Book a meeting
Cart
Register
Sign in

Courses & Certifications

Strengthen your cybersecurity skills with practical, field-tested training through instructor-led cybersecurity courses and industry-ready certifications.

ALL
MOBILE SECURITY
CLOUD SECURITY
RED TEAMING
BLUE TEAMING
CYBERSECURITY FUNDAMENTALS
MOBILE SECURITY CLOUD SECURITY RED TEAMING BLUE TEAMING CYBER SECURITY FUNDAMENTALS

Purple Teaming

Cyber Ranges Integrated Training

A new joint training experience combining Cyber Ranges’ simulation platform with Cyber Helmets’ expert-led instruction.

In partnership with: 

Coming soon

Mobile Security

Mobile Security Expert (IOS)

Instructor-led, hands-on mobile security training built around real-world iOS attack vectors, using platform-specific labs and structured guidance to develop the technical skills needed for effective iOS application testing.

by: 

Course Details

Mobile Security Expert (Android)

Instructor-led, hands-on mobile security training focused on real-world Android exploitation techniques, using practical labs and guided walkthroughs to build the core skills required for modern Android application testing.

by: 

Course Details

Cloud Security

Azure Security Specialist
(HACKTRICKS AzRTA)

Instructor-led, hands-on cloud security training built around real-world Azure and EntraID attack scenarios, using HackTricks labs and structured guidance to develop the practical skills required for the HackTricks AzRTA certification.

In partnership with:

Course Details

AWS Security Specialist
(HACKTRICKS ARTA)

Instructor-led, hands-on cloud security training focused on real-world AWS attack paths and offensive cloud techniques, leveraging HackTricks labs and expert instruction to build the applied skills required for the HackTricks ARTA certification.

In partnership with:

Course Details

GCP Security Specialist
(HACKTRICKS GRTA)

Instructor-led, hands-on cloud security training covering real-world GCP attack scenarios and privilege escalation paths, supported by HackTricks labs and practical walkthroughs to develop the technical skills required for the HackTricks GRTA certification.

In partnership with:

Course Details

Web Application Security

(HTB CBBH)
Certified Bug Bounty Hunter

Instructor-led, hands-on bug bounty training focused on real-world web exploitation techniques, enriched with HTB Academy’s advanced labs, covering the core skills required for the HTB CBBH certification.

In partnership with:

Course Details

(HTB CWEE)
Certified Web Exploitation Expert

Instructor-led, hands-on web exploitation training focused on real-world application security scenarios, enriched with HTB Academy’s advanced labs to develop the technical skills required for the HTB CWEE certification.

In partnership with:

Course Details

Penetration Testing

(HTB CPTS)
Certified Penetration Testing Specialist

Instructor-led, hands-on penetration testing training built around real-world scenarios, enriched with HTB Academy’s advanced labs and structured around the skills required for the HTB CPTS certification.

In partnership with:

Course Details

(HTB CAPE)
Certified Active Directory
Penetration Tester

Instructor-led, hands-on cybersecurity training built around real-world offensive and defensive scenarios, enriched with HTB Academy’s advanced labs, and structured guidance to develop the applied skills required for the HTB CAPE certification.

In partnership with:

Course Details

SOC & DFIR

(HTB CDSA)
Certified Defensive Security Analyst

Instructor-led, hands-on blue team training focused on real-world detection, analysis, and incident response workflows, built around practical SOC scenarios, enriched with HTB Academy’s advanced labs to develop the core skills required for the HTB CDSA certification.

