The best way to make the modules stick is to build something. These five projects take you from Nmap network scanning through a Python port scanner, hacking OWASP Juice Shop, a Wazuh SIEM home lab, and finally a safe malware analysis lab.
Each one is a code-along video, so you can pause, type it out yourself and adapt it to your own ideas. Pick the project that matches the module you've just finished and come back for the rest.
Always practise inside your own lab: use virtual machines you control, or deliberately vulnerable apps built for learning. Never scan or attack systems you don't own or have written permission to test.
Discover hosts, open ports and running services in your own lab network, and learn to read and document the scan output.
Use Python sockets to write your own TCP port scanner, then extend it with timeouts and threading, a hands-on drill for the scripting module.
Run the deliberately vulnerable Juice Shop locally and exploit common OWASP Top 10 flaws such as injection, broken access control and XSS.
Deploy a Wazuh server, enrol an endpoint, simulate attacks from a Kali machine and investigate the alerts they raise.
Build an isolated virtual machine sandbox with snapshots, then practise safe static analysis: hashes, strings and file inspection.