Bash Scripting for Cybersecurity

Before diving into hands-on cybersecurity exercises, it’s essential to set up a proper lab environment. In this lecture, we’ll focus on downloading Kali Linux and Linux Mint and preparing them for use.

I want to acknowledge that I won’t be covering how to install VMware or VirtualBox, nor the step-by-step installation of Kali Linux and Linux Mint within them. The reason is that, in today’s tech landscape, virtualization has become a standard skill, and most learners are already familiar with setting up virtual machines. However, if you're new to this or need guidance, I encourage you to check the official documentation for VirtualBox or VMware, where you’ll find detailed installation steps.

In this lecture, you will learn:
1. Where and how to safely download Kali Linux and Linux Mint from official sources
2. How to install essential security tools like OpenSSL, SSH, and Nano on both operating systems
3. Refreshing the package list on your system by contacting the configured repositories and downloading the latest package information. This ensures your system has the most up-to-date information about available packages and their versions

By the end of this lecture, you’ll have both Linux distributions set up with the necessary tools, ready for building the both the basic and advanced Linux BASH-BASED RANSOMWARE. Thanks for your understanding, and let’s get started!

In this lecture, we dive into the essential file and directory management commands in Linux. You’ll learn how to create, modify, and remove files and directories directly from the command line.

1. Creating Files – Learn how to use commands like touch and echo to create files effortlessly.
2. Deleting Files – Understand how to safely remove files with rm and handle permission-related issues.
3. Creating Directories – Explore the mkdir command to create directories.
4. Deleting Directories – Master the rmdir and rm -r commands to remove empty and non-empty directories.

By the end of this lecture, you’ll have a solid grasp of managing files and directories in Linux!

In this lecture, you will gain a solid understanding of how to navigate the Linux filesystem and efficiently list files and directories using essential Linux commands. Mastering these basics is crucial for working effectively with any Linux-based system, whether you are a system administrator, developer, or cybersecurity professional.

What You’ll Learn:

1. Understanding the Linux filesystem structure (/, /home, /etc, etc.)
2. Using pwd to check your current directory
3. Moving between directories with cd (absolute and relative paths)
4. Listing files and directories with ls and its options

By the end of this lecture, you will be able to confidently move around the Linux filesystem and retrieve file information.

This video covers essential scripting concepts, including Linux standard file descriptors (stdin, stdout, stderr), if-then-else statements, for-loops, and while-loops. By the end, you'll have the necessary foundation to build your own Linux shell scripts.

Want to make your Linux shell scripts more interactive and user-friendly? In this course, "Linux Dialogs," you’ll learn how to use Linux dialog widgets to create visually appealing and functional command-line interfaces.

What You'll Learn:

1. How to create pop-up messages with msgbox
2. Get user input using inputbox
3. Display text files in a scrollable window with textbox
4. Use yesno dialogs to get confirmation from users
5. Build interactive menus with menu

In this lesson, you'll explore the fundamentals of cryptography and learn how to encrypt and decrypt files directly from the Linux terminal. Through hands-on demonstrations, you'll gain practical experience in securing data using encryption techniques.

In today’s digital world, secure communication is essential. Public-key cryptography (asymmetric encryption) is the foundation of modern security, protecting everything from emails to online transactions.

In this course, you’ll learn:
1. How public and private keys work in encryption & authentication.
2. Key generation using OpenSSL and practical hands-on exercises.
3. How to encrypt and decrypt data securely using public-key cryptography.

Cryptic Connections: Remote Access and File Transfer

In this lesson, we dive into the essential remote access and file transfer tools used in cybersecurity and system administration. You'll gain both theoretical insights and practical demonstrations on how to effectively use:

1. Telnet – Understand its functionality, security risks, and why it's rarely used today.
2. SSH (Secure Shell) – Learn how to establish secure remote connections and execute commands like a pro.
3. SCP (Secure Copy Protocol) – Discover how to securely transfer files between systems over SSH.

By the end of this video, you'll be equipped with the skills to remotely connect to a computer or server, transfer files securely, and configure the port of your SSH service. Whether you're a penetration tester, system administrator, or cybersecurity enthusiast, this session is made for you!

In this comprehensive video, we take a deep dive into ransomware, one of the most dangerous cyber threats today. You’ll learn about the history of ransomware, how it has evolved over the years, and the different types of ransomware attacks that have impacted individuals, businesses, and even governments. Through engaging slides,  this video equips you with knowledge of ransomware and how to prevent and mitigate ransomware attacks, ensuring your systems and data remain secure. Whether you’re an IT professional, cybersecurity enthusiast, or just someone concerned about digital security, this video is for you!

In this practical, hands-on course, you will learn how ransomware works by developing a basic Bash ransomware script from scratch. Using the nano editor, you’ll write and structure the ransomware code while understanding its key functionalities.

The course also covers how to transfer or copy the ransomware to a target machine using SCP (Secure Copy Protocol) and how to remotely access the target system via SSH (Secure Shell). By the end of this course, you will have a foundational understanding of ransomware development, remote execution techniques, and file encryption concepts using Bash scripting.

Disclaimer: This course is for educational and ethical hacking purposes only. The knowledge gained should only be used in lawful and responsible ways.

In this first part of Building Advanced Bash-Based Ransomware, we dive deep into the creation, execution, and testing of a powerful ransomware script using Bash. You’ll learn how attackers leverage Linux-based scripting to encrypt files, and demand ransom.

Here’s what we cover in this session:

1. Building the Advanced Ransomware – Step-by-step coding of a Bash-based ransomware script, implementing encryption techniques, and handling file operations.
2. Testing on the Attacker’s Machine (Kali Linux) – Executing the ransomware in a controlled Kali Linux environment to observe its behavior before deployment.
3. SSH Key-Based Authentication – How attackers can use SSH keys for persistent access and bypass password authentication.
4. Social Engineering Techniques – A realistic conversation between a social engineer and a victim user, showcasing manipulation tactics used to get the victim to execute or unknowingly provide the hacker (social engineer) access to his/her computer system to execute the ransomware.

By the end of this video, you’ll have a practical understanding of ransomware creation, attack methodologies, and social engineering tactics. Stay tuned for Part 2, where we go further into real-world deployment.

In Part 2 of Building Advanced Bash-Based Ransomware, we extend the concepts from Part 1 by enhancing the ransomware’s capabilities with file compression, user interaction, and automated persistence. This session focuses on making the ransomware more efficient, deceptive, and resilient.

Here’s what we cover:

1. Tarring the Victim’s Files – Using the tar command to archive and encrypt the target files, and transferring the compressed archive file to the attacker's machine.
2. Creating Interactive Widgets with Dialog – Crafting GUI pop-ups using dialog to manipulate the victim into taking actions like clicking on the 'Pay Now' button

In this video, we reviewed the dialog section of the advanced bash ransomware shell script.

Thank you for joining me in this course--Bash Scripting for Cybersecurity: Ransomware Development. I hope you’ve gained valuable insights and hands-on skills that you can apply in real-world scenarios. If you enjoyed this course, don’t forget to leave a review—it helps others discover it too! Keep practicing, and stay curious.