System Hacking, Malware & Social Engineering
Systems are compromised, malware behaves in the wild, and people remain the softest target in any organisation. This module builds the offensive and defensive skill to handle all three — inside a fully controlled, isolated lab.
What You Will Learn
A detailed, industry-aligned breakdown of every topic covered in this module.
- Windows system hacking and privilege escalation techniques
- Windows login bypass and credential attack techniques
- Malware concepts, classification and types — virus, worm, trojan, ransomware, rootkit
- Malware creation fundamentals using Kali tools, strictly inside a controlled lab
- Packet analysis and network traffic inspection
- Server hacking fundamentals and common misconfigurations
- Anti-malware software, detection techniques and defensive controls
- Social engineering concepts and the attack lifecycle
- Types of social engineering — phishing, pretexting, baiting and tailgating
- Social media reconnaissance and social-engineering-driven attacks
- Endpoint hardening and malware remediation basics
- Incident documentation for system-compromise scenarios
Tools You Will Use
Hands-on time with the same tools used in professional security operations and penetration-testing engagements.
Kali Linux
Debian-based penetration testing distribution preloaded with the industry-standard offensive security toolset.
Wireshark
Network protocol analyzer used to capture and inspect live traffic at the packet level.
OpenVAS
Open-source vulnerability scanner used to identify and score security weaknesses across a target estate.
Parrot Security
Security-focused Linux distribution used for penetration testing, forensics and privacy-preserving lab work.
Netcat
Networking utility used for port testing, banner grabbing and building lightweight listeners during engagements.
Hands-On Labs
Enterprise and SOC-style lab scenarios, run inside your isolated penetration-testing environment.
Run a privilege-escalation exercise against a vulnerable Windows lab target.
Analyse controlled malware behaviour inside an isolated sandbox.
Capture and analyse traffic to identify a live attack pattern.
Design and run a lab-safe social-engineering/phishing simulation.
Deploy and test anti-malware defensive controls on a compromised host.
Assessment
Knowledge Assessment
Quiz covering malware classification, kill-chain stage mapping and social-engineering attack types.
Practical Evaluation
Students must demonstrate privilege escalation on an assigned target and submit a written incident and defence report.
Projects
Industry-style deliverables added directly to your project portfolio.
System & Malware Defence Exercise
Simulate system hacking and malware behaviour in an isolated lab, then build and test the defences against it.
Social Engineering Risk Assessment
Design and report on a lab-safe phishing simulation, with staff-awareness recommendations.
SOC Incident Analysis Simulation
Analyse a simulated compromise end-to-end and produce a formal incident report.
What This Module Builds
Students learn to compromise, analyse and defend systems against malware and social-engineering attacks, and understand the human layer of cybersecurity.