In the last year, the demand for cybersecurity professionals has increased significantly, becoming one of the best-paid profiles in Barcelona with an average salary of €64.100, according to the Digital Talent Overview 2026 of the Mobile World Capital of Barcelona.

TecnoCampus offers a unique opportunity to specialize in cybersecurity with the online course Intrusion test (IFCT125), training especially aimed at people who have the subsidized course certification Implementation and management of cybersecurity (IFCT123).

Participating in the course will facilitate the acquisition of practical skills to manage both the procedures and the tools and techniques for attacking computer systems.

FUNDED BY:

Who is it aimed at?

• Mainly to active workers who contribute to the General Regime or Self-Employed (not Public Administration)

Access requirements

At least one of the following requirements must be met:

• Degree or equivalent
• Postgraduate degree (Master's degree) or equivalent
• Higher Technical Degree (Higher Vocational Training) or equivalent of the professional field of Computer Science and Communications
• Level 3 certificate of professionalism from the professional family of Computer Science and Communications
• Accredit professional experience of at least 2 years in tasks related to the management of networks or computer systems.

It is recommended to have basic knowledge of:

• Computer application programming
• Functionality testing techniques for IT processes and functions
• Authentication and access authorization processes for users and services
• Writing data summaries

IMPORTANT: In case of not having an academic qualification and/or not being able to accredit the minimum professional experience, they will demonstrate sufficient knowledge and skills through a practical competency test at a level consisting of writing a small computer program and planning the steps to follow to validate its correct operation; knowing the techniques of user and server authentication, and the mechanisms of accreditation and granting of access rights. Writing a short report of results, summarizing some data.

The training content is divided into the following modules:

• Module 1: Penetration test and typology of tools (8h) Select the different strategies and operation of the tools available in the execution of an intrusion test.
• Module 2: Penetration testing methodologies (20h) Compare the techniques and practical recommendations of relevant international organizations for carrying out penetration tests.
• Module 3: Tools for executing penetration tests (18h) Select tools and procedures for exploiting vulnerabilities in applications and software platforms, both to prepare intrusion (penetration) tests and to detect the efficiency of existing protection mechanisms.
• Module 4: Results and reports (6h) Prepare reports based on the analyses carried out, clearly specifying the results and recommendations obtained.
• Module 5: Planning and executing a penetration test (8h) Apply techniques and tools in the planning and development of a real penetration test.

Module 1. Penetration testing and typology of tools

This 8-hour module aims to select the different strategies and operation of the tools available in the execution of an intrusion test. Specifically, in this module the following knowledge will be acquired:

Distinction between penetration testing and auditing:

• Goals
• Differentiating elements

Classification of the typology according to the information we have:

• White box
• Black box
• Gray box

Classification of the typology based on the services to be tested:

• Network Penetration Testing
• Wireless network penetration testing
• Systems penetration testing
• Web application penetration testing
• Social engineering penetration test

Module 2. Penetration testing methodologies

This 20-hour module aims to compare the techniques and practical recommendations of relevant international organizations for conducting penetration tests. Specifically, in this module the following knowledge will be acquired:

Description of the phases of a penetration test:

• Planning the test
• Test analysis
• Reports with test results

Definition of concepts:

• Scope of the test
• Attack vector

OSSTMM classification (Open Source Security Testing Methodology Manual):

• Physical security
• Process security
• Security in Internet technologies
• Security in communications
• Wireless security
• Information security
• RAV (Risk assessment value)

OWASP (Open Web Applications Security Project) classification:

• Configuration and deployment management testing
• Identity management tests
• Authentication test
• Authorization test
• Session management test
• Input validation test
• Error handling test
• Weak cryptography test
• Business logic tests
• Client-side testing
• API testing

Differentiation between OSSTMM and OWASP

Module 3: Tools for executing penetration tests

This 18-hour module aims to select the tools and procedures for exploiting vulnerabilities in applications and software platforms, both to prepare intrusion (penetration) tests and to detect the efficiency of existing protection mechanisms. Specifically, in this module the following knowledge will be acquired:

Classification of generic tools:

• Burp Suite
• OpenVAS
• Nessus
• Metasploit
• Kali Linux

 Classification of network tools:

• Nmap
• Aircrack-ng
• Wireshark
• zmap
• Ettercap

 Classification of password theft tools:

• Hydra
• John the Ripper
• Hashcat
   

Module 4: Results and reports

This 6-hour module aims to prepare reports based on the analyses carried out, clearly specifying the results and recommendations obtained. Specifically, in this module the following knowledge will be acquired:

 Description of documentation support tools:

• Dradis
• F

Report preparation:

• Evaluation and analysis of results
• Specification of tests performed
• Technical results
• Recommendations

Definition of record retention policies:

• Granularity and durability of recorded data depending on sources and relevance
• Regulatory and contractual requirements
   

Module 5: Planning and executing a penetration test

This 8-hour module aims to apply techniques and tools in the planning and development of a real penetration test. Specifically, in this module the following knowledge will be acquired:

 Selection of the most appropriate methodology to carry out a penetration test:

• Define scope
• Determine attack vectors
• Planning to carry it out

Selection of the type of penetration test to determine the exploitability of vulnerabilities:

• Determine the test based on scope
• Running the selected test
• Obtaining results

 Preparation of the penetration test report:

• Collection and organization of information
• Report writing