In partnership with:

Course Details

Cyber Security Fundamentals

Intro to Cybersecurity

Instructor-led, hands-on cybersecurity training introducing core security concepts, real-world threats, and practical defensive skills, built to give beginners a solid technical foundation.

by: 

Course Details

Syllabus:

Intro to GCP

  • GCP Hierarchy
  • Google Workspace
  • gcloud config
  • Basic Hacking Techniques

Exploitation of GCP Services

  • IAM
  • KMS
  • Secrets 
  • Storage
  • Compute Instances & VPC
  • Cloud Functions
  • CloudSQL
  • Pub/Sub
  • App Engine
  • Google APIs
  • Cloud Shell

Methodologies

  • White box

Security Services

  • GCP Logging & Monitoring

Syllabus:

Intro to AWS

  • AWS Organization
  • AWS Principals
  • Basic Hacking Techniques

Exploitation of AWS Services

  • IAM
  • STS
  • KMS
  • Secrets Manager
  • S3
  • EC2 & VPC
  • Lambda
  • RDS
  • SQS
  • SNS

Methologies

  • White box

Common Detection Mechanisms

  • CloudTrail

Syllabus:

Azure Basics

  • Azure Organization
  • Entra ID
  • Azure Tokens & APIs
  • Basic Enumeration Tools

 

Exploitation of Azure Services

  • Entra ID IAM
  • Azure IAM
  • Azure Applications
  • Azure Key Vault
  • Azure Virtual Machine & Networking
  • Storage Accounts
  • Azure File Share
  • Azure Table Storage
  • Azure SQL Database
  • Azure MySQL & PostgreSQL
  • Azure CosmosDB
  • Azure App Service
  • Basic Azure Research Technique
  • Azure Function Apps
  • Static Web Apps
  • Azure Container Registry
  • Azure Container
  • Instances, Apps & Jobs
  • Azure Queue
  • Azure Service Bus
  • Azure Automation Account
  • Azure Logic Apps
  • Azure Cloud Shell
  • Azure Virtual Desktop

 

Methologies

  • White box
  • Black box
  • Pivoting between Entra ID & AD

 

Common Detection Mechanisms

  • Azure & Entra ID Logging & Monitoring
  • Microsoft Sentinel
  • Microsoft Defender for Cloud & Microsoft Defender EASM

Fundamentals and Setup

  1. Overview of Android’s architecture and ecosystem dynamics.
  2. Exploration of security features native to Android using Java, Kotlin, C++, and Rust.
  3. Mobile Application Threat Model
    a) Differences between mobile and web application threat models.
    b) Applying threat modeling techniques specifically to mobile applications.
    c) Case studies highlighting potential threats and vulnerabilities.
    d) How do we secure and test cross platform apps (e.g. ReactNative, Xamarin, etc).
  4. Introduction to industry mobile security standards
    a) OWASP Mobile Application Security (MAS) project
    b) Effective usage of the Mobile Application Security Verification Standard (MASVS).
    c) Effective usage of the Mobile Security Testing Guide (MSTG).
    d) Overview of the OWASP top 10 for mobile.
  5. Setting up and preparing a mobile security testing lab
    a) Configuration of industry-standard tools and guidance on their appropriate use.
    b) Setup of virtual mobile devices using Corellium, including its advantages.
    c) Introductory exercises to familiarize with the tools.
  6. Secure Coding Overview
    a) Exercises to identify vulnerabilities in code examples
    b) Discussion of the appropriate mechanisms for remediation
    c) Practical session on remediation and re-testing the app
  7. Secure storage
    a) Overview of application storage mechanisms.
    b) Introduction to cryptographic storage solutions on Android.

