RECON // EXPLOIT // DEFEND // ROUTE

Learn the attacker's mindset.
Master the network underneath it.

A dark corner of the internet for people who want to actually understand ethical hacking and networking — structured learning paths, a real toolkit reference, and lab templates you can spin up this weekend.

  session — kali@lab
Rendering: NULLROUTE_UNIT_01
TWO DISCIPLINES, ONE FOUNDATION

Pick a learning path

Ethical hacking and networking are two sides of the same coin — you can't secure or attack what you don't understand. Both tracks below follow the order practitioners actually learn in.

> Ethical Hacking

The offensive security path, from footprinting to a client-ready report.

  1. 01
    ReconnaissancePassive & active info gathering — OSINT, DNS, footprinting.
  2. 02
    Scanning & EnumerationHost discovery, port/service scanning, banner grabbing.
  3. 03
    Vulnerability AnalysisMatching services to known weaknesses and misconfigurations.
  4. 04
    Exploitation (authorized labs only)Practicing against intentionally vulnerable targets.
  5. 05
    Reporting & RemediationWriting findings up the way a real engagement requires.

> CCNA / Networking

The Cisco-aligned path covering the core CCNA 200-301 domains.

  1. 01
    Network FundamentalsOSI/TCP-IP models, cabling, IPv4/IPv6 addressing.
  2. 02
    Network AccessVLANs, trunking, STP, wireless basics.
  3. 03
    IP ConnectivityRouting concepts, static routes, OSPF.
  4. 04
    IP Services & Security FundamentalsNAT, NTP, DHCP, ACLs, VPN concepts.
  5. 05
    Automation & ProgrammabilityAPIs, controller-based networking, basic scripting.
THE TOOLKIT

Tools worth actually learning

Not an exhaustive list — a reference of what shows up in real workflows and labs, on both the offensive and networking side.

Recon

Nmap

Host discovery and service/version detection across a network.

Recon

theHarvester

Gathers emails, subdomains, and hosts from public sources.

Recon

Shodan

Search engine for internet-connected devices and services.

Scanning

Nessus

Vulnerability scanner used for authorized assessments.

Scanning

OpenVAS

Open-source vulnerability scanning and management.

Scanning

Nikto

Web server scanner for outdated software and misconfigs.

Exploitation

Metasploit

Framework for developing and running exploits in a lab.

Exploitation

Burp Suite

Web app proxy for intercepting and testing HTTP traffic.

Credentials

Hydra

Login brute-force tool for authorized password-strength testing.

Credentials

John the Ripper

Password hash cracking for auditing credential strength.

Networking

Wireshark

Packet capture and protocol analysis, essential for both tracks.

Networking

Cisco Packet Tracer

Free network simulator used throughout CCNA study.

Networking

GNS3

Emulates real Cisco IOS images for advanced lab topologies.

Networking

EVE-NG

Multi-vendor network emulator for larger virtual labs.

HANDS ON

Lab templates

Blueprints for environments you can build in a VM host or GNS3/EVE-NG, ranging from a weekend project to a multi-week build.

Beginner

Home Recon & Scanning Range

Kali box paired with an intentionally vulnerable VM, on an isolated host-only network for recon and scanning practice.

Kali LinuxMetasploitable2Host-only vSwitch
Intermediate

Web App Pentest Lab

DVWA and Juice Shop behind a reverse proxy, with Burp Suite configured to intercept and log every request.

DVWAJuice ShopBurp Suite
CCNA · Beginner

Basic Switching Topology

Two switches, three VLANs, and an 802.1Q trunk — the topology every CCNA candidate should be able to build blind.

Packet TracerVLANsTrunking
CCNA · Intermediate

Multi-Area OSPF

Three routers across two OSPF areas, tuned to practice route summarization, cost metrics, and troubleshooting.

GNS3Cisco IOSOSPF
EXAM BLUEPRINT

CCNA 200-301 roadmap

The exam's domains, roughly in the order most study plans tackle them. Weightings are approximate and worth confirming against Cisco's current published blueprint before you sit the exam.

Network Fundamentals ~20%

OSI & TCP/IP models, cabling types, IPv4/IPv6 addressing and subnetting.

Network Access ~20%

VLANs, trunking (802.1Q), spanning tree concepts, wireless architecture basics.

IP Connectivity ~25%

Routing table concepts, static routing, and single-area OSPFv2.

IP Services ~10%

NAT, NTP, DHCP/DNS roles, SNMP, QoS concepts.

Security Fundamentals ~15%

Security concepts, access control lists, VPN and Layer 2 security basics.

Automation & Programmability ~10%

Controller-based networking, REST APIs, and basic configuration management concepts.