How to Learn Ethical Hacking from Scratch: Best Programming Language and Courses to Boost Your Hacking Skills

Cyber security is a fast-growing field. Companies need security professionals to help protect against data breaches, a severe threat across industries. In 2024, the global average cost of a data breach reached $4.88 million, according to IBM.¹ This, fortunately, can be mitigated if you learn ethical hacking skills.¹

Ethical hackers ensure that companies have impenetrable and secure systems. They use hacking tools to prepare against network vulnerabilities and powerful attacks. As more companies adopt better security solutions, learning ethical hacking can put you in a good place in terms of career prospects.

What Is Ethical Hacking?

If you’re wondering “what is ethical hacking?” know that it is a very valuable form of cyber security. It is also commonly known as white hat hacking. A certified ethical hacker helps companies discover the weak points in their system and resolve them so malicious hackers can’t use malware to steal money or information. Ethical hacking is entirely legal and usually well paid.

The Best Code to Learn for Ethical Hacking

Some of the best programming languages to learn for ethical hacking are HTML, PHP, Python, SQL, and JavaScript. Ethical hackers must have extensive knowledge of these programming languages to effectively protect against systems threats. In modern roles, Bash and PowerShell are also foundational for automation and post-exploitation on Linux/macOS and Windows environments, and languages like Go and Rust are increasingly used to build performant security tooling.² ³

You will also need to know about networking, databases, and operating systems like Windows, macOS, and Linux. You will need to think like a hacker while learning about web and systems hacking before you can begin a career in information security.

Also, note that some US federal roles that require higher-level clearances (e.g., positions at intelligence agencies) may include a polygraph as part of the security-clearance process; this is not universal across all ethical hacking jobs.⁴ ⁵

What Is Ethical Hacking Used For?

Before discussing the possible uses of ethical hacking, let’s look at the effect a non-ethical hacker can have on a company. If an organization does not have a cyber security plan to defend against malware and cyberattacks, a malicious hacker can enter the system and do one of three things:

• Unauthorized modification: A malicious hacker can modify systems, allowing them to steal information, cause devices to crash, disrupt services and apps, and stop essential software updates.
• Unauthorized deletion: A malicious hacker can remove data files that could be of great importance.
• Unauthorized access: A malicious hacker can gain access to unauthorized data and acquire valuable information that can be sold illegally.

Now that we know what a hacker does, we can better understand what an ethical hacker does. An ethical hacker is hired to stop other hackers from accessing a company’s private data. The process behind ethical hacking is:

1. Identify malware or threat
2. Analyze and evaluate
3. Solve the issue

Types of Hacking

There are several types of ethical hacking and non-ethical hacking. Generally, we use different colors to describe the morality of their work. Below are the three main types of hackers and what they each do.

White Hat Hackers

White hats are ethical hackers. They do not have any malicious intent. Instead, they aim to root out the weaknesses in a computer system or network. When you learn white hat hacking skills, you can explore roles such as security analysts, penetration testers, and security engineers.

Black Hat Hackers

Black hat hackers are generally defined as cyber criminals with malicious intent. There is no such thing as black hat ethical hacking. They aim to steal corporate data, violate privacy regulations, damage computer systems, and block network communication either for personal gain or out of malice.

Gray Hat Hackers

As the color suggests, these hackers are in a moral gray area. People doing gray hat ethical hacking may engage in a mixture of the activities described in the two categories above. For example, they may highlight security weaknesses within a system and contact the owners to demand payment for having highlighted a flaw in their security systems.

There are also several subcategories of hackers such as hacktivists. A hacktivist will compromise a system to draw attention to a social, religious, ideological, or political message.

Ethical Hacking Career Outlook

An ethical hacking career has a positive outlook. The Bureau of Labor Statistics projects employment for information security analysts—roles that include penetration testing and related work—to grow 29% from 2024 to 2034, much faster than average. The median annual wage for information security analysts was $124,910 in May 2024.⁶ This makes cyber security one of the highest-paying tech career paths with strong demand.⁶ CareerOneStop also profiles the role with current wage and outlook data you can filter by state.⁷

An ethical hacker career path begins with skills building which can be achieved through a four-year computer science program or a career-focused cyber security bootcamp. You can then move on to entry-level positions such as security analysts, security software developers, or security administrators.

As you gain more experience with the practical applications of ethical hacking concepts, security vulnerabilities, and network hacking, you can apply for a Certified Ethical Hacker (CEH) certification by the EC-Council. This further demonstrates your cyber security proficiency and boosts your resume. The CEH knowledge exam is 125 questions in 4 hours; eligibility is via official training or by documenting at least two years of relevant experience and meeting EC-Council’s application requirements.⁸ ⁹

Where to Learn Ethical Hacking

Ethical hackers help companies assess risks, mitigate threats, and protect security systems.

