Yes. You can start learning on Learnr for free. Learnr Pro unlocks higher daily limits and extra features.

Learn Ethical Hacking

Think like an attacker, but only on systems you have permission to test.

Free to start. Built from a single prompt. No credit card.

Ethical hacking, also called penetration testing, means probing systems for weaknesses with the owner's explicit, written permission so the holes can be fixed before criminals find them. Testers follow a method: reconnaissance, scanning, exploitation, then a clear report with fixes. The craft rests on fundamentals like networking, Linux, web technologies and scripting, practiced in legal environments such as intentionally vulnerable labs and capture the flag (CTF) competitions. Testing any system without authorization is a crime in most countries. Learnr builds a personalized ethical hacking course from your prompt and teaches the concepts in short, interactive lessons.

How to learn Ethical Hacking, step by step

Learn the legal line before touching a tool. Only test systems you own or have written permission to test, with an agreed scope. Laws such as the US Computer Fraud and Abuse Act make unauthorized scanning and access illegal, even out of curiosity. Bug bounty programs publish exactly which targets are allowed.
Build a safe home lab. Install VirtualBox or VMware, then run Kali Linux alongside deliberately vulnerable machines like Metasploitable or DVWA on an isolated virtual network. Everything you attack lives on your own computer, so you can break things freely and legally.
Get fluent in networking and Linux. Learn TCP versus UDP, the three-way handshake, common ports like 22, 80 and 443, DNS and HTTP. On the command line, practice navigating, permissions, grep and pipes. OverTheWire Bandit is a free wargame that teaches Linux through small challenges.
Practice recon and scanning on lab targets. Use Nmap to discover hosts, open ports and service versions on your lab machines, and watch the packets in Wireshark to see what each scan sends. Learn to read results and look up known vulnerabilities for a version.
Study web vulnerabilities hands on. Work through SQL injection, cross-site scripting, broken access control and SSRF using PortSwigger's free Web Security Academy labs and Burp Suite Community Edition. Understand why each flaw happens in code, not just how to trigger it.
Play CTFs and guided platforms. Try picoCTF for beginners, then TryHackMe rooms and Hack The Box machines, all built to be attacked legally. Write up every solved box in your own words; Learnr lessons with daily streaks help keep protocols and vulnerability types fresh.

What you'll learn

Explain the legal scope, permission and rules of engagement behind every test
Map a lab network and its services with Nmap and Wireshark
Find and explain common web flaws from the OWASP Top 10
Solve beginner CTF challenges in Linux, web and cryptography categories
Write a clear findings report with risk ratings and fixes

What's inside your Ethical Hacking course

A sample path Learnr builds for Ethical Hacking. Your real course adapts to your goal and level.

1. Law, ethics, authorization and rules of engagement
2. Networking, ports and protocols for security work
3. Linux command line and a Kali Linux lab setup
4. Reconnaissance and scanning with Nmap
5. Web application vulnerabilities and Burp Suite
6. Privilege escalation, CTF practice and report writing

How long does it take to learn Ethical Hacking?

With some IT background, expect 3 to 6 months at 8 to 10 hours a week to solve easy CTF boxes and understand common web flaws. Starting from zero networking knowledge adds several months, and reaching the level of a junior penetration tester often takes a year or more of steady lab practice.

What you need before you start

Comfort using a computer and willingness to learn networking and the Linux command line. A machine that can run a couple of virtual machines helps. Basic Python or Bash scripting becomes useful within the first few months.

Common mistakes to avoid

Scanning or attacking a school, employer or random website to practice. That is illegal without written permission; stick to your own lab, CTFs and in-scope bug bounty targets.
Running Metasploit modules and automated tools without understanding the underlying flaw, which leaves you stuck the moment a tool fails.
Skipping networking and Linux basics to jump straight to exploits. Most CTF progress comes from fundamentals like reading HTTP requests and file permissions.

How Learnr builds your course

Type your topic

Tell Learnr you want to learn Ethical Hacking, or get as specific as you like.

Get a personalized course

Learnr instantly builds a full Ethical Hacking course tailored to your goal and skill level.

Learn and level up

Move through bite-sized lessons and interactive practice, earning XP and keeping your streak.

Ethical Hacking questions, answered

Is learning ethical hacking legal?

Learning it is legal, and so is practicing on your own lab, CTF platforms and programs that invite testing. Accessing or scanning systems without the owner's permission is illegal in most places, regardless of intent. If in doubt, do not test.

Which certifications do ethical hackers get?

Common ones include CompTIA Security+ for fundamentals, CompTIA PenTest+, EC-Council CEH and the hands-on OSCP from OffSec. Learnr is not affiliated with any of them, but it can tailor lessons to the topics an exam covers.

Do I need to know programming?

Not on day one, but scripting in Python or Bash soon matters for automating tasks and reading exploit code. Understanding how web apps are built also makes their flaws far easier to spot.