Intake open · 3-month track

Ethical Hacking and Penetration Testing Internship

This penetration testing internship teaches ethical hacking the way a client pays for it: test authorised lab targets within a written scope, prove each finding, and write a report a developer can fix from.

Apply now See the 12-week plan
3Months
HybridFormat
Lab-basedTraining
PKR 5,000Total fee
Findings tracker. Lab
# authorised lab scope only
finding = “Outdated library”
severity = rate(finding)
Findings verified12
week 1week 12
Ends as
A pentest report
Mentor review
Weekly, 1-to-1
  • Kali Linux
  • Burp Suite
  • Nmap
  • OWASP Top 10
  • Reporting
  • Lab targets
  • Kali Linux
  • Burp Suite
  • Nmap
  • OWASP Top 10
  • Reporting
  • Lab targets
  • Kali Linux
  • Burp Suite
  • Nmap
  • OWASP Top 10
  • Reporting
  • Lab targets
  • Kali Linux
  • Burp Suite
  • Nmap
  • OWASP Top 10
  • Reporting
  • Lab targets
  • Kali Linux
  • Burp Suite
  • Nmap
  • OWASP Top 10
  • Reporting
  • Lab targets
  • Kali Linux
  • Burp Suite
  • Nmap
  • OWASP Top 10
  • Reporting
  • Lab targets
  • Kali Linux
  • Burp Suite
  • Nmap
  • OWASP Top 10
  • Reporting
  • Lab targets
  • Kali Linux
  • Burp Suite
  • Nmap
  • OWASP Top 10
  • Reporting
  • Lab targets
12Weeks
25 hrsPer week
4Graded deliverables
1Pentest report
The work

Finding a bug is half the job. Proving it and explaining it is the rest

Clients do not pay for screenshots of tools. They pay for a clear scope, verified findings and a report their developers can act on. That is what the twelve weeks train.

  • 1You get a written scope and authorised lab targets
  • 2You map the target before testing anything
  • 3Your mentor reviews every finding for evidence and impact
  • 4You write the report and retest after the fix

All testing happens on Ezitech lab targets with written permission. Networking and Linux basics are covered in weeks 1 to 3.

report/finding-07.json
// Week 9: one finding, written so a developer can fix it
{
 "title": "Outdated JavaScript library",
 "severity": "medium",
 "scope": "lab app, authorised",
 "evidence": "version banner, screenshots",
 "impact": "known issue in this version",
 "fix": "upgrade and retest"
}
Skills

What you will be able to do after this penetration testing internship

01

Scoping

Reading a scope and rules of engagement before touching anything.

02

Reconnaissance

Mapping a lab target with Nmap and safe enumeration.

03

Web testing

Using Burp Suite to inspect requests and test web apps.

04

OWASP Top 10

Understanding the most common web weaknesses and how they are fixed.

05

Linux for testers

Working comfortably in Kali Linux and the command line.

06

Proof and evidence

Verifying each finding so it holds up in review.

07

Risk rating

Explaining severity and business impact in plain language.

08

Reporting

Writing findings and fixes a developer can act on, then retesting.

Curriculum

The 12-week penetration testing internship plan

Four phases. Each one ends in a deliverable that is reviewed and graded before the next opens.

Foundations

Networks, Linux and the rules of engagement.

  • Networking basics and how web apps talk
  • Linux and Kali Linux essentials
  • Scope, permission and the law
  • How a professional engagement runs
Deliverable

A rules of engagement document for a lab target.

The capstone

Every intern delivers a client-style pentest report

You run a full engagement on an authorised lab target: scope, recon, testing, evidence and a report with clear fixes, then a retest.

