Cyber Security

Comprehensive Cyber Security Course for Beginners – Learn Ethical Hacking & Network Protection

Cyber Security Course in Nepal

Learn ethical hacking, penetration testing, and offensive security — Nepal's most affordable cybersecurity training.

If you're searching for the best Cyber Security course in Nepal, this is it. Code IT's 1-month offensive cybersecurity training is the most comprehensive ethical hacking program in Nepal — covering network security, penetration testing, OSINT, Nmap, Nessus, Burp Suite, Wireshark, OWASP Top 10, malware analysis, social engineering, and real-world vulnerability assessment — everything you need to start a career in Nepal's fast-growing cybersecurity industry.

Cyber attacks on Nepal's banks, government systems, and businesses are increasing every year. Ethical hackers and penetration testers — the professionals who find vulnerabilities before criminals do — are among the most urgently needed and highest-paid IT specialists in Nepal right now. This course teaches you exactly how they work.

You won't just study theory. You'll use Wireshark to capture and analyze live network traffic, perform footprinting and reconnaissance using OSINT tools like Google Dorking, Shodan, and Maltego, scan networks with Nmap and Netcat, assess vulnerabilities with Nessus, test web applications for SQL Injection, XSS, and CSRF using Burp Suite, analyze malware with VirusTotal and sandboxes, and work through the complete penetration testing lifecycle — Recon, Scanning, Exploitation, and Reporting.

You'll also cover cybersecurity laws and ethics — GDPR, ISO 27001, PCI-DSS, and Nepal's IT Act — responsible disclosure, and the career paths, certifications (CEH, Security+, CISSP), and job roles that Nepal's cybersecurity sector is built around.

Live classes run from 8:00 PM to 9:30 PM via Google Meet, accessible from Kathmandu, Pokhara, Biratnagar, Butwal, Chitwan, or anywhere in Nepal. Classroom sessions available in Dharan. No coding required — basic networking and Linux familiarity is an advantage.

Every student receives lifetime video access and an industry-recognized certificate from Code IT.

Prerequisites

No coding/programming required
Familiarity with networking fundamentals
Linux command-line knowledge will be an advantage
Cyber Security
🎯 Starts in 14 Days

Cyber Security

Starts: October 30, 2026
Mode: Online (Google Meet) Google Meet
Duration: 1 month
Class Time: 8:00 - 9:30 pm
Limited seats left
Rs.2,499/-
Rs.35,000 Save 92%
Excluding VAT
Enroll Now

Have any Question?

WhatsApp: 9862130505
Telephone: 025-575163

Everything You Receive

All-inclusive support — from training to real-world experience

Live Classes

Google Meet
8:00 - 9:30 pm

Lifetime Videos

Re-watch anytime

Certification

Industry recognized

Internship

No internships are available right now.

