Pentesting 101: The Ultimate Hacking Guide Start To Finish (Udemy.com)
Pentest like a Pro. Hack like a Pro. This hacking course is created by an experienced hacker and business leader.
Created by: Experts with David Bombal
Last updated January 2023
Our take
Based on the ratings of 275 students, a sample of their written reviews and the syllabus, as the course stood in January 2023. No course pays to be reviewed.
Pentesting 101 is a 10-module walkthrough of penetration testing built by Wesley Thijs, hosted through David Bombal's platform. Across 196 lectures and roughly 7.8 hours of video, it covers network, web application, and API pentesting, plus the parts most courses skip: writing a report, handling clients, and picking a methodology. Each module ends with a capstone assignment, so students practice something closer to a real engagement than a string of isolated tool demos. It only asks for basic networking knowledge going in, despite the Intermediate label.
Reviewers mostly like the structure. Several call it beginner-friendly and say it explains the reasoning behind a test, not just the steps, and one reviewer says the assignments prepare you to work independently or with a team. The complaints cluster around delivery: a couple of one-star reviews say the first stretch is mostly slides read aloud with no live hacking, and other reviewers ask for more interactive quizzes, bundled lab materials, and fewer short, choppy videos that jump around between topics.
At 4.4 stars across 275 reviews, it holds up, though the content hasn't been refreshed since January 2023, so it's worth checking whether the lab tools still match current versions. Next to more hands-on courses in the Hacking category, this one leans toward process and documentation as much as exploitation. Good pick for someone who wants the full pentest workflow from planning to report, less so for someone who just wants to hack along with an instructor on screen.
Pros
- Capstone assignments in every module, not just isolated tool demos
- Covers network, web app, and API pentesting plus client handling and methodology
- Reviewers call it a solid, beginner-friendly start to a cybersecurity career
- Explains the reasoning behind each test, not just which buttons to click
Cons
- Some reviewers say the first half leans on slides read aloud with little live hacking
- No quizzes or coding exercises, and videos are split into short, choppy segments
- Last updated in January 2023, so some lab tooling may be behind current versions
If you want to know how to do a penetration test, regardless of the type of test it is this is what you need to get the project done properly!
Listed as Intermediate but only requires basic networking knowledge, so newcomers can follow along.
What you will learn
- Report, document and properly index pentests
- Handle clients and unexpected situations during/after testing
- Web application pentesting
- Network petesting
- API pentesting
Course content
22 sections · 196 lectures · 7.9 hours of video 105 articles
- 1000 - Introduction 1 free preview4 lectures · 1.5 hours
- 2001. Defining what a pentest is? 1 free preview4 lectures · 49 min
- 3Getting help1 lecture · 2 min
- 4001 - 2 The deliverables of pentesting5 lectures · 12 min
- 5001 - 3 ASSIGNMENT The deliverables of pentesting 1 free preview4 lectures · 1 min
- 6001 - 4 The pentest plan6 lectures · 9 min
- 7001 - 5 ASSIGNMENT Make a test plan for hackxpert.com2 lectures
- 8001 - 6 The pentesting report3 lectures · 7 min
- 9001 - 7 The debriefing2 lectures · 3 min
- 10001 - Extra's6 lectures · 16 min
- 1100x02 The different methodologies and how to pick one20 lectures · 59 min
- 1200x03 Network pentesting 1 free preview19 lectures · 35 min
- 13004.1 FUzzing 1 free preview4 lectures · 7 min
- 14004.2 burp suite3 lectures · 13 min
- 15004.3 CSRF6 lectures · 11 min
- 1600x04 Web app exploits17 lectures · 34 min
- 17005 Web exploits part 218 lectures · 45 min
- 18006. Methodologies20 lectures · 20 min
- 19007. Vulnerability scanners & tools15 lectures · 24 min
- 20008 The OWASP top 10's 1 free preview27 lectures · 27 min
- 2100x09 Pentesting checklists6 lectures
- 2200x10 Fully simulated pentest4 lectures · 4 min
Who it is for
The instructor says it suits
- Hackers wanting to get into pentesting
- Pentesters wanting to start a company
What you need before you start
- An understanding of basic networking concepts such as IP addresses and port numbers
How it compares
Against the other 523 rated Udemy courses in Hacking on CourseDuck:
- Rating4.4 out of 5higher than 33% of them
- Reviews275#359 of 524 by number of reviews
- Length7.8 hourslonger than 63% of them
- Last updatedJanuary 2023earlier than 69% of them
Course Description
Why you want to take this course
I am not one to keep my company secrets a secret, which kind of defeats the point of the word, but I strongly believe in sharing knowledge. That's why I have created a guide that I think comprehensively covers this whole process. Pentesting is an art form and I'd like to teach how to do it.
What is this course?
This course takes you through 10 modules, each having it's own objective with a capstone assignment that will guide you through network pen-testing, web, and even API pen-testing. I've created practical labs to guide you through the process so you are not just theoretically richer after completing this course.
Who am I?
Let's start with the obligated section about who I am first. My name is Wesley Thijs and i have been an instructor and public figure for about 4 years, garnering 100 000+ students in my time doing it. Recently, however, I wanted to expand my business and I included pen testing as a service we offer. This means we also sometimes get requests for hundreds of hours of testing and this is impossible to do alone. I manage a team of several highly skilled cybersecurity professionals I have been able to pick out over the years I have been training.