This section will provide more information on where to learn ethical hacking. There are two main avenues to becoming an ethical hacker. First, there is the traditional route of getting a bachelor’s degree in information technology from a four-year university. A degree in computer engineering or computer science would also allow you to pursue this career.

The other route is to take online ethical hacking courses and obtain other certifications relevant to ethical hacking. You can attend a coding bootcamp or online course to learn the programming languages used in hacking. This can be a more challenging route, but it is also much cheaper than college.

Ethical Hacking: How Long Does It Take to Learn?

How long it takes to learn hacking depends on the individual and their ability to learn programming and other related skills. It can take anywhere between 18 months to six years to fully develop your ethical hacking skills.

If you are starting with no relevant hacking or coding skills, it will likely take you longer. However, if you already know how to code, you can complete the CEH online training and test scheduling quickly. The four-hour CEH exam assesses domains like cloud and IoT, malware analysis, and exploit technologies.⁸

How to Learn Ethical Hacking: Step-by-Step

This step-by-step guide will show you how to learn ethical hacking skills. The process, however, may look different to different people depending on your background and existing skillsets. Beginners can benefit from this guide as we explain some of the best ways to learn ethical hacking in 10 simple steps.

Step 1: Kali Linux

The first step is to learn Linux programming, commands, and scripting. Employers commonly use Kali Linux for penetration testing, and there are plenty of great courses you can take to learn Linux properly.¹⁰

Step 2: Other Programming Languages

To fully learn ethical hacking, it is also essential to learn other coding languages. These include HTML, JavaScript, Python, C/C++, and PHP, among others. Add shell scripting (Bash) and PowerShell for automation and post-exploitation, plus familiarity with SQL for web application testing.² ³

Step 3: Security Fundamentals

Learning ethical hacking will not be complete without a deep understanding of security fundamentals. You must be able to understand the components of a secure system, essential protocols and procedures, and security solutions to defend the network from all types of attacks.⁶

Step 4: Learn How to Leave No Trace

Learning ethical hacking also involves being good at keeping anonymity. When doing penetration testing, for example, you must know how to bypass and test controls (with authorization) and understand logging/monitoring so your assessments don’t disrupt business operations.

Step 5: Get Familiar With Cryptography

Cryptography is crucial to building a solid security system. To achieve secure communication, you can use cryptography to protect, maintain, and authenticate data.

"Career Karma entered my life when I needed it most and quickly helped me match with a bootcamp. Two months after graduating, I found my dream job that aligned with my values and goals in life!"

Venus, Software Engineer at Rockbot

Find Your Bootcamp Match

Step 6: Network

Networking is vital in cyber security and IT in general, as everything runs on a network. Learning how to navigate and protect a network is critical background knowledge for hacking.

Step 7: Ethical Hacking Certification

The next step is to take the CEH course and exam, or pursue an equivalent penetration testing pathway like CompTIA PenTest+.⁸ ¹¹

Step 8: Offensive Security Certified Professional

This is a more high-level certification for advanced students that involves a grueling exam. The OSCP exam is a 24-hour hands-on assessment and is highly regarded.¹²

Step 9: Work in Information Security

Technically, you can choose to do this step earlier while you study. Just remember that gaining work experience is a crucial way to test your knowledge and use your problem-solving skills.

Step 10: Attend Events and Meet Hackers

You can learn more about ethical hacking through industry events such as seminars, gatherings, or meetups. Not only do you get the opportunity to build professional connections, but you also get to learn ethical hacking from various perspectives and expand your cyber security knowledge.

How to Gain Experience as an Ethical Hacker

If you’re wondering how to practice ethical hacking, this section offers three suggestions that can help you reinforce your skills and get better at understanding the attack surface. Let’s look at each of the options below.

Participate in Penetration Testing Exercises

There are several vulnerable websites that novice ethical hackers can use to practice penetration testing. They include Hack This Site and Google Gruyere.¹³ ¹⁴

Offer Your Service as a Freelancer

A freelance career is a viable option for ethical hackers. While some prefer being a part of a larger security team, others may enjoy working on their own. This affords them the flexibility to work on projects that they directly choose.

Sign up for Hands-on Courses or Job-focused Programs

There are a lot of ways you can gain experience as a beginner ethical hacker. One of the best ways is to enroll in a cyber security program that incorporates projects, practical exercises, and hackathons. Some projects can also be included in your portfolio in place of experience as they demonstrate successful ethical hacking.

The Best Ethical Hacking Courses and Training

There are many ways to learn ethical hacking including in-person classes, online courses, and free courses. Browse our list below to discover options for beginner, intermediate, and advanced students.