Course Curriculum

Everything you'll learn — from fundamentals to advanced concepts

Course Outlines

  • Cyber Security Fundamentals

  • Network & System Security

  • Ethical Hacking & Penetration Testing

  • Web & Application Security

  • Cyber Security Tools & Real-World Projects

Full Curriculum

01 Day 1 — Cyber Security + Complete Lab Setup
What is Cyber Security?
CIA Triad
Threats, vulnerabilities and risks
Attack surface
Common cyber attacks
Malware, phishing and ransomware
Ethical hacking vs illegal hacking
Cyber Security career paths
Hands-on Lab Setup
Install and configure:
Kali Linux
VirtualBox / VMware
Windows VM
Ubuntu VM
OWASP Juice Shop
DVWA
Metasploitable
Wireshark
Burp Suite Community
Nmap
02 Day 2 — Networking + Lab Verification
Networking
OSI Model
TCP/IP Model
IP addresses
MAC addresses
Ports
TCP vs UDP
DNS
DHCP
HTTP/HTTPS
Common protocols
Practical
Configure VM networking
NAT vs Host-only networking
VM-to-VM communication
Identify IP addresses
Test connectivity
Capture traffic with Wireshark
Analyze TCP/UDP traffic
03 Day 3 — Linux for Cyber Security
Linux filesystem
Terminal commands
Files/directories
Permissions
Users/groups
Processes
Services
Package management
SSH
Environment variables
Basic Bash commands
04 Day 4 — Windows Security Fundamentals
Windows architecture
Users and groups
File permissions
Services
Processes
Event Viewer
Windows Defender
PowerShell basics
Windows security logs
Practical: Investigate simulated Windows security events.
05 Day 5 — Cryptography & Security Fundamentals
Encryption vs hashing
Symmetric encryption
Asymmetric encryption
Public/private keys
Digital signatures
Certificates
TLS/HTTPS
Password hashing
Salting
File integrity
Practical:
Generate hashes
Compare file hashes
Verify file integrity
Explore HTTPS certificates
06 Day 6 — Security Fundamentals Mini Project
Students perform:
Network Discovery → Traffic Analysis → System Identification → Basic Risk Identification
Deliverables:
Network diagram
Identified systems
Open services
Security observations
Basic risk report
07 Day 7 — Reconnaissance & OSINT
Passive vs active reconnaissance
OSINT fundamentals
Domain information
DNS information
Technology identification
Search-engine-based reconnaissance
Information gathering methodology
Practical: Reconnaissance against an authorized lab target.
08 Day 8 — Network Scanning & Enumeration
Host discovery
Ports and services
Basic Nmap
Service detection
OS detection
Understanding scan results
Enumeration concepts
Practical: Scan Metasploitable/CTF machines.
09 Day 9 — Vulnerability Assessment
Vulnerability vs exploit
CVE
CVSS
Vulnerability scanners
False positives
Risk prioritization
Vulnerability validation
Remediation
Practical: Scan a vulnerable VM and prepare a vulnerability report.
10 Day 10 — Web Application Security
HTTP requests/responses
Headers
Cookies
Sessions
Authentication
Authorization
Burp Suite
Browser DevTools
Practical: Intercept and inspect requests in OWASP Juice Shop/DVWA.
11 Day 11 — OWASP Top 10
Hands-on introduction to:
Broken Access Control
Cryptographic Failures
Injection
Security Misconfiguration
Vulnerable Components
Authentication Failures
SSRF
Security Logging/Monitoring
Practical: Identify vulnerabilities in controlled applications.
12 Day 12 — Web Security Assessment Project
Students perform:
Recon → Testing → Evidence Collection → Risk Rating → Remediation
Deliverable:
Web Application Security Assessment Report
13 Day 13 — Metasploit & Controlled Exploitation
Metasploit architecture
Modules
Exploit concepts
Payload concepts
Sessions
Auxiliary modules
Exploitation lifecycle
Practical: Use Metasploit only against intentionally vulnerable lab machines.
14 Day 14 — Password & Authentication Security
Password security
Password policies
Hashes
Salting
Authentication risks
Brute-force vs dictionary attacks
Credential security
MFA
Account lockout
Practical: Audit sample lab credentials/hashes and design a secure password policy.
15 Day 15 — Network Defense & Security Controls
Firewalls
IDS vs IPS
VPN
Network segmentation
Access control
Secure Wi-Fi concepts
Zero Trust
Security architecture
Practical: Configure firewall/security rules in the virtual lab.
16 Day 16 — Cloud Security I
Cloud Fundamentals
Cloud computing concepts
IaaS
PaaS
SaaS
Public/private/hybrid cloud
Shared Responsibility Model
Cloud attack surface
AWS Security
AWS IAM
Users
Groups
Roles
Policies
Authentication
Authorization
MFA
Practical: Create and review IAM configurations in a controlled AWS environment.
17 Day 17 — Cloud Security II
AWS Security Services & Controls
EC2 security
Security Groups
Network ACL concepts
S3 security
Encryption
CloudTrail
CloudWatch
Logging
Key management concepts
Secrets management
Least privilege
Cloud misconfiguration
Practical Cloud Security Lab
Excessive permissions
Insecure storage configuration
Network exposure
Missing logging
Weak security controls
Deliverable: Cloud Security Assessment Report.
18 Day 18 — Security Monitoring & SIEM
Security logs
Windows Event Logs
Linux logs
Authentication events
Indicators of Compromise
Suspicious activity
SIEM concepts
Alert triage
Threat intelligence basics
Practical: Investigate simulated security alerts.
19 Day 19 — Digital Forensics
Digital evidence
Evidence preservation
File metadata
Disk concepts
Memory concepts
Timeline analysis
Chain of custody
Practical: Analyze a provided forensic artifact/image using Autopsy or similar tooling.
20 Day 20 — Incident Response
Incident identification
Triage
Containment
Eradication
Recovery
Lessons learned
Incident documentation
Practical Scenario: Suspicious login → abnormal network activity → investigation → containment → recovery.
21 Day 21 — SOC Analyst Practical
SOC structure
Tier 1/2/3 analysts
Alert triage
IOC analysis
Log correlation
Incident classification
Threat intelligence
Escalation process
Practical: Investigate simulated SOC alerts and produce an incident report.
22 Day 22 — Cyber Security Governance, Risk & Compliance
Governance
Security policies
Security procedures
Security standards
Security controls
Acceptable Use Policy
Password Policy
Incident Response Policy
23 Risk Management
Asset identification
Threat identification
Vulnerability identification
Risk assessment
Risk treatment
Risk acceptance
Risk mitigation
Compliance & Standards
ISO 27001 overview
NIST Cybersecurity Framework
CIS Controls
GDPR awareness
PCI DSS overview
Data privacy
Audit fundamentals
Compliance vs security
Practical: Create a basic Security Risk Register + Security Policy.
24 Day 23 — Secure Coding & API Security
Secure SDLC
Input validation
Authentication
Authorization
API security
Secrets management
Common coding vulnerabilities
OWASP API Security concepts
Practical: Identify and fix vulnerabilities in a deliberately vulnerable application/API.
25 Day 25 — Professional Penetration Testing Methodology
Python fundamentals for security
Files and directories
Log processing
Regular expressions
JSON
Requests
API interaction
Automation concepts
Practical Projects
Log Analyzer
File Hash Checker
IP/Domain Checker
Security Report Generator
26 Day 25 — Professional Penetration Testing Methodology
Students learn the complete professional workflow: Scope → Recon → Scanning → Enumeration → Vulnerability Assessment → Controlled Validation → Evidence → Risk Rating → Reporting → Remediation
Practical Complete assessment of an authorized lab environment.
27 Day 26 — Web Application Security Assessment
Burp Suite
Browser DevTools
Nmap
OWASP methodology
Deliverable: Professional Web Application Security Report
28 Day 27 — Network Security Assessment
Network topology
Open services
Network traffic
Misconfigurations
Firewall controls
Vulnerabilities
Security risks
Deliverable: Network Security Assessment Report
29 Day 28 — SOC & Incident Response Simulation
Scenario
Suspicious login activity
Abnormal network traffic
Potential compromised account
Students must:
Analyze logs
Identify IOCs
Determine scope
Classify incident
Recommend containment
Document findings
Prepare incident report
Recommend preventive controls
30 Day 29 — Final Cyber Security Capstone
Cyber Security Assessment Project
Reconnaissance ↓ Scanning ↓ Vulnerability Assessment ↓ Web Security ↓ Cloud Security Review ↓ Log Analysis ↓ Risk Assessment ↓ Remediation
Final Deliverables
Security Assessment Report
Vulnerability Register
Risk Assessment
Evidence
Remediation Recommendations
Executive Summary
31 Day 30 — Final Presentation + Career Preparation
Project Presentation
Vulnerabilities discovered
Evidence
Risk rating
Business impact
Recommended fixes

