Ethical Hacking & Bug Bounty Course in Dhaka
A 36-hour, lab-driven offensive security course: reconnaissance, network and web exploitation, privilege escalation, and bug bounty operations on real scopes.
Executive Overview
What This Course Covers
This is a practical offensive security course, not a theory class. Each module pairs the underlying technique with a lab you complete yourself — breaking into target machines, exploiting web applications, escalating privileges and writing the kind of report a triage team will accept.
The final module is bug bounty operations: how programmes are scoped, how findings are triaged and deduplicated, what makes a report actionable, and how to hunt responsibly without breaking programme rules. It is built for students and professionals in Dhaka who want employable offensive skills, and it is delivered hybrid — on-site and online.
Capabilities
Core Features & Arsenal
Reconnaissance & Attack Surface Mapping
OSINT, subdomain enumeration, service discovery and mapping a target the way an attacker does before touching an exploit.
Network Exploitation
Service enumeration, exploitation of common misconfigurations, credential attacks and pivoting across a lab network.
Web Application Hacking
OWASP Top 10 in practice — injection, broken access control, SSRF, authentication flaws and file-upload abuse in a live lab.
Privilege Escalation
Linux and Windows escalation paths: misconfigured services, SUID binaries, token abuse, credential reuse and persistence discovery.
Bug Bounty Operations
Programme scope and rules of engagement, safe harbour, duplicate avoidance, severity judgement and reward structures.
Reporting & Remediation Advisory
Writing findings with reproduction steps, impact and a fix the engineering team can act on — the skill triage teams judge you by.
Execution
Engagement Methodology
Why It Matters
Business Value Delivered
Every engagement is aligned to your strategic objectives — delivering measurable risk reduction and clear ROI for your organisation.
- A portfolio of completed labs you can show an employer.
- The practical skills OSCP and CEH exams actually test, taught against OWASP and PTES methodology.
- A report-writing habit that survives contact with a real triage team.
- Direct access to instructors who run penetration tests and red team engagements professionally.
- A route into Penough internships and junior offensive security roles for top performers.
Questions Answered
Frequently Asked Questions
What students and employers ask before enrolling.
Do I need prior experience to join the ethical hacking and bug bounty course?
You should be comfortable with basic networking and using a Linux command line. Students with no security background typically complete a fundamentals module first; the course assumes you can read a packet capture and navigate a terminal, not that you have exploited anything before.
Is the course taught in Dhaka or online?
It is delivered hybrid: on-site sessions in Dhaka and online attendance for students outside the city, in English and Bengali. Labs are remote and available throughout the batch.
Does this course prepare me for OSCP or CEH?
The curriculum is aligned with the practical skills OSCP and CEH test — enumeration, exploitation, privilege escalation and reporting — and with OWASP and PTES methodology. It prepares you for those exams; it does not include the exam voucher or guarantee a pass.
How much does the course cost and how long is it?
The programme is 36 hours of instruction plus lab time, priced at BDT 20,000. Batch dates and any instalment options are confirmed on request through the contact form.
What do I need to bring?
A laptop capable of running a virtual machine (8 GB RAM recommended) and a stable internet connection for the remote labs. Lab targets are provided; you do not need your own vulnerable machines.
Will I get a certificate, and can it help me get a job?
Yes — graduates receive a Penough Academy completion certificate. Top performers are considered for Penough internships and junior offensive security roles, and the capstone report is designed to work as a portfolio piece in interviews.