My team needed a standard way of testing and a standard education however so I created this plan to teach them how to pentest, how to handle clients, and everything involved in successfully completing an assignment from start to finish.
Instructor Details
- 4.4 Rating
275 Reviews
Experts with David Bombal
David Bombal, together with some of the best minds in the industry is offering courses on a wide range of topics including networking, programming and software development. Our team has decades of experience teaching students from all over the world.
Together we can do more!
David Bombal (CCIE #11023 Emeritus) passed his Cisco Certified Internetwork Expert Routing and Switching exam in January 2003 and is one of a small percentage of Cisco Engineers that pass their CCIE labs on their first attempt.
David qualified as a Cisco Certified Systems Instructor (CCSI #22787) many years ago! He has been training Cisco courses for over 15 years and has delivered instructor led courses in various countries around the world covering a wide range of Cisco topics from CCNA to CCIE.
He has also personally developed Cisco engineer utilities such as the VPN Config Generator, software, training materials, EBooks, videos and other products which are used throughout the world.
David has designed, implemented and managed networks ranging from single sites to those that span 50 countries.
More courses by Experts with David Bombal
Getting Started with Wireshark: The Ultimate Hands-On Course (2025)
4.8 (12,167 Reviews)
Provider: Udemy
Time: 4.4h
$109.99
Nmap for Ethical Hackers - The Ultimate Hands-On Course (2023)
4.7 (1,776 Reviews)
Provider: Udemy
Time: 3.5h
$74.99
Learn OpenSSL with a real world cheatsheet (2023)
4.6 (1,552 Reviews)
Provider: Udemy
Time: 3.7h
$79.99
OSPF for the Real World - From Zero to Hero (2023)
4.8 (1,173 Reviews)
Provider: Udemy
Time: 6.2h
$84.99
Mastering SQL Injection - The Ultimate Hands-On Course (2023)
4.7 (692 Reviews)
Provider: Udemy
Time: 9.7h
$79.99
More Hacking courses
Getting Started with Wireshark: The Ultimate Hands-On Course (2025)
4.8 (12,167 Reviews)
Provider: Udemy
Time: 4.4h
$109.99
The Ultimate Dark Web, Anonymity, Privacy & Security Course (2025)
4.8 (9,329 Reviews)
Provider: Udemy
Time: 10.3h
$27.99
Computer Basics for Beginners: Understanding Computer Basics (2025)
4.8 (4,524 Reviews)
Provider: Udemy
Time: 5.8h
$14.99
Ultimate F5 LTM Training from Beginner to Expert 2026
4.8 (1,927 Reviews)
Provider: Udemy
Time: 13.5h
$84.99
IP Addressing and Subnetting - Hands-on Learning Approach (2020)
4.8 (1,522 Reviews)
Provider: Udemy
Time: 4.2h
$15.99
Cisco BGP Masterclass for Enterprise Network Engineers (2026)
4.8 (1,369 Reviews)
Provider: Udemy
Time: 16.4h
$11.99
Reviews
By MOINE Arnaud on 2/16/2026
Experience with Rat XSS is very pleasant. Many mind, many real explanations. Some ideas in my mind were validated here when I watch this course because I already know (nice to hear a review for these classical themes). And new ideas, very great to improve mind and understand step by step.
By Aman Thapa on 7/15/2025
Thanks, xssrat! Pentesting 101 made hacking way easier to understand and actually fun to learn. Perfect for beginners who want to get their hands dirty without the headache. Highly recommend!
By Simon Benkert on 2/20/2025
Alle Materialen Gebündelt Pro Abschnitt in einem Archiv gesamt anbieten. Auch würde ich mehr interation mit einbauen (z.B. Quiz) und auch Übungsaufgaben stellen Außerdem das hin und her springen mit so kurzen Videos kommt nicht so gut rüber
By Shirshak Roy on 9/7/2024
Good Content just updating the Labs and answers to the questions asked in Udemy platform helps in a lot of ways to save time.
By Jonas Bird on 6/19/2023
I have not gone that far with the course. So far the material is very relevant , and covers areas that don't get enough attention. The rating will probably be higher once I have gone past the intro and first topic.
By Keith Byers on 11/20/2022
If you want to know how to do a penetration test, regardless of the type of test it is this is what you need to get the project done properly! You learn not just about parts of a test, but you learn the reasons why you are doing the test and the different methodologies that best suit each type of testing. There are many assignments to help you learn what you need to learn to be a professional. Whether you work with the XSSRat, for another company, or choose to be an independant.
By Jerry Huey on 10/19/2022
Just watching module#3, I have learned a whole lot. Wesley clearly communicates and demonstrates in real time what and why this pentest can make a busines site very vurnerable.
By Tunmise Isaiah Fagoroye on 10/11/2022
Superb Course Uncle RAT. I would Rate Double If Possible. Lots of love. Thanks For all you do.
By Rodolpho Barbosa on 10/10/2022
Amazing learning path, showing techniques, presentation tips, and how to get a possible customer.
By Jorge David Quezada Calel on 10/2/2022
Information was great, but the order of it and comments made the information confusing in some cases.
Quality Score
No CourseDuck member has rated this course yet. Taken it? Give each part a thumbs up or down.
Overall Score : 88 / 100











