Skip to main content
Advanced12 modules · 250 hours

Offensive Security

This path teaches you to think like an attacker and work methodically: reconnaissance, exploitation, privilege escalation, Active Directory and post-exploitation. All practice takes place in Falcon Academy labs; on real systems you work only with written authorisation. You finish by turning findings into a professional report a client can act on.

What you will learn

Key topics

ReconnaissanceExploitationPrivilege escalationActive DirectoryPost-exploitationReporting
  1. 01

    Reconnaissance

    Gathering information about a target from open sources and the network.

  2. 02

    Scanning and enumeration

    Identifying services, versions and potential entry points.

  3. 03

    Exploitation

    Using known vulnerabilities to gain initial access in a controlled environment.

  4. 04

    Privilege escalation

    Escalating privileges on Linux and Windows through misconfigurations.

  5. 05

    Active Directory

    Domain structure, common misconfigurations and the attacks that target them.

  6. 06

    Post-exploitation and reporting

    Assessing impact, moving laterally and writing a professional report.

Attack and defence

The attacker’s side

  • Gather information on a target and map its attack surface.
  • Exploit vulnerabilities on lab systems to gain initial access.
  • Escalate privileges in Linux, Windows and Active Directory environments.
  • Demonstrate the business impact of your findings.

The defender’s side

  • Recommend precise remediation for every vulnerability.
  • Identify risky Active Directory settings and show how to fix them.
  • Discuss with defenders where the attack chain could have been broken.
  • Prepare a report that both engineers and management can understand.

Who it is for

  • Specialists aiming for a career as a penetration tester.
  • Defensive teams that want to understand the attacker's perspective.
  • Learners who have completed Web Security or Networking Basics.

By the end

  • Carry out a full penetration test cycle independently, from recon to report.
  • Escalate privileges in Linux, Windows and Active Directory environments.
  • Rate findings by risk level.
  • Write a professional report with remediation advice.

Capture your first flag today

Create a free account and access 700+ hands-on challenges.