SomTrustCyber Academy
← Career roadmaps

Career Roadmap

Waddada Ethical Hacking

Ethical Hacking Path

Offensive security: reconnaissance, scanning, web vulnerabilities iyo penetration testing.

1

1. Beginner

Offensive Security Foundations

Bilo 0–2

Baro qaab-dhismeedka penetration testing, xeerarka sharciga ah (Rules of Engagement), cyber kill chain-ka, iyo sida loo dhiso lab ammaan ah (Module 1).

Pentest methodology typesLegal & ethical scopeCyber Kill ChainKali Linux lab setup
2

2. Junior Penetration Tester

Reconnaissance & Scanning

Bilo 2–4

Baro OSINT, passive/active reconnaissance, DNS enumeration, iyo Nmap scanning techniques faahfaahsan (Modules 2–3).

OSINT tools (Shodan, theHarvester)Subdomain enumerationNmap scan types & NSEFirewall/IDS evasion basics
3

3. Web Application & Vulnerability Testing

Web App Pentester

Bilo 4–8

Baro SQL injection, XSS, CSRF/SSRF/IDOR, OWASP Top 10 oo dhamaystiran, Burp Suite, iyo vulnerability assessment professional ah (Modules 4–7).

SQLi & XSS exploitationOWASP Top 10 testing methodologyBurp Suite Repeater/IntruderCVE/CVSS scoring & reporting
  • eJPT
4

4. Penetration Tester & Advanced

Penetration Tester

Bilo 8+

Dhammaystir PTES methodology, Metasploit exploitation basics, privilege escalation, iyo full pentest reporting (Module 8). Kadibna dooro takhasus — OSCP path, red teaming, ama bug bounty.

Metasploit & MeterpreterPrivilege escalation (Linux/Windows)Post-exploitation & attack chainingAttack narrative reporting
  • CompTIA PenTest+
  • OSCP (long-term)

Shahaadooyinka muhiimka ah

eJPT

eLearnSecurity Junior Penetration Tester

Entry

Imtixaan practical ah oo hands-on. Waxay caddaysaa xirfadaha network scanning, exploitation aasaasi ah iyo web attacks.

Diyaarinta: Module 1–4 + labs

CompTIA PenTest+

PT0-002

Core

Shahaado caalami ah oo daboosha planning/scoping, vulnerability assessment, exploitation, iyo reporting — u dhigma PTES methodology.

Diyaarinta: Module 1–7 + dhammaan labs-ka

Junior Penetration Tester Role

Junior Penetration Tester / Security Analyst (offensive) position

Career

Yoolka ugu weyn: shaqo pentesting entry-level ah. Portfolio-ga Module 8 (full engagement report) wuxuu caddaymaha bixiyaa.

Diyaarinta: Shahaadada SomTrust (8 modules) + full pentest report portfolio

Bilow waddadaada maanta

Isdiiwaangeli koorsada koowaad ee Waddada Ethical Hacking.

Fur koorsooyinka