What is this programme?
The Ethical Hacking Basics Certificate is an independent online program from ecertificate.pro, a training provider running since 2016. It covers the full sequence of an authorized security test: written authorization and scope, passive and active reconnaissance, Nmap host and service discovery, vulnerability scanning and manual triage, web application testing with an intercepting proxy, CVSS severity rating, and the written report and retest. Study takes roughly 24 hours at your own pace and ends with an assessment plus a practical submission; the certificate is then issued inside your private ecertificate.pro panel rather than as an email attachment, and each one carries a unique verification code that can be checked only in the ecertificate.pro database, since we file no records with any outside registry. The program is not government approved and holds no national accreditation, so it grants no licence, no protected title, and no legal permission to test any system you do not own or have written consent to examine. It is not an employment guarantee either; it is documented study that you can present next to your own lab work and reports.
Who it is for
IT support, network and system administration staff moving toward a security role; junior SOC analysts and IT auditors who read scan output but were never shown how it is produced; web and application developers who want to probe their own builds before release; and self-taught learners preparing for hands-on security labs who need the authorization and reporting side, not only the tooling.
What you will be able to do
- Draft a rules-of-engagement document naming in-scope hosts and domains, the agreed test window, excluded techniques, an emergency stop contact and evidence-handling terms, and treat a signature on it as the condition for starting work.
- Build an isolated practice lab on a host-only network with self-hosted vulnerable applications, so every technique in the course is exercised on systems you own.
- Assemble an asset inventory from passive sources alone, using WHOIS, DNS records, certificate transparency logs and public repositories, before sending any traffic to the target.
- Run Nmap host discovery, SYN and version scans with timing and exclusion options chosen to avoid disrupting production services, then turn the output into a host, port and service matrix.
- Configure credentialed and uncredentialed vulnerability scans, trace each result back to its CVE, and confirm or dismiss it by hand instead of forwarding raw scanner output as a finding.
- Use an intercepting proxy to verify access-control, injection, session and security-header issues in a web application, capturing the exact request and response that reproduces each one.
- Score a confirmed issue with a CVSS v3.1 vector you can defend metric by metric, and write it up with reproduction steps and remediation guidance a system owner can act on.
Modules
-
1
Written Authorization, Rules of Engagement and Scope
-
2
Building an Isolated Practice Lab
-
3
Passive Reconnaissance and Asset Inventory
-
4
Active Discovery: Hosts, Ports and Services
-
5
Vulnerability Scanning and Finding Triage
-
6
Web Application Testing Fundamentals
-
7
Severity Rating with CVSS and Evidence Handling
-
8
Reporting, Retest and Disclosure Limits
How it works
Learning format
Self-paced written material, downloaded from your dashboard. No fixed schedule and no live sessions — you work through it when it suits you.
Material delivery
Everything appears in your dashboard as soon as your payment is confirmed. Files are served only to your signed-in session.
Prerequisites
Working knowledge of TCP/IP, DNS and HTTP, and comfort with the Linux command line. You need a computer able to run two virtual machines at once (roughly 8 GB RAM and 60 GB free disk) with VirtualBox or VMware; everything else used in the course is free or has a community edition. Programming is not required, though basic shell or Python scripting makes the lab exercises faster.
Completion
You work through the eight modules at your own pace and finish with an assessment plus one practical submission: a scope and rules-of-engagement document, a scan result triaged into confirmed and dismissed items, and one finding written up with a CVSS vector and remediation steps. Once both are passed, the certificate is issued to your private panel on ecertificate.pro carrying its unique verification code.
Your certificate
Once your completion is confirmed, we prepare your certificate and upload it to your dashboard, normally within 24–48 hours. You receive an e-mail as soon as it is there — you never have to chase it.
Refunds
Because the material is delivered digitally and immediately, purchases are non-refundable once the files have been made available to your account. The full terms are in our Refund Policy.
