---
title: "Training"
url: "https://unshade.pl/en/services/training"
lang: "en"
summary: "Hands-on workshops run by pentesters — for developers, admins and teams."
---

# Training

We teach what we see in real projects. Workshops are run by practising pentesters, in labs that mirror real environments.

## Programmes

- Security awareness for staff
- Web application and API security
- Networks, Windows and Active Directory
- Password cracking
- iOS and Android mobile apps

## Format

- 4 to 16 hours of hands-on workshops
- Private groups for companies, on-site or online
- Materials and lab access
- Certificate of completion

## What our training is

Hands-on educational programmes for every level — from non-technical staff to IT experts. They raise awareness and build skills in protecting information, identifying threats and implementing effective security procedures. We focus on exercises, real-case analysis and attack scenarios, and match the programme to the participants' level and technology stack.

## Programmes

- **Security awareness for non-technical staff** (4 hours) — phishing, social engineering, malware, data protection basics and good practice at work.
- **Web application security** (16 hours) — OWASP Top 10, penetration testing techniques, risk analysis and exercises on the most common vulnerabilities.
- **Network security and penetration testing** (16 hours) — introduction to pentesting, network service scanning, firewall configuration, honeypots and incident analysis.
- **Windows security** (16 hours) — system architecture, security mechanisms, cryptography, Active Directory and defence against offline attacks.
- **Advanced web application security** (16 hours) — advanced testing techniques, API security and professional security reports.
- **Password cracking** (16 hours) — Hashcat and John the Ripper, custom wordlists, brute-force and dictionary attacks.
- **iOS mobile application security** (8 hours) — system architecture, reverse engineering, static and dynamic analysis, network traffic monitoring.
- **Android mobile application security** (8 hours) — architecture, reverse engineering, code analysis and device security.

## Training tailored to your needs

Can't see the right course? Tell us what you need and we will design a programme tailored to your organisation — topics, level and format. Participants receive certificates confirming the competencies gained.

## Postgraduate studies

We run the postgraduate programme Pentester: cybersecurity specialist at WSB Merito University — the same team and the same labs we prepare for companies.

## What our clients say

> The Cyber Awareness training delivered by Unshade was of the highest quality, both in content and organisation. Thanks to their expert knowledge and professional approach, our employees gained a deeper understanding of digital threats and how to protect against them.
> — Wojciech Kęsy, CEO, Farmapol

> Unshade is a reliable partner for security training. Thanks to their knowledge and professionalism, our team significantly raised its awareness of cyber threats and learned to recognise and prevent them effectively. We recommend Unshade without hesitation.
> — Przemysław Pasek, CEO, Samba.ai

> Working with Unshade guarantees professionalism and the highest standards. The team's flexibility, discretion and commitment were outstanding. I highly recommend Unshade as a reliable partner.
> — Marcin Marczewski, CEO, Resilia

## Blog

- [120 minutes that can save your company – a cybersecurity awareness training](https://unshade.pl/en/blog/120-minutes-that-can-save-your-company.md)
- [PBKDF i bcrypt](https://unshade.pl/en/blog/pbkdf-and-bcrypt.md)
- [How to Bypass AMSI? My Experience with PowerShell Bypassing](https://unshade.pl/en/blog/how-to-bypass-amsi.md)
- [Bcrypt Cocktail and Hash Extraction](https://unshade.pl/en/blog/bcrypt-cocktail-and-hash-extraction.md)
- [Sacrificial session](https://unshade.pl/en/blog/sacrificial-session.md)
- [Hash function](https://unshade.pl/en/blog/hash-function.md)
- [Introduction to Password Cracking #3 Rules](https://unshade.pl/en/blog/introduction-to-password-cracking-3-rules.md)
- [Introduction to Password Cracking #1 Intro](https://unshade.pl/en/blog/introduction-to-password-cracking-1-intro.md)
- [Introduction to Password Cracking #2 Wordlists](https://unshade.pl/en/blog/introduction-to-password-cracking-2-wordlists.md)
- [CrackMeIFYouCan 2022 DEFCON Writeup](https://unshade.pl/en/blog/crackmeifyoucan-2022-defcon-writeup.md)

## Request an anonymised report

See what our penetration test report looks like: the structure, findings with PoC, CVSS ratings and recommendations. We send an anonymised version to your work email.