Advanced Practical Initial Access ( Social Engineering )

set up a lab environment by downloading and installing vmware workstation pro, walk through the setup wizard, restart, and activate with a pro license key after the 30-day trial.

Download Windows 10 and Kali Linux ISOs by navigating browser links, selecting edition and language, and using a Linux Firefox user agent to enable 64-bit or 32-bit options.

Set up Kali Linux and Windows 10 VMs in VMware workstation, configuring RAM and storage while isolating them on a host-only network to prevent updates.

Install the Kali Linux virtual machine named Joker, configure language, network, and a user, then partition the disk, install the base system, and update with apt update and apt upgrade.

Learn to install Windows machines via VMware Workstation, automating setup with autopilot, user creation, and automatic login while Kali Linux manages virtualization and networked updates.

Update Windows 10 machines by configuring internet-enabled network adapters, stripping unused features for performance, and installing the latest security updates to keep systems up to date.

Install Microsoft Office Pro Plus 2019 on two Windows machines by mounting the ISO, selecting Word and Excel, and preparing for activation after temporarily disabling real-time protection.

Activate Windows and Microsoft Office using activation keys, adjust real-time protection settings, and verify successful product activation across systems.

Install Visual Studio Community 2022 on the host machine, selecting dotnet desktop development and cpp workloads to build payloads, then transfer them to the target machine.

Wrap up this section and look ahead to future tool installations; join the next section promptly for continued learning.

Set up and configure the c2 frameworks villain framework and metasploit framework to kick off this section of the course on initial access via social engineering.

Install and configure the villain C2 framework on Kali Linux, clone from GitHub, set up dependencies, adjust the port to 443, and generate payloads.

Set up the metasploit framework, initialize the database, configure a Windows x64 Meterpreter reverse TCP payload, set LHOST and port 443, and enable stage encoding for covert traffic.

We wrap up this section and confirm we covered everything needed to set up our C2 frameworks. Meet me in the next section, as I wait for you.

Explore effective note taking in cyber security by reviewing types of note keeping tools and the software I use to organize daily work.

Compare note keeping tools for cybersecurity work—keep note, one note, obsidian, and cherry tree—covering cloud sync, backups, and code syntax support; plus green shot for screenshots.

Learn how to organize notes with Cherry Tree in Kali Linux, create nodes and subnotes, insert code blocks with syntax highlighting, enable autosave and backups, and manage screenshots with Greenshot.

Conclude this section and preview the next steps as you prepare to craft undetected payloads using various methods and tools.

Explore advanced social engineering techniques for initial access and discuss payloads designed to bypass up-to-date Windows Defender.

Learn how to install the Sublime Text editor on Linux, including repository setup, package installation, and launching the editor, with tips on using root vs regular user.

Explore how to modify villain payloads, obfuscate code, and test undetected versus detected payloads to establish background sessions with a listener in a Windows lab.

Modify a file in the valency two framework to generate an undetected PowerShell reverse TCP payload, compare detected and undetected payloads, and test payloads on a Windows machine.

Learn to convert PowerShell payloads into executables, test them against Defender, and apply encoding techniques while examining practical challenges and defense considerations in social engineering.

Shows a proof-of-concept that you don't need villain C2 frameworks to achieve initial access, by demonstrating how PowerShell payloads can be modified to evade antivirus and establish a reverse shell.

Transition to Visual Studio 2022 Community Edition, and code C payloads while learning to modify them to respond to detection and bypass Windows Defender.

This lecture examines crafting a C# payload and encoding it with a XOR encoder to evade Windows Defender detection, highlighting evasion techniques and payload handling.

Wrap up this section by noting we’re done, and meet in the next section for more cool, interesting stuff after adjusting the Kali Linux host-only network adapter.

Learn to obfuscate payloads and code and sign them to appear unsuspicious and legitimate to antivirus software in this section on advanced practical initial access.

Learn to obfuscate a C# payload with Confuser X from GitHub, an open-source free tool, using normal presets and protections like name, resource, and control-flow to evade antivirus detection.

Learn how a binary payload can be made to look unsuspicious to antivirus software by modifying metadata and icons with tools like Resource Hacker, while noting ethical and detection considerations.

Learn how code signing certificates and digital signatures validate software, assess revocation and expiration scenarios, and understand how certificate choices affect payload authenticity.

Refine learning strategies through a proof-of-concept on payload signing, testing, and debugging, showing how signing with a certificate blocks binaries by Windows Defender while exploring C and PowerShell payloads.

Explore fishing with HTA files and prepare three machines—Kali Linux development box and Windows 10 target machines—ensuring all are up to date before proceeding.

demonstrates how to generate a Windows HTA payload with msf venom, host it via a http server, bypass defender, and deliver through phishing to gain initial access.

Explores image attacks technique 2 golden attack, demonstrating a download, save and run payload delivery with metasploit and a hidden powershell execution to establish a meterpreter session.

Wrap up this section reinforces phishing using image files, warns against harm, and notes undetected payloads and antivirus bypass, and previews phishing with other techniques in the next section.

Explore social engineering fundamentals by introducing malicious image files that carry payloads to deliver shell access when opened, in a guided section of the course.

this lecture demonstrates image-based initial access via a decoy image that secretly executes a payload and gains a remote shell, using Kali Linux and a Windows 10 target.

Explore image attack technique 2, golden spartan attack, by turning an image into an executable venom payload to establish a Meterpreter session via Metasploit.

Explore the image attack technique, leveraging WinRAR to conceal a payload and establish a Meterpreter session through Metasploit on a target Windows machine.

Wrap up this section on phishing with image files, emphasizing ethical use. It warns about dangerous payloads and viruses from GitHub, bypassing antivirus, and encourages responsible, non-harmful practice.

Phish using Microsoft Office documents to trigger macros, gaining a shell on target machines, within a clean, controlled lab setup to practice social engineering and evading defenses.

Office Word attack technique uses macro-enabled documents to deliver encoded PowerShell payloads, bypass defenses, and establish a backdoor session.

Demonstrates a golden office word attack that uses a malicious macro to fetch an encoded payload from a Kali Linux listener, hides it on the target, and executes it.

Explore obfuscation techniques for malicious documents and concealment of macros to evade detection, including base64 encoding and the use of tools to modify a document’s macro payload.

Highlight fishing using Microsoft Office documents to exploit trusted software and achieve near success in social engineering. Conclude the section with reflection and a preview of another fishing technique.