  • A written scope and rules of engagement
  • Verified findings with evidence and severity
  • A report with fixes, plus a retest
Start your application
Ezitech seminar session with students at a university auditorium
Ezitech stall at a university open house and job fair
Ezitech receiving a shield at a university project presentation
Ezitech team and interns group photo outside the institute
Ezitech speaker presenting at a talent award ceremony
Ezitech mentors reviewing intern project documents
Ezitech team discussing an intern project brief in the office
01 / 07
Duration12 weeks
Commitment25 hrs / week
FormatOnsite + remote
LocationRawalpindi, PK
LevelJunior / fresher
ReviewsWeekly, 1-to-1
The Ezitech model

What the penetration testing internship includes

Three things that make this different from a course you watch on a screen.

Live client briefs

You work on real Ezitech projects with real deadlines and real revision rounds, not recycled practice exercises.

A mentor, not a playlist

Weekly reviews with someone who does this work for a living, plus a team of interns around you to build with.

Portfolio and experience letter

You finish with shipped work you are allowed to show and a letter that says exactly what you delivered.

And you leave with

  • Verified certificate

    Issued by Ezitech Institute and verifiable by employers.

  • Experience letter

    On company letterhead, stating exactly what you delivered.

  • A pentest report

    A complete report on an authorised lab target, with retest results.

  • Interview preparation

    CV rewrite, portfolio case study and a technical mock interview.

  • A route into the team

    Top performers are considered first for paid junior roles.

  • Confidence in review

    Twelve weeks of defending your own work to a senior practitioner.

Built for you if

  • You are an undergraduate or fresh graduate in CS, IT, cyber security or networking
  • You are comfortable with Linux and basic networking
  • You want to test systems legally, with permission and a scope
  • You need a substantial final-year project

Not a fit if

  • You want a certificate without doing the work
  • You cannot give 25 hours a week for 12 weeks
  • You want to test systems without permission
  • You want to skip review and work alone
FAQ

Penetration testing internship: questions people ask

Everything applicants email us about, answered before you apply.

Still not sure?

Talk to the admissions team before you commit twelve weeks.

Contact Ezitech

Is ethical hacking legal?
Yes, when you have written permission and stay inside the agreed scope. Every exercise in this internship runs on Ezitech lab targets that you are authorised to test. Testing anything else is not part of the programme.

Do I need prior hacking experience?
No. Weeks 1 to 3 cover networking, Linux and how an engagement runs. You should be comfortable with basic networking and the command line.

Is it remote or onsite?
Hybrid. Onsite days run at the Ezitech office in Rawalpindi for reviews and labs; the rest of the week is remote. Candidates outside Rawalpindi and Islamabad can complete it fully remotely if they attend the weekly review calls.

Is there a fee?
Yes, a one-time fee of PKR 5,000 for three months. There is no stipend. The refund rules are on the internship fee and refund policy page.

Can final-year students apply?
Yes. The capstone can be scoped as a final-year project. Agree the scope with your mentor in week one if your university has a set submission format.

How do I apply?
Register on the Ezitech intern portal, choose the Cyber Security track, and complete the three-step form with your education details and CV. Shortlisted candidates get a short screening call before the intake starts.
Other tracks

Not sure Penetration Testing is the one?

Every cyber security internship runs three months, hybrid, with the same mentor model. Or take the six-month All-in-One Cyber Security flagship. Still choosing a field? Read which cyber security roles hire in Pakistan, or browse cyber security FYP ideas.

Blue team

SOC Analyst

Triage alerts in a SIEM and write reports a team acts on.

View track
DevSecOps

Application Security

Review code and add security checks to the CI pipeline.

View track
Cloud

Cloud Security

Lock down cloud accounts, permissions and logging.

View track
Incident response

Digital Forensics

Collect evidence and rebuild what happened in an incident.

View track
Applications open

Learn to test with permission and report like a professional

Three months, one shipped piece of real work, a mentor who reviews you every week. Registration takes five minutes.

Apply for this internship Talk to us first
Ezitech Institute · Rawalpindi, Pakistan · info@ezitech.org · +92 345 5555396
Chat on WhatsApp