Learners who know the basics of web security and networks (for example the Beginner programme) and want hands-on offensive and defensive skills on systems they own.
Intermediate level
Cybersecurity
Test, Harden and Detect
Move from knowing the vulnerabilities to working with them: map the attack surface of a practice target, exploit and fix deeper web flaws, use cryptography correctly, harden systems, and write detections that catch real attacks, finishing with a security assessment reviewed by the NIBVEDA team.
- 40hours of work
- 19parts
- Reviewedcapstone
- Lifetimeaccess
- Reconnaissance
- Web penetration testing
- Cryptography in practice
- System hardening
- Detection engineering
- Cloud and container security
- Security reporting
At a glance
Comfortable with the Linux command line, HTTP and a programming language. Docker or a virtual machine for practice targets (OWASP Juice Shop, DVWA or similar) and a code editor. The Beginner programme or equivalent experience is recommended. All practice is on systems you own or that are built for testing.
Pass the quizzes and labs, then submit a capstone project. The NIBVEDA team reviews it and either accepts it or sends it back with comments you can act on.
What you will be able to do
- 01Map an attack surface and test it methodically within a stated scope
- 02Exploit and fix server-side request forgery, broken object access, CSRF and insecure deserialisation in a practice target
- 03Use hashing, encryption, signatures and tokens correctly and spot common misuse
- 04Find and fix privilege-escalation misconfigurations on a practice machine
- 05Write detection rules and investigate attacks from logs
- 06Secure cloud storage, identities and container pipelines at a basic level
Curriculum 40 hours in 19 parts
Select a kind to highlight its parts.
Stage 1A methodical test of a practice application7 parts · 11 h
- 1Scope, reconnaissance and the attack surfaceLesson · Short, focused reading with questions to check yourself.1 hFree
- 2Web attacks in depth: SSRF, IDOR, CSRF and deserialisationLesson · Short, focused reading with questions to check yourself.1 h
- 3Find, exploit and fix SSRF and IDORWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 4Cryptography in practiceLesson · Short, focused reading with questions to check yourself.1 h
- 5Hashing, encryption, signatures and token pitfallsWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 6Check yourself: web attacks and cryptographyQuiz · Twelve questions, marked at once, with the reason behind each answer.1 h
- 7A methodical test of a practice applicationLab · Hands-on work. Many labs are checked automatically against what must exist.3 h
Stage 2Build a mini detection pipeline6 parts · 10 h
- 8System hardening and privilege escalationLesson · Short, focused reading with questions to check yourself.1 h
- 9Find and fix escalation paths on a lab machineWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 10Logging and detection engineeringLesson · Short, focused reading with questions to check yourself.1 h
- 11Write detections and investigate with logsWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 12Check yourself: hardening and detectionQuiz · Twelve questions, marked at once, with the reason behind each answer.1 h
- 13Build a mini detection pipelineLab · Hands-on work. Many labs are checked automatically against what must exist.3 h
Stage 3Secure a small cloud environment4 parts · 8 h
- 14Cloud misconfigurations and identityWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 15Secure containers and pipelinesWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 16Check yourself: cloud and container securityQuiz · Twelve questions, marked at once, with the reason behind each answer.1 h
- 17Secure a small cloud environmentLab · Hands-on work. Many labs are checked automatically against what must exist.3 h
Stage 4A purple-team exercise1 part · 3 h
- 18A purple-team exerciseLab · Hands-on work. Many labs are checked automatically against what must exist.3 h
FinishCapstone project1 part · 8 h
- 19A full security assessmentCapstone · A full project for your portfolio.8 h
What you take away
An internship certificate with your skills on it.
Made for you automatically when you finish the last part, it names the internship programme, the level and the 40 hours, lists what you showed, and carries a number and a QR code. Anyone can check it on the NIBVEDA verification page, and it shows as withdrawn there if it is ever revoked.
- Proof you completed all 40 hours of this internship programme
- An Internship badge for your profile, CV or portfolio
- Not a job, a stipend or an academic degree, and it says so
Keep building.
3 programmes in this track, from beginner to expert. Buy the learning path and save 15%.
Learn the core ideas of security, find and fix the most common web vulnerabilities in a safe practice application, and write a real security report.
- Threat modelling
- OWASP Top 10
- Authentication
Think like the owner of a security programme: model threats at scale with ATT&CK, design identity and architecture that resist attack, investigate incidents with forensic evidence, run vulnerability and testing programmes, and govern risk, finishing with a security programme for an organisation reviewed by the NIBVEDA team.
- Threat modelling
- Security architecture
- Digital forensics
See all 3 programmes in Cybersecurity Take the placement test
Quick answers.
The policies have the full detail.
Is this a real internship?
It is a virtual internship programme: a structured, self-paced course built around a real project, with checked assessments and a certificate. It is not employment, it does not carry a stipend and it is not an academic or AICTE-approved qualification. What it gives you is verified, project-based evidence of skills.
How does self-paced work?
You start when you like and move at your own speed. Each part unlocks when you finish the one before it. There are no live classes and no deadlines. Your access is shown on each programme page.
How is my work checked?
Quizzes are marked as soon as you submit them. Labs use a tick-list of tasks. Intermediate and Expert programmes finish with a capstone that the NIBVEDA team reviews and either accepts or sends back with comments.
Can I get a refund?
Please read the refund policy before you buy. It explains when a refund is possible.
Ready to start?
Rs. 824.82 including GST. Lifetime access. Read the first lesson free before you decide.