In-Person Ethical Hacking Classes

Below are a few in-person ethical hacker classes that students may want to pursue. Due to the pandemic, fewer courses are offering this type of learning experience. However, there are still a few options for those of you who prefer classroom education.

General Assembly

• Courses: Security-related and developer courses; offerings and locations vary by market and schedule
• Location: Varies
• Prerequisites: Varies
• Price: Varies

General Assembly’s catalog changes over time, with cybersecurity and software courses offered in different cities and online; check the current catalog for active security offerings.¹⁵

American University

• Courses: Cybersecurity Professional (hands-on training aligned to certifications; delivered with ThriveDX)
• Location: Washington, DC (with online options)
• Prerequisites: Introductory course and intermediate programming knowledge
• Price: $13,000

American University runs a Cybersecurity Professional program with labs designed to prepare learners for certifications such as CEH and OSCP.¹⁶

TrainACE – Academy of Computer Education

• Courses: CEH – Certified Ethical Hacker Training and Certification
• Location: Greenbelt, MD and online
• Prerequisites: Knowledge of programming, security, and networking fundamentals
• Price: $2,995

TrainACE offers a dedicated CEH training course covering threat vectors, hacking concepts, controls, and laws to prepare for the CEH exam.¹⁷

Online Ethical Hacking Courses

Ethical hacking online courses are currently the most popular route to becoming an ethical hacker. This option is a preferred choice by many because all lessons can be done remotely, saving them energy, time, and money. Below are some great online study options to learn ethical hacking.

EC – Council

• Courses: Certified Ethical Hacker (CEH) training, CEH Master (knowledge + practical), Certified Network Defender, Licensed Penetration Tester (L|PT) Master, Certified Threat Intelligence Analyst (CTIA)
• Prerequisites: Varies
• Price: Varies 

EC-Council is the official provider of the Certified Ethical Hacker (CEH) program and related credentials. Its online catalog includes CEH, CEH Master, Licensed Penetration Tester (L|PT), and Certified Network Defender. Students benefit from live classes, labs, and exam vouchers. EC-Council’s certifications are recognized worldwide, making it a direct path to demonstrating ethical hacking expertise.⁸

CompTIA

• Courses: Linux+, Security+, Network+, PenTest+
• Time: Varies
• Prerequisites: Vary
• Price: Varies
• CompTIA’s certification track is widely used by beginners and professionals alike. Students can progress from foundational credentials like Linux+, Security+, and Network+ to PenTest+, which emphasizes vulnerability assessment and penetration testing. Exams feature both multiple-choice and performance-based questions, simulating real-world testing. Because CompTIA is vendor-neutral, its certifications are highly portable across industries.¹¹

Free Ethical Hacking Courses

Below are a few free ethical hacking courses if you want to try out ethical hacking or gain some background knowledge without having to make any investment. These are great for beginners and intermediate-level hackers.

LinkedIn Learning

• Become an Ethical Hacker
• Prerequisites: Vary
• Price: First month free

The Become an Ethical Hacker path is a multi-course series covering reconnaissance, system hacking, and penetration testing. Learners can complete the series during the free trial period, earning a certificate to display on their LinkedIn profile. The format is self-paced, making it a flexible entry point for busy professionals.³

Coursera

• Hacking and Patching
• Prerequisites: None
• Price: Free

The Hacking and Patching course from the University of Colorado introduces web application vulnerabilities and Linux system patching. Students complete 14 hours of guided projects, focusing on real-world flaws like command injection. The course can be audited for free, with optional payment for a shareable certificate.⁴

Ethical Hacking Certification

An ethical hacking certification is a great way to demonstrate your skills to potential employers. These programs are designed to simulate live environments and test your ability to solve real-world security problems. The cost of certification varies depending on the provider and level of difficulty.

CompTIA PenTest+

The CompTIA PenTest+ is a vendor-neutral certification suitable for security professionals who want to specialize in penetration testing and vulnerability management. The exam includes both performance-based and knowledge-based questions and requires 165 minutes to complete. As of 2025, the official exam voucher costs $399 USD through CompTIA’s store.¹¹

GIAC Penetration Tester (GPEN)

The GIAC Penetration Tester (GPEN) certification is offered by Global Information Assurance Certification and is designed for professionals responsible for conducting penetration tests and assessing risk. The exam includes 82 questions, with a time limit of up to three hours, and tests skills in reconnaissance, exploitation, and post-exploitation. GIAC currently lists exam registration through its site, with pricing available at the time of purchase depending on training options and location.¹⁹ ²⁰

Certified Ethical Hacker (CEH)

The Certified Ethical Hacker (CEH) remains one of the most widely recognized certifications in the field. The knowledge exam consists of 125 multiple-choice questions taken over a four-hour period. To sit for the CEH exam, candidates must either complete an official EC-Council training program or demonstrate at least two years of relevant work experience. The Pearson VUE CEH exam voucher is priced at $650 USD. Additional costs apply for training courses and for the optional CEH Practical exam, which is a six-hour hands-on test.⁸ ⁹ ²¹

Ethical Hacking Books

Another way to build your hacking knowledge is with books, e-books, and audiobooks. These resources are a flexible way to deepen your understanding of tools, tactics, and strategies.

