Diwali offer: Flat 30% off on all courses plus free career counselling. Ends 5 Nov.Claim offer

6-Month Diploma in
Cyber Security

A comprehensive, structured programme covering Linux, CEH (Ethical Hacking), Web Application Pentesting & Networking — designed to make you job-ready in 6 months.

6 Months Offline / Online Certificate Provided Morning & Evening Batches

Course Overview

The 6-Month Diploma in Cyber Security at White Fortress Academy is a comprehensive, career-focused programme designed for students who want to enter the cyber security industry with a strong foundation.


This diploma combines Linux mastery, CEH (Certified Ethical Hacking), Web Application Pentesting (WAPT), and CCNA Networking — covering real tools and labs to build a complete, job-ready cyber security skill set.


Whether you're a beginner or someone with basic IT knowledge, this structured 6-month track will transform you into a job-ready cyber security professional.

Curriculum Overview

19 modules · 100 topics

Linux OS

3 modules · Month 1
01

Linux Installation, Command Line & Text Tools

4 topics
  • What is Linux? and Installation
  • History & Linux Distributions
  • Kali Linux & Ubuntu Installation
  • Virtual Machines (VirtualBox / VMware)
  • First Boot & Desktop Tour
  • Command Line
  • Navigating Files & Directories
  • Terminal & Shell Basics
  • pwd, ls & cd
  • Creating & Copying Files
  • Moving & Deleting Files
  • Absolute vs Relative Paths
  • Wildcards
  • Basic Text Manipulation & Navigation
  • cat, head, tail & less
  • grep, cut, sort & uniq
  • Pipes & Redirection
  • find & locate
  • Text Editors
  • nano Basics
  • vi / vim Modes & Commands
  • Editing Configuration Files
  • Editor Shortcuts
02

Users, Permissions, Processes & Package Management

5 topics
  • User Roles & Management
  • root vs Standard Users
  • useradd, usermod & passwd
  • Groups & Group Management
  • sudo & the sudoers File
  • Permission Levels & Modifying Permissions
  • Read, Write & Execute
  • chmod: Symbolic & Numeric
  • chown & chgrp
  • SUID, SGID & Sticky Bit
  • Running Process on the System
  • ps, top & htop
  • Foreground & Background Jobs
  • kill, killall & Signals
  • Process Priority (nice / renice)
  • Package Management Tools
  • apt & dpkg
  • yum / dnf & rpm
  • Adding & Managing Repositories
  • Installing Tools from GitHub & Source
  • Linux Devices & How They Interact with Kernel
  • /dev & Device Files
  • Drivers & Kernel Modules (lsmod / modprobe)
  • udev Basics
  • lsusb, lspci & Hardware Info
03

Filesystem, Boot Process, Kernel & System Logs

6 topics
  • Linux Filesystem
  • Types & Partitioning
  • Filesystem Hierarchy Standard
  • ext4, xfs & NTFS
  • fdisk & parted
  • mount, umount & /etc/fstab
  • The Stages of the Linux Boot Process
  • BIOS / UEFI & POST
  • Bootloader: GRUB
  • Kernel & initramfs Loading
  • Init & Runlevels / Targets
  • Kernel (Most Important)
  • Kernel Architecture
  • Kernel Space vs User Space
  • System Calls
  • Kernel Parameters & sysctl
  • Kernel Updates & Hardening
  • Different Init Systems
  • SysV Init
  • Upstart
  • systemd
  • Managing Services with systemctl
  • Process Monitoring
  • Real-Time Monitoring (top / htop)
  • vmstat, iostat & free
  • lsof, netstat & ss
  • Finding Resource Bottlenecks
  • System Logs
  • /var/log Structure
  • syslog & journalctl
  • auth.log & Login Tracking
  • Log Rotation
  • Spotting Suspicious Activity

CEH — Certified Ethical Hacking

6 modules · Month 1–3
04

Ethical Hacking Foundations, Networking & VPN

3 topics
  • Introduction to Ethical Hacking
  • Hacking Concepts & Phases
  • Types of Hackers
  • CIA Triad & Security Elements
  • Legal & Ethical Rules
  • Lab Setup
  • Networking Basics & Web Applications
  • OSI & TCP/IP Models
  • Ports & Protocols
  • How Web Applications Work (HTTP)
  • Client–Server Architecture
  • Virtual Private Network (VPN)
  • VPN Concepts & Types
  • Tunnelling Protocols
  • Setting Up a VPN
  • Anonymity & Its Limits
05

