Penetration testing is the field where offense and defense converge. In this intensive course, you’ll learn to use Python as an offensive tool, run controlled penetration tests on applications and infrastructure, and build the toolset that professional pentesters use every day.
You’ve mastered the basics of cybersecurity and are ready to take the next step. This course is the logical next step after the Cybersecurity Specialist course—you’ll deepen your knowledge of Python and learn how to perform penetration tests on both applications and infrastructure.
You know how attackers think—now you want to learn how they operate. By conducting penetration tests yourself, you’ll gain a deeper understanding of vulnerabilities and improve the quality of your detection and response.
You manage networks or applications and want to know how an attacker might target your environment. In this course, you’ll learn to identify vulnerabilities before a real attacker does—and report your findings professionally.
You'll learn how to use Python as a security tool. From variables, data structures, and OOP to network applications with Scapy, file manipulation, and database connections. You'll write your own scripts for reconnaissance, payloads, and automation—and take two midterm exams.
You'll learn to identify targets through active and passive reconnaissance. You'll work with Google Dorking, Maltego, Shodan, Nmap, Nessus, and FOCA; create anonymous attack profiles using VPNs and the Darknet; and report vulnerabilities professionally, including through bug bounty programs.
You’ll test web applications for vulnerabilities: XSS, SQL injection, CSRF, session hijacking, path traversal, and buffer overflow. You’ll work with Burp Suite, SQLMAP, BeEF, and Zed Attack Proxy, bypass filters using encoding, and learn how to report your findings professionally.
You will perform penetration tests on networks and wireless infrastructure. You will create exploits using Metasploit, msfvenom, and Veil-Evasion, carry out MITM attacks, and test Wi-Fi networks using WEP/WPA attacks with Aircrack-NG. Each module concludes with a practical exam.
You’ll build a solid foundation in Python focused on security applications. You’ll learn to work with variables, data structures, functions, and OOP, and apply Python in a network environment using Scapy and network requests. You’ll work with databases, package projects with Pyinstaller, and delve into asynchronous programming and threads. Two practical exams will assess your progress. Tools: Python, Git, Scapy, PyCharm. Duration: 60 hours.
The core of the program. You’ll gather cyber intelligence through reconnaissance, test web applications for OWASP Top 10 vulnerabilities, and perform infrastructure penetration tests on both wired networks and Wi-Fi. You’ll build payloads for Windows, Linux, and web browsers, create RATs and reverse shells, and carry out advanced MITM attacks. Each section concludes with a hands-on exam in our own training environment. Tools: Metasploit, Burp Suite, Nmap, Aircrack-NG, SQLMAP, BeEF, Nessus. Duration: 90 hours.
Upon completion, you will have the following demonstrable skills:
Defense starts with understanding offense. After this training, you won't be doing that on paper anymore.
| Learning Style | Hours | Duration | Days |
|---|---|---|---|
| Full-time | 32 hours | 5 weeks | By mutual agreement |
| 2 days | 4 p.m. | 10 weeks | 2–3 half-days per week |
| 2 evenings | 8 hours | 20 weeks | By mutual agreement |
With Finance4Learning, you can easily spread out your investment. The application process is quick, and we’re happy to help you work out what fits your situation. Final approval depends on your personal circumstances.
Many employers cover the full cost of the training. We will provide a detailed proposal.
Open classes for individual employees, or a customized team program. We’ll put together a well-reasoned proposal.
You have a basic understanding of cyberattacks and tools, and you understand networks and TCP/IP. Experience with Kali Linux is a plus but not required. This course is a direct continuation of the Trivian Cybersecurity Specialist program—if you’ve completed that program, you’ll be fully prepared.
Classes are taught in Dutch. The course material, tools, and exams are in English—which is also the standard practice in this field. A solid reading proficiency in English is sufficient to get started. A few times a year, we also offer a class taught entirely in English—please contact us for the dates.
You already have a solid foundation—that’s your biggest advantage. This course builds directly on your existing knowledge of cyberattacks and networks, which helps the material sink in quickly. What we do offer: personalized guidance, small groups, and practice exams after each section. With the right background, this level is very achievable.
The course consists of 150 study hours. You can choose between an intensive, consecutive program or a staggered schedule—for example, several 2-day blocks spread out over several weeks. The exact details are negotiable. A fully online option is available upon request.
This program is not suitable as an entry-level course. Without a basic understanding of cyberattacks, networks, and TCP/IP, the technical content will be too advanced for you. Not sure if you're ready? Contact us—we'd be happy to help you figure it out.
A course that combines Python development and penetration testing. You won’t just learn how to use attack tools—you’ll build them yourself. This will give you a much deeper, more fundamental understanding of attacks than someone who only works with existing tools.