Web Application Hacker’s Handbook – Finding & Exploiting Security Flaws, Dafydd Stuttard

This book provides a comprehensive guide to web application vulnerabilities and defenses. It covers techniques such as cross-site scripting, HTTP parameter pollution, and hybrid file attacks.

Computer Programming & Cyber Security for Beginners, Zach Codings

This guide to Python programming for machine learning and deep learning introduces core programming skills with Python, Linux, and data security concepts. It is particularly useful for students who want to combine beginner-friendly coding lessons with practical cyber security exercises.

The Hacker Playbook 2 – A Practical Guide To Penetration Testing, Peter Kim

This book, the second in a series of three, offers straightforward, scenario-based lessons for penetration testers. It explains how to bypass security controls, pivot between systems, and use problem-solving skills during real-world attacks.

Advanced Penetration Testing: Hacking the World’s Most Secure Networks, Wil Allsopp

This book provides detailed techniques for advanced testers. The book includes coding examples in multiple languages and focuses on sophisticated attacks against hardened networks.

Online Ethical Hacking Resources

The Internet is also a valuable learning tool and offers a range of resources where you can practice penetration testing and improve your skills.

Codecademy.com

Learn how to code, become a full-stack developer, and more with these free courses and video tutorials.

Youtube.com

Is there anything that YouTube content creators have not made more accessible and fun to learn? Check out the experiences of professional, ethical hackers, or watch hacking tutorials for free.

Hackthebox.eu

Hack The Box is an online platform that allows you to try out your penetration testing skills and exchange ideas with thousands of others in the security field. To try it out, log onto the website and get started on one of their live machines.

Learn how to code, become a full-stack developer, and more with these free courses and video tutorials.

Youtube.com

Is there anything that YouTube content creators have not made more accessible and fun to learn? Check out the experiences of professional, ethical hackers, or watch hacking tutorials for free.

Hackthebox.eu

Hack The Box is an online platform that allows you to try out your penetration testing skills and exchange ideas with thousands of others in the security field. To try it out, log onto the website and get started on one of their live machines.

Should You Study Ethical Hacking?

Are you ready to learn the skills to defend against hackers?

Now, you may be wondering, “Should I learn ethical hacking?” and the answer is yes if you want to work in a growing field like cyber security. With ethical hacking skills, you can pursue roles such as penetration tester, information security analyst, or security consultant.

Ethical hacking is also a great career choice for people who enjoy problem-solving, staying ahead of evolving technology, and working to protect organizations from digital threats. With the right training, certifications, and experience, you can establish yourself in a high-demand profession.

Learn Ethical Hacking FAQ

Sources

1. https://www.ibm.com/reports/data-breach
2. https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets
3. https://www.linkedin.com/learning/paths/become-an-ethical-hacker
4. https://www.coursera.org/learn/hacking-patching
5. https://www.dni.gov/index.php/ncsc-features/physical-personnel-security/119-security-clearance
6. https://www.bls.gov/ooh/computer-and-information-technology/information-security-analysts.htm
7. https://www.careeronestop.org/Toolkit/Careers/Occupations/occupation-profile.aspx?keyword=Information%20Security%20Analysts&location=UNITED%20STATES&onetcode=15-1212.00
8. https://www.eccouncil.org/certified-ethical-hacker-online-training/
9. https://ec-council-international.myshopify.com/products/certified-ethical-hacker-ceh-exam-voucher-w-remote-proctor-services-rps
10. https://www.kali.org/
11. https://store.comptia.org/Certification-Vouchers/c/11293?facetValueFilter=tenant~certification%3Acomptia-pentest%2C
12. https://help.offsec.com/hc/en-us/articles/360059098632-OSCP-Exam-Guide
13. https://www.hackthissite.org/
14. https://google-gruyere.appspot.com/
15. https://generalassemb.ly/education/ethical-hacking-with-hackerone
16. https://american.edu/soc/continuinged/cybersecurity.cfm
17. https://www.trainace.com/courses/ceh/
18. https://www.giac.org/certifications/penetration-tester-gpen/
19. https://www.giac.org/about/giac-policies/
20. https://store.eccouncil.org/product/ceh-vue-exam-voucher/