Footprinting, Enumeration, Google Hacking & Social Engineering

4 topics
  • Digital Footprinting
  • Footprinting Concepts
  • WHOIS & DNS Lookups
  • OSINT Tools
  • Website & Subdomain Recon
  • Enumeration
  • NetBIOS & SMB
  • SNMP & LDAP
  • DNS & FTP Enumeration
  • Banner Grabbing
  • Email Hacking and Social Engineering
  • Phishing Techniques
  • Email Header Analysis
  • Social Engineering Types
  • Awareness & Defence
  • Google Hacking
  • Google Dorking Operators
  • Finding Exposed Files
  • Google Hacking Database (GHDB)
  • Defending Against Dorks
06

Sniffing, Network Scanning, Password Cracking & Wi-Fi Hacking

5 topics
  • Sniffing
  • Packet Capture with Wireshark
  • ARP Poisoning
  • MITM Concepts
  • Detection & Defence
  • Network Scanning
  • Nmap Scan Types
  • Service & OS Detection
  • Nmap Scripts
  • Firewall & IDS Evasion Concepts
  • Network Hacking & Security
  • Network Attack Vectors
  • Router & Switch Weaknesses
  • Traffic Analysis
  • Network Hardening
  • Password Cracking
  • Password Attack Types
  • Hashcat & John the Ripper
  • Wordlists & Rules
  • Password Policies
  • Wifi Hacking
  • Wi-Fi Standards & Encryption
  • WPA/WPA2 Handshake Capture
  • Evil Twin Concepts
  • Wireless Defence
07

Malware, Ransomware, Cloud, IoT & Cryptography

5 topics
  • Virus
  • Worms
  • Trojans
  • Malware Types
  • Trojan Infection Methods
  • Detection Techniques
  • Countermeasures
  • Ransomware Prevention
  • How Ransomware Works
  • Attack Lifecycle
  • Backup & Recovery
  • Prevention Controls
  • Cloud Computing
  • Cloud Service Models
  • Shared Responsibility
  • Cloud Threats
  • Cloud Security Controls
  • IoT (Internet of Things)
  • IoT Architecture
  • IoT Attack Surface
  • Firmware Basics
  • IoT Defence
  • Cryptography and Cryptanalysis
  • Symmetric & Asymmetric Encryption
  • Hashing & Digital Signatures
  • PKI & Certificates
  • Cryptanalysis Attacks
08

Web Application Hacking, XSS, SQL Injection & Web Servers

4 topics
  • Web Application Hacking
  • Web App Architecture
  • OWASP Top 10
  • Burp Suite Basics
  • Common Attack Flow
  • XSS Attack & Defense
  • Reflected XSS
  • Stored XSS
  • DOM XSS
  • Payload Basics
  • Cookie Theft Concepts
  • Prevention
  • SQL Injection
  • SQLi Types
  • Union & Blind SQLi
  • SQLMap Basics
  • Prevention
  • Web Server Hacking
  • Web Server Architecture
  • Server Misconfigurations
  • Directory Attacks
  • Server Hardening
09

Metasploit, System Hacking, Pentesting, Reverse Engineering & AI

10 topics
  • Metasploit Framework
  • Framework Architecture
  • Modules & Payloads
  • Exploitation Workflow
  • Meterpreter Basics
  • System Hacking & Security
  • System Hacking Phases
  • Privilege Escalation
  • Covering Tracks
  • System Hardening
  • Firewalls & Honeypots
  • Firewall Types
  • IDS & IPS
  • Honeypot Setup
  • Evasion Concepts
  • Penetration Testing
  • Pentest Phases
  • Scoping & Rules of Engagement
  • Tools Workflow
  • Reporting
  • Reverse Engineering
  • Disassembly Basics
  • Static vs Dynamic Analysis
  • Debuggers
  • Binary Protections
  • Blockchain Technology
  • Blockchain Basics
  • Consensus & Smart Contracts
  • Blockchain Attacks
  • Security Practices
  • Artificial Intelligence
  • AI & ML Basics
  • AI in Cyber Security
  • AI-Driven Threats
  • Responsible AI Use
  • Hacking with AI
  • AI-Assisted Recon
  • Prompt-Driven Automation
  • AI Tools for Pentesters
  • Limits & Ethics
  • DOS Attack
  • DoS vs DDoS
  • Attack Types
  • Botnets
  • Mitigation
  • Windows & Linux Password cracking
  • Windows SAM & NTLM
  • Linux Shadow File
  • Offline Cracking
  • Defence

