Cyber Security & Ethical Hacking Basics with Legal Labs
Understand how attacks work and how to defend, practising only on your own lab and approved practice apps
Ghosla Academy · Security Team
This course is a responsible first step into cyber security. You will learn how common attacks work at a conceptual level and, more importantly, how they are prevented and detected. Every hands-on activity happens inside an isolated lab on your own computer or on practice applications that are built to be tested. We start with law and ethics: under India's IT Act 2000, accessing or testing any system without permission is a punishable offence, and we treat written authorisation as non-negotiable. You will finish with defensive skills, a professional report-writing habit and a clear view of security certifications and job roles.
What you will be able to do
- Explain the CIA triad, common threats and how defenders think
- Understand Indian cyber law, including the IT Act 2000, and why written permission is mandatory
- Set up a safe, isolated practice lab on your own machine
- Recognise common web application weaknesses using the OWASP Top 10 as a guide
- Harden accounts, devices and home Wi-Fi against everyday threats
- Write a clear, responsible security report and explore cyber security careers
What you build
- Isolated home lab on your own computer using virtual machines
- Security hardening checklist for your own laptop and phone
- Written findings report on an intentionally vulnerable practice app
What you need to start
- A laptop with 8 GB RAM that can run VirtualBox
- Basic comfort with computers and the internet
- Agreement to practise only on systems you own or are explicitly permitted to test
Curriculum · 7 sections, 29 lectures
Security mindset, law and ethics5 lectures
- What ethical hacking means and what it does notFree preview10 min
- IT Act 2000 and Indian cyber law basicsFree preview12 min
- Permission, scope and rules of engagement10 min
- Code of conduct for this course8 min
- Quiz: law and permission5 min
Core concepts4 lectures
- CIA triad, threats and vulnerabilities12 min
- Networking basics for security: IP, ports, DNS12 min
- Common attack types explained at a high level10 min
- Quiz: security vocabulary6 min
Building your legal lab4 lectures
- Installing VirtualBox and isolated networking12 min
- Setting up Linux in a virtual machine14 min
- Running intentionally vulnerable practice apps locally12 min
- Project: your isolated home lab18 min
Web security concepts4 lectures
- How web apps work: requests, sessions, cookies14 min
- OWASP Top 10 overview14 min
- How developers prevent injection and broken access control12 min
- Exploring a practice app with browser developer tools12 min
Network visibility3 lectures
- Reading traffic in your own lab with Wireshark12 min
- Firewalls and why open services matter12 min
- Logging and monitoring basics8 min
Everyday defence4 lectures
- Passwords, password managers and 2FA12 min
- Recognising phishing and UPI fraud messages12 min
- Securing home Wi-Fi and devices10 min
- Project: personal hardening checklist16 min
Reporting and careers5 lectures
- Writing a findings report with severity and fixes12 min
- Responsible disclosure and CERT-In10 min
- Project: report on a practice app in your lab22 min
- Careers and certifications in cyber security10 min
- Final quiz6 min
Who this is for
- Students curious about a career in cyber security
- IT and CS students wanting a responsible introduction to security testing
- Anyone who wants to protect themselves and their family online