Learn how attackers find and exploit weaknesses, and practice reconnaissance, scanning, enumeration and basic exploitation in an isolated lab, always within legal authorization and an agreed scope.
The Ethical Hacking Fundamentals course in Doha, Qatar introduces the mindset and techniques of an attacker so that defenders can find and close weaknesses first. Participants learn the phases of an attack, from passive reconnaissance and network scanning to enumeration, vulnerability identification, exploitation and post-exploitation, using widely used open-source tools such as Nmap, Wireshark, Metasploit Framework and Burp Suite Community Edition on Kali Linux. Every technique is framed by the law, written authorization, a defined scope and a professional code of ethics.
All practical work takes place in an isolated lab of deliberately vulnerable virtual machines, never on live or third-party systems. Short demonstrations are followed by guided exercises, capture-the-flag style challenges and discussion of how each weakness should be fixed and detected. The course closes with how findings are documented for system owners. It can also run as an in-house program for organizations that want their IT and security teams to understand attacks relevant to their own environment.
By the end of this course, participants will be able to:
Explain the legal, ethical and contractual boundaries of authorized security testing
Perform passive and active reconnaissance using OSINT sources and DNS queries
Scan and enumerate hosts and services with Nmap in a lab network
Identify common vulnerabilities in systems, passwords and web applications
Demonstrate basic exploitation and post-exploitation with Metasploit Framework in a controlled lab
Recommend remediation and detection measures for each weakness found
This course is aimed at technical professionals who want to understand attacker techniques in order to defend systems more effectively.
System and network administrators
Junior security analysts and SOC staff
IT auditors who review technical controls
Developers interested in how applications are attacked
IT professionals planning a career in offensive security
Hacker types and the role of ethical hackers
Written authorization, scope and rules of engagement
Cyber kill chain and phases of an attack
Setting up a safe Kali Linux lab environment
Passive OSINT: search engines, WHOIS and public records
DNS enumeration with dig and nslookup
Email and social engineering exposure assessment
Recording findings in an organized way
TCP and UDP scan types with Nmap
Service and version detection, Nmap Scripting Engine basics
Enumerating SMB, SNMP and web services
Vulnerability scanning concepts and false positives
Exploits, payloads and Metasploit Framework workflow
Password hashes, cracking concepts and credential reuse
Basic privilege escalation on Windows and Linux
Malware types and how attackers maintain persistence
OWASP Top 10 risks such as injection and broken access control
Intercepting web traffic with Burp Suite Community Edition
Wi-Fi security: WPA2, WPA3 and common weaknesses
Writing findings with clear remediation and detection advice
As banks, energy companies, healthcare providers and government entities in Qatar expand their online services, the value of seeing systems through an attacker's eyes keeps growing. National cybersecurity guidance encourages organizations to test their defenses regularly and responsibly. Building local skills in authorized, ethical testing supports Qatar National Vision 2030's focus on human development and helps organizations discover and correct weaknesses in their networks, applications and cloud services before they can be misused.
Join a scheduled class at our training center in Doha or attend live online. For organizations, the course can run as an in-house program at your premises or online, tailored to your sector, examples and schedule.
It is a foundation-level, lab-based course in Doha that teaches how attackers gather information, scan networks, identify vulnerabilities and exploit them, so participants can strengthen defenses. All practice uses isolated lab machines and is framed by legal authorization, scope and ethics.
System and network administrators, junior security analysts, IT auditors, developers and IT professionals considering a move into offensive security. A working knowledge of networking, TCP/IP and basic Windows and Linux command-line use is recommended before joining.
Only with explicit written permission from the system owner and within an agreed scope. The course stresses that testing without authorization can be a criminal offense. All exercises are carried out on deliberately vulnerable lab machines provided for training, never on real or third-party systems.
Yes. It can be delivered at your premises or online and tailored to your sector, the technologies your teams use and your schedule, with a dedicated training lab. Contact Leaders Training Center to plan an in-house program.
Tell us a little about yourself and an advisor will contact you about batch timings, fees and eligibility. No obligation.
Sat–Thu: 09:00–22:00Fri: 08:00–22:00
Build a solid technical grounding in cybersecurity: core security principles, common threats, network and endpoint defenses, identity controls and the frameworks IT teams use to manage risk.
Learn to plan, run and report a structured penetration test, from scoping and rules of engagement through network, web and Active Directory testing in a lab to risk-rated findings.
Prepare for the CompTIA Security+ exam by working through its domains, from threats and security architecture to operations and governance, with labs, scenario questions and practice reviews.
Understand how a Security Operations Center works and practice the analyst's daily tasks: triaging alerts, investigating events across log sources, following playbooks and escalating real incidents.