WAPT — Web App Pentesting

6 modules · Month 4–5
10

Web Fundamentals, SQL Basics, Subdomain Hijacking & Burp Suite

4 topics
  • Web Application Functionality
  • SQL Fundamentals
  • DNS Enumeration
  • HTTP Request & Response
  • SQL Basics
  • DNS Records
  • DNS Enumeration Tools
  • SQL Injection Attacks
  • Google Dorking
  • Vulnerabilities and Exploits
  • SQLi Basics
  • Google Dorking
  • Vulnerability Databases
  • Exploit Research
  • Malicious Subdomain Hijacking
  • Subdomain Discovery
  • Dangling DNS Records
  • Takeover Process
  • Prevention
  • Learning How to Use Burp Suite
  • Proxy & Intercept
  • Repeater
  • Intruder
  • Scanner & Extensions
11

Advanced SQL Injection & Automated SQLi Tools

4 topics
  • WAF Bypass
  • Error-Based SQL Injection
  • WAF Fingerprinting
  • Bypass Techniques
  • Error-Based Payloads
  • Data Extraction
  • Blind SQL Injection
  • Boolean-Based Blind SQLi
  • Inference Techniques
  • Payload Crafting
  • Mitigation
  • Blind (Time-Based) SQL Injection
  • Time Delay Functions
  • Confirming Injection
  • Extracting Data
  • Mitigation
  • SQLMap
  • Havij
  • SQL Ninja
  • SQLMap Usage
  • Havij Overview
  • SQL Ninja Overview
  • Tool Comparison
12

XSS, Command Injection, File Inclusion, Log4J, DVWA, XXE & CSRF

7 topics
  • XSS (Cross-Site Scripting)
  • Reflected XSS
  • Stored XSS
  • DOM XSS
  • XSS Prevention
  • OS Command Injection / RCE
  • Command Injection Basics
  • Blind Injection
  • RCE Escalation
  • Input Sanitisation
  • File Inclusion Vulnerability & Directory Traversal
  • Local File Inclusion
  • Remote File Inclusion
  • Path Traversal Payloads
  • Prevention
  • Exploiting Log4J
  • Log4Shell Overview
  • JNDI Lookups
  • Lab Exploitation
  • Patching & Mitigation
  • DVWA Framework
  • DVWA Setup
  • Security Levels
  • Practising Vulnerabilities
  • Challenge Walkthroughs
  • XXE (XML External Entity)
  • XML Basics
  • XXE Payloads
  • File Read via XXE
  • Prevention
  • Cross-Site Request Forgery (CSRF)
  • CSRF Mechanics
  • Crafting a PoC
  • Token Bypass Basics
  • Prevention
13

Web Scanners, Nessus, Misconfiguration & Information Disclosure

6 topics
  • Automated Web App Scanners
  • Scanner Types
  • Running Scans
  • Interpreting Results
  • Scanner Limitations
  • Nessus Scanner
  • Installation
  • Scan Policies
  • Reading Reports
  • False Positives
  • XML-RPC Vulnerability
  • XML-RPC Basics
  • WordPress xmlrpc.php
  • Brute-Force & Pingback Abuse
  • Disabling XML-RPC
  • Security Misconfiguration & Information Disclosure
  • Default Credentials
  • Verbose Errors
  • Exposed Files
  • Hardening Checklist
  • HTML Injection
  • HTML Injection Basics
  • Reflected vs Stored
  • Content Spoofing
  • Prevention
  • Source Code Disclosure
  • Common Leak Sources
  • Backup & Config Files
  • Git Exposure
  • Prevention
14

Access Control, File Uploads, Host Header, Authentication, Sessions & SSRF

6 topics
  • Broken Access Control & Its Types
  • IDOR
  • Privilege Escalation
  • Forced Browsing
  • Access Control Testing
  • Upload File Restriction Vulnerability
  • Unrestricted Uploads
  • Extension & MIME Bypass
  • Web Shell Concepts
  • Secure Upload Design
  • Host Header Injection
  • Host Header Basics
  • Password Reset Poisoning
  • Cache Poisoning
  • Prevention
  • Broken Authentication
  • Weak Credentials
  • Brute-Force Attacks
  • MFA Bypass Basics
  • Secure Authentication
  • Session Fixation & Session Hijacking
  • Session Lifecycle
  • Fixation Attacks
  • Hijacking Techniques
  • Secure Session Handling
  • SSRF (Server-Side Request Forgery)
  • SSRF Basics
  • Internal Service Access
  • Cloud Metadata Risk
  • Prevention
15