Earn Your Certification

After completing the course, you will receive a professional certificate from Code IT, verified by industry leaders in Nepal.

Share your achievement with pride on LinkedIn.
Certificate

Course Mentors

Learn directly from industry experts with years of hands‑on experience

Badri Tamang

Badri Tamang

Certified Security Specialty

As a seasoned IT professional with expertise in Technical Support, Hardware & Network Troubleshooting, Basic SIEM & SOC knowledge, I have a proven track record of providing exceptional service to clients.

I excel in providing technical support to end-users, diagnosing and resolving hardware and software issues, and troubleshooting network connectivity problems. My knowledge of Basic SIEM & SOC has allowed me to effectively protect and defend networks against cyber attacks, and my preparation for N+/CEH has given me a deep understanding of network security concepts.

Throughout my career, I have successfully designed and implemented cybersecurity protocols to protect sensitive data and prevent cyber attacks. I have also demonstrated expertise in networking protocols, server administration, and cloud computing. My strong background in Information Systems has allowed me to develop and maintain efficient and effective systems that support business operations.

Overall, I'm a results-oriented professional with a passion for technology and a strong commitment to providing exceptional service to clients.

Singhadarbar Kathmandu 6+ Years of Experience
Get in Touch

Need More Information?

Our team will respond within a few hours

Why Enquire?

Payment plans & installment options
Certificate & accreditation details
Course level & suitability check
Flexible batch timings
Career guidance & job support

Join 100k+ successful graduates

We'll respond within 2-3 hours during business hours

Watch Demo Video

Cyber Security

Open on YouTube ↗