basics
  • Finding Sensitive Data
  • Exploitation
  • Prevention
  • Leaking Content Provider
  • Content Provider Basics
  • Exported Providers
  • Querying with ADB
  • Prevention
  • Insecure Data Storage
  • Shared Preferences
  • SQLite Databases
  • External Storage
  • Secure Storage Options
  • Client-Side Injection
  • SQL Injection in Apps
  • WebView Injection
  • Exploitation Lab
  • Prevention
  • DoS Attack (Android)
  • App-Level DoS
  • Intent-Based Crashes
  • Testing
  • Mitigation
23

Injured Android, Malware Analysis & DIVA Labs

3 topics
  • Injured Android
  • Lab Setup
  • Challenge Walkthroughs
  • Common Findings
  • Review
  • Android Malware Analysis
  • Malware Families
  • Static Analysis
  • Dynamic Analysis
  • Reporting
  • Pentesting DIVA
  • DIVA Setup
  • Insecure Logging & Storage
  • Input Validation Flaws
  • Final Assessment

CHFI — Computer Hacking Forensics Investigator

4 modules
24

Forensics Process, Windows Forensics, Data Recovery & Forensic Toolkits

7 topics
  • Introduction to Computer Forensics
  • Forensics Overview
  • Types of Cyber Crime
  • Forensic Readiness
  • Legal Aspects
  • Computer Forensics Investigation Process
  • Investigation Phases
  • Evidence Collection
  • Chain of Custody
  • Documentation
  • Understanding Computer Hard Drives
  • HDD & SSD Structure
  • Partitions
  • File Systems
  • Boot Process
  • Windows Forensics
  • Registry Analysis
  • Event Logs
  • Prefetch & Artefacts
  • Recent Activity
  • Data Recovery Techniques
  • Deleted File Recovery
  • File Carving
  • Recovery Tools
  • Limitations
  • Access Data FTK Investigator
  • FTK Overview
  • Case Creation
  • Evidence Processing
  • Reports
  • Autopsy
  • Installation
  • Adding Data Sources
  • Timeline & Keyword Search
  • Exporting Results
25

Linux, Memory, Email & IoT Forensics, Digital Evidence & Steganography

6 topics
  • Linux Forensics
  • File System Artefacts
  • Log Analysis
  • Bash History
  • Timeline Analysis
  • Memory Forensics
  • Memory Acquisition
  • Volatility Basics
  • Process Analysis
  • Malware in Memory
  • Digital Evidence
  • Evidence Types
  • Acquisition & Imaging
  • Hashing & Integrity
  • Evidence Storage
  • Email Forensics
  • Email Protocols
  • Header Analysis
  • Spoofing Detection
  • Tracing Senders
  • IoT Forensics
  • IoT Devices
  • Data Sources
  • Acquisition Challenges
  • Case Examples
  • Steganography and Its Types
  • Steganography Basics
  • Image Steganography
  • Audio & Video Types
  • Detection Tools
26

Cryptography, Key Management, PKI & Secure Communication

11 topics
  • Substitution and Transposition Ciphers
  • Caesar & Vigenère
  • Substitution Ciphers
  • Transposition Ciphers
  • Breaking Classical Ciphers
  • Principles of Public Key Cryptography
  • Public & Private Keys
  • Key Pairs
  • Use Cases
  • Security Properties
  • The RSA Algorithm and RSA Security
  • RSA Key Generation
  • Encryption & Decryption
  • Math Behind RSA
  • Attacks on RSA
  • Key Management & Distribution in Public Key Systems
  • Key Distribution Problem
  • Public Key Certificates
  • Key Exchange
  • Key Lifecycle
  • Diffie–Hellman Key Exchange Algorithm
  • DH Concept
  • Worked Example
  • Man-in-the-Middle Risk
  • Modern Variants
  • Data Encryption Standard (DES)
  • DES Structure
  • Feistel Network
  • Triple DES
  • Weaknesses
  • Advanced Encryption Standard (AES)
  • AES Structure
  • Rounds & Key Sizes
  • Modes of Operation
  • AES Security
  • Message Authentication Codes (MAC)
  • MD5
  • SHA Algorithms
  • MAC & HMAC
  • MD5
  • SHA Family
  • Integrity Verification
  • Digital Signatures and Certificates
  • Digital Signature Process
  • X.509 Certificates
  • Certificate Authorities
  • Verification
  • Kerberos Authentication and X.509
  • Kerberos Overview
  • Tickets & KDC
  • Authentication Flow
  • X.509 Structure
  • Email Security with PGP
  • PGP Overview
  • Key Management
  • Signing & Encrypting
  • Web of Trust
27

