Offensive security training: real-world VAPT, pentesting, CEH and CPENT
Hands-on training for people learning offensive security: how real VAPT engagements are scoped, tested and reported, plus structured preparation for CEH and CPENT. Mentored by a CEH v12 security researcher whose vulnerability reports were acknowledged by NASA, the USPTO, the State of California and India's NCIIPC.
Independent mentorship and coaching. Not official, authorised or affiliated training from EC-Council, OffSec, CompTIA or any other certification body. Exams, vouchers and official courseware are bought from the certification body directly.
6 training & mentorship tracks
Pick the one that matches where you are now. You can move between tracks as you progress.
- 1:1 Mentorship
Real-world VAPT & pentesting
- Learner Profile
- Students, developers and IT staff moving into security testing
- Target Goals
- Real VAPT engagementsJunior pentester roles
- Methodology
- Scoping, testing, risk rating and a client-ready report, practised on lab targets
- 1:1 Mentorship
Foundations
- Learner Profile
- Beginners and career switchers
- Target Goals
- CompTIA Security+Google Cybersecurity CertificateeJPT
- Methodology
- 1:1 sessions plus lab tasks between them
- Syllabus Available
CEH preparation
- Learner Profile
- Students and early-career professionals
- Target Goals
- EC-Council CEH
- Methodology
- Syllabus walkthrough, labs and practice questions
- Syllabus Available
CPENT & advanced pentesting
- Learner Profile
- Working pentesters and security engineers
- Target Goals
- EC-Council CPENTOSCP-style practice
- Methodology
- Hands-on labs and penetration test report writing
- 1:1 Mentorship
Web app security & bug bounty
- Learner Profile
- Developers and new bug hunters
- Target Goals
- OWASP Top 10Public vulnerability disclosure programs
- Methodology
- Live testing on legal, in-scope targets only
- 1:1 Mentorship
Career & portfolio
- Learner Profile
- Job seekers aiming for pentest or SOC roles
- Target Goals
- Pentester and SOC analyst roles
- Methodology
- CV and GitHub review, write-ups and interview practice
How sessions work
- Format
1:1 or small group sessions. Contact me to plan your mentoring.
- Between sessions
Lab tasks and reading set each week, so the session is spent on what you got stuck on.
- Where you practise
TryHackMe, Hack The Box, your own home lab, and disclosure programs that authorise testing. Never systems you don't have permission to test.
- Pace
Set around your exam date or job search, and adjusted as you go. No fixed schedule: contact me to plan your mentoring.
What you leave with
Skills you can demonstrate, work you can show, and confidence built in legal labs.
- 01
Skills you can show
Recon, scanning, exploitation, privilege escalation and web testing, practised until you can do them without notes.
DELIVERABLE 01 - 02
A portfolio
Lab write-ups, a sample penetration test report and a tidy GitHub that an interviewer can actually read.
DELIVERABLE 02 - 03
Exam readiness
You know the syllabus, you've timed yourself on practice questions and labs, and you know where your gaps are before exam day.
DELIVERABLE 03 - 04
Professional habits
Scoping, written authorisation, evidence handling and clear reporting: the parts of the job courses often skip.
DELIVERABLE 04
Who's mentoring you
A security researcher, not a course reseller. Every credential below links to its public proof.
NASAAcknowledged for a vulnerability reported through NASA's disclosure program.
U.S. Patent and Trademark OfficeAcknowledged for a vulnerability reported through the USPTO disclosure program.
State of CaliforniaAcknowledged for a vulnerability reported through the State of California disclosure program.
NCIIPC (Government of India)Named in the NCIIPC newsletter acknowledgements, July 2023 and October 2023.
Mentorship: questions
Is this official EC-Council training?
No. This is independent mentorship and coaching. It isn't official, authorised or affiliated EC-Council training. You buy the exam and any official courseware from EC-Council or its authorised partners; I help you prepare for it.
Do you guarantee I'll pass?
No. Nobody can honestly guarantee an exam result. What you get is structured preparation, plenty of hands-on practice and honest feedback on where you're not ready yet.
Do you provide exam dumps or real exam questions?
No, and you shouldn't use them. Practice questions are written to test understanding of the syllabus, not copied from any exam.
Where will I practise hacking?
Only on targets you're allowed to test: TryHackMe, Hack The Box, your own lab machines, and vulnerability disclosure programs whose rules permit it.
Do I need experience to start?
Not for the Foundations track. For CEH it helps to be comfortable with basic networking and Linux. CPENT preparation assumes you already test systems or are close to it.
Which certifications do you hold?
I'm a Certified Ethical Hacker (CEH v12). CPENT and OSCP are certifications this mentorship helps you prepare for; I don't currently hold them.
Apply for cybersecurity mentorship
Tell me where you are now, which certification or role you're aiming for, and roughly when. A few lines is plenty.