The best way to make the modules stick is to build something. These five projects take you from a safe home hacking lab through a Python port scanner, a vulnerable web app, scanning and exploiting a target with Nmap and Metasploit, and finally writing a pentest report.
Each one is a follow-along video, so you can pause, type it out yourself and adapt it to your own ideas. Only practise on your own lab machines or deliberately vulnerable apps, and never on systems you don't have written permission to test.
Set up VirtualBox, Kali Linux, and deliberately vulnerable machines so you have a safe place to practise, a good fit after the first three modules.
Code your own port scanner as part of a hacking-themed coding challenge, and put your scripting skills from module 04 to work.
Work through a deliberately vulnerable web app and practise finding and exploiting common web flaws like injection, XSS, and broken access control.
Follow a hands-on tutorial that scans a vulnerable target with Nmap and exploits it with Metasploit inside your own lab.
A hands-on lab on reading real-world pentest reports and building your own, so you can present findings clearly.