Mutillidae, Template Injection, Open Redirection & Responsible Disclosure

5 topics
  • Mutillidae Practice
  • Mutillidae Setup
  • OWASP Top 10 Labs
  • Guided Exercises
  • Review
  • SSTI & CSTI (Server-Side Template Injection & Client-Side Template Injection)
  • Template Engines
  • SSTI Detection
  • CSTI Basics
  • Prevention
  • Open Redirection
  • Redirect Mechanics
  • Exploitation & Phishing Use
  • Filter Bypass
  • Prevention
  • Responsible Disclosure Programs
  • Disclosure Policies
  • Bug Bounty Platforms
  • Writing Reports
  • Etiquette
  • NCIIPC
  • NCIIPC Overview
  • Critical Information Infrastructure
  • Reporting Vulnerabilities
  • Legal Framework

CCNA — Cisco Networking

4 modules · Month 5–6
16

Networking Fundamentals, Number System & Packet Tracer

3 topics
  • Networking Fundamentals
  • Network Types & Topologies
  • OSI & TCP/IP
  • Devices & Cabling
  • IP Basics
  • Number System
  • Binary & Decimal
  • Hexadecimal
  • Conversions
  • Binary Logic for IPs
  • Cisco Packet Tracer (Practical)
  • Interface Tour
  • Building Topologies
  • Device CLI Basics
  • Simulation Mode
17

Routing, WAN Technologies & Troubleshooting

4 topics
  • Exploring Functions of Routing
  • Router Role
  • Routing Table
  • Static Routing
  • Default Routes
  • Dynamic Routing
  • RIP
  • OSPF
  • EIGRP
  • Route Selection
  • WAN Technologies
  • WAN Concepts
  • PPP & Leased Lines
  • MPLS Overview
  • Internet Connectivity
  • Troubleshooting Basic Connectivity
  • ping & traceroute
  • Layered Troubleshooting
  • Interface Issues
  • Common Faults
18

NAT, ACLs, Remote Access & Load Balancing

4 topics
  • NAT (Network Address Translation)
  • Static NAT
  • Dynamic NAT
  • PAT
  • Verification
  • ACL (Access Control Lists)
  • Standard ACLs
  • Extended ACLs
  • Named ACLs
  • ACL Troubleshooting
  • Telnet and SSH
  • Remote Access Basics
  • Enabling SSH
  • Securing VTY Lines
  • Telnet vs SSH
  • Load Balancing Technology
  • Load Balancing Concepts
  • Equal-Cost Paths
  • Gateway Redundancy (HSRP)
  • Use Cases
19

Layer 2, VLANs, Switching, Servers, Subnetting & Network Projects

11 topics
  • Layer 2 Protocols
  • Ethernet Frames
  • ARP
  • CDP & LLDP
  • MAC Address Tables
  • VLAN (Virtual LANs)
  • VLAN Creation
  • Access & Trunk Ports
  • Inter-VLAN Routing
  • VLAN Troubleshooting
  • Port-Security
  • Port Security Concepts
  • Sticky MAC
  • Violation Modes
  • Verification
  • Setting Up Servers
  • DHCP Server
  • DNS Server
  • Web & FTP Server
  • Server Testing
  • Firewall
  • Firewall Basics
  • Zones & Rules
  • Stateful Inspection
  • Basic Configuration
  • Switching
  • Switch Operation
  • MAC Learning
  • Switch Configuration
  • EtherChannel
  • QoS (Quality of Service)
  • QoS Concepts
  • Classification & Marking
  • Queuing
  • Voice & Video Priority
  • STP (Spanning Tree Protocol)
  • Loops & Broadcast Storms
  • Root Bridge Election
  • Port States
  • PortFast & RSTP
  • Subnetting
  • Subnet Masks & CIDR
  • Subnetting Practice
  • VLSM
  • IPv6 Basics
  • Small Office Network Implementation (Project 1)
  • Network Design
  • Addressing Plan
  • Device Configuration
  • Testing & Documentation
  • Multi-Site Network Infrastructure with VLAN Segmentation & ACL Security (Project 2)
  • Multi-Site Design
  • VLAN Segmentation
  • ACL Security Policy
  • Final Validation

Practice Projects

Project 1Linux server hardening checklist
Project 2Vulnerability assessment of a practice web app
Project 3Burp Suite testing report
Project 4CCNA lab: multi-VLAN network in Packet Tracer
Project 5Phishing awareness demo in a lab
Project 6Final pentest summary report

Warm Up with Free IT Games

Practise the basics before or alongside class with the IT Skills Arcade: short games on networking, cyber safety and hardware, plus a free 5-minute IT skills test.