Malware Forensics, Mobile Forensics & Anti-Forensic Techniques

3 topics
  • Malware Forensics
  • Analysis Lab Setup
  • Static Analysis
  • Dynamic Analysis
  • Reporting
  • Mobile Forensics
  • Mobile Acquisition
  • Android & iOS Artefacts
  • App Data Analysis
  • Mobile Tools
  • Anti-Forensic Techniques
  • Data Hiding
  • Log Tampering
  • Secure Deletion
  • Detecting Anti-Forensics

Python for Hackers

3 modules · included free
28

Python Fundamentals, Data Structures & Libraries

9 topics
  • Introduction to Python & Installation
  • What is Python
  • Installation
  • IDEs & Editors
  • First Script
  • Python Basics
  • Variables
  • Data Types
  • Operators
  • Variables
  • Data Types
  • Operators
  • Input & Output
  • Control Flow
  • If Conditions
  • Loops
  • if / elif / else
  • for Loops
  • while Loops
  • break & continue
  • Functions & Modules
  • Defining Functions
  • Arguments & Return Values
  • Importing Modules
  • Custom Modules
  • Data Structures
  • Lists
  • Tuples
  • Sets
  • Dictionaries
  • Lists
  • Tuples
  • Sets
  • Dictionaries
  • File Handling Basics
  • Reading Files
  • Writing Files
  • File Modes
  • Working with CSV
  • Error Handling & Debugging
  • try / except
  • Raising Exceptions
  • Debugging Techniques
  • Logging
  • Object-Oriented Programming (OOPs)
  • Classes & Objects
  • Inheritance
  • Encapsulation
  • Polymorphism
  • Working With External Libraries
  • pip
  • Virtual Environments
  • requests & socket
  • Reading Documentation
29

Networking, Encryption, Port Scanners, Sniffers & Packet Crafting

8 topics
  • Python Networking
  • Socket Programming
  • TCP & UDP Clients
  • Simple Server
  • Banner Grabbing
  • Web Requests & APIs
  • HTTP with requests
  • REST APIs
  • JSON Parsing
  • Authentication Headers
  • Python for Encryption & Decryption
  • Cipher Basics
  • cryptography Library
  • File Encryption
  • Key Handling
  • Hashing
  • MD5
  • SHA
  • hashlib
  • File Integrity Checks
  • Hash Comparison
  • Salting
  • Keylogger Development
  • Keylogger Concepts (Lab)
  • Capturing Input
  • Logging Output
  • Detection & Defence
  • Writing a Port Scanner
  • Socket Scanning
  • Multithreading
  • Banner Grabbing
  • Output Reports
  • Writing a Network Sniffer
  • Raw Sockets
  • Packet Parsing
  • Protocol Filtering
  • Saving Captures
  • Packet Crafting With Scapy
  • Scapy Basics
  • Crafting Packets
  • Sending & Sniffing
  • ARP & ICMP Scripts
30

Recon Automation, Scraping, Brute-Force, Malware Analysis & Secure Coding

5 topics
  • Automating Reconnaissance Tools
  • Subdomain Scripts
  • WHOIS & DNS Automation
  • Tool Chaining
  • Report Generation
  • Web Scraping
  • BeautifulSoup
  • Parsing HTML
  • Scraping for Recon
  • Ethics & robots.txt
  • Password Brute-Force Automation
  • Wordlist Handling
  • Login Form Automation
  • Rate Limits
  • Defence
  • Basic Malware Analysis With Python
  • Static Analysis Scripts
  • String & Hash Extraction
  • PE File Basics
  • YARA Basics
  • Secure Coding Best Practices
  • Input Validation
  • Secrets Management
  • Dependency Safety
  • Code Review

Practice Projects

Project 1Full pentest on a mock target
Project 2Bug bounty style vulnerability report
Project 3Digital forensics case investigation
Project 4Android app security test
Project 5SOC log analysis and alert triage
Project 6Python port scanner and recon tool

Warm Up with Free IT Games

Practise the basics before or alongside class with the IT Skills Arcade: short games on networking, cyber safety and hardware, plus a free 5-minute IT skills test.

