Ethical Hacking & Penetration Testing
Linux Security
FHS, permissions, sudo, SSH, services, logs, and host hardening — lab VMs only.
Eight practical Linux Security labs on isolated Ubuntu and Kali VMs: architecture and FHS, chmod/chown/umask and passwd/shadow, SUID/SGID/sticky audit framing, sudoers least privilege, processes/systemd/listening ports, sshd hardening, auth.log/journalctl failed-login investigation, and a firewall/patch/MAC/FIM hardening report. Deep privilege-escalation exploit paths and full LinPEAS-style enumeration belong in the Linux Privilege Escalation course — not here.
- Level
- Intermediate
- Duration
- 4–6 weeks
- Modules
- 4 modules · 8 lessons
- Learning method
- Lessons + labs
What you will learn
- Navigate FHS and explain root vs unprivileged user boundaries
- Apply chmod/chown/umask and describe passwd vs shadow
- Audit unexpected SUID/SGID/sticky findings without full privesc exploit chains
- Write least-privilege sudoers entries with visudo
- Map processes, systemd units, and listening ports to reduce attack surface
- Harden sshd_config for keys and restricted root login
- Investigate failed logins with auth.log and journalctl
- Produce a host hardening checklist covering firewall, patches, MAC, and FIM
Course curriculum
Expand each module for lessons, progress, and labs assigned to that module — not a flat topic dump.
Module 1
Architecture and file permissions
Linux layout, FHS, root vs user, and classic DAC permissions.
0/2 lessons
Module 1
Architecture and file permissions
Linux layout, FHS, root vs user, and classic DAC permissions.
0/2 lessons
Lessons
- 1. Linux Architecture and FHSpreview~20 min
- 2. chmod, chown, umask, passwd and shadow~20 min
Enrol to unlock full lessons and track module progress.
Module 2
Special bits and sudo
SUID/SGID/sticky audit framing and least-privilege sudoers.
0/2 lessons
Module 2
Special bits and sudo
SUID/SGID/sticky audit framing and least-privilege sudoers.
0/2 lessons
Lessons
- 1. SUID, SGID and Sticky Bit Audit~20 min
- 2. sudoers and visudo Least Privilege~20 min
Enrol to unlock full lessons and track module progress.
Module 3
Services and remote access
Process/systemd/port attack surface and SSH hardening.
0/2 lessons
Module 3
Services and remote access
Process/systemd/port attack surface and SSH hardening.
0/2 lessons
Lessons
- 1. Processes, systemd and Listening Ports~20 min
- 2. sshd_config Keys and Root Restrictions~20 min
Enrol to unlock full lessons and track module progress.
Module 4
Logs and hardening report
Failed-login investigation and layered host hardening evidence.
0/2 lessons
Module 4
Logs and hardening report
Failed-login investigation and layered host hardening evidence.
0/2 lessons
Lessons
- 1. auth.log and journalctl Investigation~20 min
- 2. Firewall, Patch, MAC and FIM Report~20 min
Enrol to unlock full lessons and track module progress.
Inside this course
Labs · Quizzes · Certificate
Labs below are curated for this syllabus (shared engine, course-specific assignments). They unlock with enrol; quizzes match course topics; finish ≈90%+ to claim a CYNARKS Academy certificate.
Course labs
8 assigned labs · free with this course enrol
- Linux Architecture & FHSUnlock via course or plan
- Permissions: chmod, chown & umaskUnlock via course or plan
- SUID, SGID & Sticky Bit AuditUnlock via course or plan
- sudoers Least PrivilegeUnlock via course or plan
- Processes, systemd & Listening PortsUnlock via course or plan
- SSH Hardening BasicsUnlock via course or plan
- auth.log & Failed Login HuntUnlock via course or plan
- Host Hardening ChecklistUnlock via course or plan
Track quiz
356 questions matched to this course topics
Knowledge checks for this track only — not a separate global quiz menu.
Start track quizCYNARKS certificate
Educational completion certificate · verify by ID
Your progress: 0% · enrol to unlock claim
Enrol in this course first.