Tools You Will Master

Kali Linux Nmap Burp Suite Metasploit Wireshark Hashcat John the Ripper Nikto SQLmap Aircrack-ng OWASP ZAP Gobuster Hydra

Career Opportunities & Salary Range

Roles you can target after completing the 6-Month Diploma — based on current Indian market salaries.

Penetration Tester

Conduct authorised security assessments for IT firms, startups & security consultancies

₹4–10 LPA

VAPT Engineer

Vulnerability assessment & web application pentesting for enterprises

₹5–15 LPA

Bug Bounty Hunter

Earn rewards by reporting vulnerabilities on HackerOne, Bugcrowd & NCIIPC

₹3–25+ LPA

Network Security Engineer

Design, configure & secure enterprise network infrastructure

₹4–10 LPA

Security Analyst

Threat monitoring, log analysis & security operations at MNCs & IT firms

₹4–10 LPA

Which Programme Is Right For You?

Feature 6-Month Diploma 1 Year Diploma
At a glance
Duration 6 months 1 year
Modules 19 30
Certification tracks 4 7
Included in both
Linux Training
Networking — CCNA
Ethical Hacking (CEH)
Web Pentesting (WAPT)
Live + recorded classes with notes
100% practical labs
Certification
Industry Mentorship and Placement Assistance
1-Year extras
Digital Forensics (CHFI) 1-Year only
Mobile Pentesting (MAPT) 1-Year only
Python for Hackers (Free) 1-Year only
Bug Bounty Hunting 1-Year only
Capstone Project 1-Year only

Want the complete track? View the 1 Year Diploma →

Course Details

Duration6 Months
ModeOffline (Delhi Centre) / Online Classes Available
Batch TimingMorning & Evening Batches (Mon–Sat)
EligibilityBasic Computer Knowledge Required. No prior hacking experience needed.
CertificateDiploma Certificate from White Fortress Academy provided on completion
SupportResume Building + Interview Preparation + Placement Guidance

Frequently Asked Questions

How long is the 6-Month Diploma in Cyber Security in Delhi?

The 6-Month Diploma in Cyber Security takes 6 months.

Is the 6-Month Diploma in Cyber Security offline or online, and what are the batch timings?

Mode: Offline (Delhi Centre) / Online Classes Available. Batch timing: Morning & Evening Batches (Mon–Sat).

Who can join the 6-Month Diploma in Cyber Security? Do I need any prior knowledge?

Basic Computer Knowledge Required. No prior hacking experience needed.

Will I get a certificate after the 6-Month Diploma in Cyber Security?

Yes. White Fortress Academy provides a diploma certificate on completion of the course.

Which tools and software will I learn in the 6-Month Diploma in Cyber Security?

You will work with Kali Linux, Nmap, Burp Suite, Metasploit, Wireshark, Hashcat, John the Ripper, Splunk, Nikto, SQLmap, Aircrack-ng, OWASP ZAP, Gobuster and Hydra.

What jobs can I aim for after the 6-Month Diploma in Cyber Security?

Career paths covered on this page include Penetration Tester and VAPT Engineer. Hiring depends on your skills and the market. The academy's support includes resume building, interview preparation and placement guidance.

What is the fee for the 6-Month Diploma in Cyber Security, and can I try a demo class?

The fee is not listed on this page, so please ask the centre for the current fee and the next batch date. Call or WhatsApp +91 88104 71374, or visit 53, Maujpur Main Road, Opp. HDFC Bank, Delhi 110053 (Monday to Saturday, 9:00 AM to 8:00 PM). A free demo class is available.

Ready to Become a Cyber Security Professional?

Join the 6-Month Diploma and build a job-ready skill set in cyber security from scratch.

Enroll Now Ask on WhatsApp