Tools You Will Master

Kali Linux Nmap Burp Suite Metasploit Wireshark Hashcat John the Ripper Autopsy Nikto SQLmap Aircrack-ng OWASP ZAP Gobuster Hydra Volatility MobSF Splunk / SIEM Python Frida Apktool

Career Opportunities

Ethical Hacker / Pentester

Security firms, IT consultancies & product companies

₹4–10 LPA

SOC Analyst (L1/L2)

Security Operations Centres at banks, IT firms & MNCs

₹4.5–12 LPA

Mobile Security Tester

App security audits for Android & iOS platforms

₹5–14 LPA

Forensics Analyst

Cyber crime investigation & corporate forensics roles

₹4–12 LPA

Bug Bounty Hunter

Earn rewards on HackerOne, Bugcrowd & private programs

₹3–25+ LPA

Network Security Engineer

Design & secure enterprise networking infrastructure

₹4–10 LPA

Vulnerability Analyst

Risk assessments & security audits for organisations

₹4–12 LPA

Security Developer

Build security tools & automate testing with Python

₹6–16 LPA

Expected Salary Ranges in India

Junior Ethical Hacker
₹3L – ₹6L / year
Entry level, 0–1 year experience
SOC Analyst (L1)
₹3.5L – ₹7L / year
High demand across all sectors
Penetration Tester
₹5L – ₹12L / year
With 1–2 years of experience
Bug Bounty Hunter
₹2L – ₹20L+ / year
Variable — based on findings

* Salary estimates based on industry data. Actual figures may vary.

6 Month vs 1 Year Diploma

Feature 6 Month Diploma 1 Year Diploma
At a glance
Duration6 months1 year
Modules1930
Certification tracks47
Included in both
Linux Training
Networking — CCNA
Ethical Hacking (CEH)
Web Pentesting (WAPT)
Live + recorded classes with notes
100% practical labs
Certification
Industry Mentorship and Placement Assistance
1-Year extras
Digital Forensics (CHFI)1-Year only
Mobile Pentesting (MAPT)1-Year only
Python for Hackers (Free)1-Year only
Bug Bounty Hunting1-Year only
Capstone Project1-Year only

Looking for the shorter track? View the 6 Month Diploma →

What Our Students Say

★★★★★

"The 1 year diploma completely changed my career trajectory. The labs were intense and real — by month 6 I was already doing bug bounty hunting on HackerOne."

Rahul S.
Now working as Junior Pentester
★★★★★

"The SOC analyst module and CEH prep were the highlights for me. The mentors are actual industry professionals — not just teachers reading from slides."

Priya M.
SOC Analyst, IT Firm
★★★★★

"I joined with zero hacking knowledge. After the 1 year programme I had a portfolio, a certificate, and landed my first cyber security job within 2 months."

Amit K.
Cyber Security Analyst

Course Details

Duration1 Year (12 Months)
ModeOffline (Delhi Centre) / Online Classes Available
Batch TimingMorning & Evening Batches (Mon–Sat)
EligibilityBasic Computer Knowledge Required. No prior hacking experience needed.
CertificateDiploma in Cyber Security from White Fortress Academy on completion
IncludesResume Building + Mock Interviews + Portfolio Review + Placement Referrals

Frequently Asked Questions

How long is the 1-Year Diploma in Cyber Security in Delhi?

The 1-Year Diploma in Cyber Security takes 1 year (12 months).

Is the 1-Year Diploma in Cyber Security offline or online, and what are the batch timings?

Mode: Offline (Delhi Centre) / Online Classes Available. Batch timing: Morning & Evening Batches (Mon–Sat).

Who can join the 1-Year Diploma in Cyber Security? Do I need any prior knowledge?

Basic Computer Knowledge Required. No prior hacking experience needed.

Will I get a certificate after the 1-Year Diploma in Cyber Security?

Yes. White Fortress Academy provides a diploma in Cyber Security on completion of the course.

Which tools and software will I learn in the 1-Year Diploma in Cyber Security?

You will work with Kali Linux, Nmap, Burp Suite, Metasploit, Wireshark, Hashcat, John the Ripper, Autopsy, Nikto, SQLmap, Aircrack-ng, OWASP ZAP, Gobuster, Hydra, Volatility, MobSF, Splunk / SIEM, Python, Frida and Apktool.

What jobs can I aim for after the 1-Year Diploma in Cyber Security?

Career paths covered on this page include Ethical Hacker / Pentester, SOC Analyst (L1/L2), Mobile Security Tester, Forensics Analyst, Bug Bounty Hunter and Network Security Engineer. Hiring depends on your skills and the market. The academy's support includes resume building, mock interviews, portfolio review and placement referrals.

What is the fee for the 1-Year Diploma in Cyber Security, and can I try a demo class?

The fee is not listed on this page, so please ask the centre for the current fee and the next batch date. Call or WhatsApp +91 88104 71374, or visit 53, Maujpur Main Road, Opp. HDFC Bank, Delhi 110053 (Monday to Saturday, 9:00 AM to 8:00 PM). A free demo class is available.

Ready to Become a Cyber Security Expert?

Enrol in our flagship 1 Year Diploma and get the most complete cyber security education in Delhi.

Enroll Now Ask on WhatsApp