Advanced Techniques and Practical Application

  • Mobile penetration testing methodology
    a) Methodologies used in real-world scenarios with practical tips and tricks.
  • Identifying issues with backend APIs
    a) Examination of client-side trust issues.
    b) Analysis of insecure communications including certificate validation and pinning.
  • Cryptography in Android apps
    a) Utilization of Android’s Crypto APIs.
    b) Implementation of native cryptography using libraries like libnacl and OpenSSL.
    c) Management of cryptographic keys.
  • Authentication and Authorization
    a) Testing client-side authentication mechanisms, including secure usage of biometrics.
    b) Strategies to detect and bypass authentication flaws.
    c) Security measures for API authentication.
  • Android IPC
    a) Detailed exploration of Intents, deep links, Binders/services, and broadcast receivers.
  • Webviews
    a) Identifying and resolving common security issues in Android Webview configurations.
  • Software Composition Analysis (SBOM)
    a) Techniques to determine the components of an Android app.
    b) Identifying known vulnerabilities within these components.
  • Mobile Device Management (MDM)
    a) Introduction to Mobile Device Management: definition, core features, and its role in enhancing organizational security.
    b) Discussion on the benefits and practical applications of MDM in controlling and securing mobile devices across an enterprise.
  • Mobile Application Management (MAM)
    a) Overview of Mobile Application Management: what it entails and its significance in enterprise environments.
    b) Exploration of how MAM contributes to managing and securing applications specifically, detailing its utility for enterprise security strategies.

Advanced Techniques and Practical Application

  • Mobile penetration testing methodology
    a) Methodologies used in real-world scenarios with practical tips and tricks.
  • Identifying issues with backend APIs
    a) Examination of client-side trust issues.
    b) Analysis of insecure communications including App Transport Security issues & certificate pinning.
  • Cryptography in IOS apps
    a) Utilization of iOS’s CryptoKit & CommonCrypto APIs.
    b) Implementation of native cryptography using libraries like libnacl and OpenSSL.
    c) Management of cryptographic keys and leveraging the secure enclave.
  • Authentication and Authorization
    a) Testing client-side authentication mechanisms, including secure usage of Local Authentication (biometrics).
    b) Strategies to detect and bypass authentication flaws.
    c) Security measures for API authentication.
    d) Using Device Check and App Attest
  • iOS IPC
    a) Detailed exploration of URL schemes, deep (universal) links, and extensions.
  • Webviews
    a) Identifying and resolving common security issues in iOS Webview configurations.
  • Software Composition Analysis (SBOM)
    a) Techniques to determine the components of an iOS app.
    b) Identifying known vulnerabilities within these components.
  • Implementing App Integrity
    a) What to look for
    b) How to implement
  • Mobile Device Management (MDM)
    a) Introduction to Mobile Device Management: definition, core features, and its role in enhancing organizational security.
    b) Discussion on the benefits and practical applications of MDM in controlling and securing mobile devices across an enterprise.
  • Mobile Application Management (MAM)
    a) Overview of Mobile Application Management: what it entails and its significance in enterprise environments.
    b) Exploration of how MAM contributes to managing and securing applications specifically, detailing its utility for enterprise security strategies.

Fundamentals & Setup

  1. Overview of iOS’s architecture and ecosystem dynamics.
  2. Exploration of security features native to to iOS using Objective-C, Swift, and C(++).
  3. Mobile Application Threat Model
    a) Differences between mobile and web application threat models.
    b) Applying threat modeling techniques specifically to mobile applications.
    c) Case studies highlighting potential threats and vulnerabilities.
    d) How do we secure and test cross platform apps (e.g. ReactNative, Xamarin, etc).
  4. Introduction to industry mobile security standards
    a) OWASP Mobile Application Security (MAS) project
    b) Effective usage of the Mobile Application Security Verification Standard (MASVS).
    c) Effective usage of the Mobile Security Testing Guide (MSTG).
    d) Overview of the OWASP top 10 for mobile.
  5. Setting up and preparing a mobile security testing lab
    a) Configuration of industry-standard tools and guidance on their appropriate use.
    b) Setup of virtual mobile devices using Corellium, including its advantages.
    c) Introductory exercises to familiarize with the tools.
  6. Secure Coding Overview
    a) Exercises to identify vulnerabilities in iOS code examples
    b) Discussion of the appropriate mechanisms for remediation
    c) Practical session on remediation and re-testing the app
  7. Secure storage
    a) Overview of application storage mechanisms.
    b) Introduction to cryptographic storage solutions on iOS.