Complete Ethical Hacking Bundle: 5 Courses in 1

Master practical middle level linux commands like grep for pattern search, tail for last lines, pipe workflows, redirection, and alias creation to streamline terminal tasks using ifconfig and mac addresses.

Learn how to compress and extract files in Linux using tar, including creating tar.gz archives with c, z, v, f options and extracting with xvf.

Learn to partition a USB drive with GParted: install, unmount, delete, resize, and format partitions as ext4 and fat32.

Learn to manage Linux services with systemctl, including listing, checking status, and starting, stopping, or restarting services such as cron, and using pgrep and kill to manage processes.

Learn to automate tasks with crontab by editing /etc/crontab with nano, creating cron jobs that run echo hello and a script to delete hello.txt at scheduled times.

Set up a web server by installing httpd, MariaDB, PHP, and phpMyAdmin, starting services, verifying with ifconfig and a browser, and creating an index.html in /var/www/html.

Install WordPress on your web server by downloading, extracting, and moving files. Create a WordPress database and user, configure wp-config, and complete the setup in a browser.

Learn to set up an ftp server on fedora by installing vsftpd and ftp, configuring local root, starting the service, adjusting the firewall, and connecting with ftp commands.

Begin from scratch to master web hacking techniques, learn HTTP basics with Wireshark, set up an OWASP lab, test security with Vega, SQL injection, WordPress scanning, and cross-site scripting.

Explore how the web works as a client–server system, using HTTP, HTML, DNS, GET and POST, web servers like Apache or Tomcat, with HTTPS and SSL to prevent man-in-the-middle attacks.

Compare http and https using wireshark to observe unencrypted and encrypted traffic. Capture traffic, locate http post credentials, and see https tls encryption protecting sensitive data.

Set up a local web testing lab with Xampp and the OWASp app, install it in the htdocs directory, and explore SQL injection and cross-site scripting.

Learn to use the free Vega web vulnerability scanner to test for SQL injection and cross-site scripting. Download, install on Windows, run scans, and interpret remediation suggestions.

Learn the basics of SQL injection, how SQL queries retrieve data from databases using select and where, and how databases work behind the scenes with phpMyAdmin.

Explore sql injection techniques to bypass login screens using 1=1, single quotes, and the comment symbol to access accounts and log in as admin.

Learn to perform sql injection using sqlmap on Kali Linux to identify injection points and extract databases, tables, and columns.

Learn to prevent sql injection in a php web app by using mysql_real_escape_string and strip slash to escape input, with a demonstration of low vs high security.

Explore WPScan, a security scanner that uncovers WordPress weaknesses through username enumeration, password cracking, vulnerability and plugin enumeration, with a Kali Linux demonstration.

Set up a local WordPress site and database, then use WPScan in Kali Linux to enumerate plugins, themes, and login names, and perform a dictionary attack to access admin dashboard.

Secure your WordPress site with the all in one WP security plugin by hiding WordPress version, changing admin username, enabling database prefix, and using a custom login URL.

Learn the basics of cross-site scripting, a client-side vulnerability enabling malicious code injection to obtain cookies and tokens, with stored and reflected xss explained and a hands-on demo.

Explore stored cross-site scripting (XSS) attacks by injecting scripts into blog entries and iframes to steal session cookies and impersonate users, including admin.

Prevent cross-site scripting attacks by applying PHP's htmlspecialchars to convert special characters to HTML entities, including quotes and UTF-8 encoding, as shown on a local site.

Discover how the browser exploitation framework beef enables controlling browsers via a hooked script, with a web ui, and options like alerts, social engineering, and redirects.

Learn to gain full control of a target machine using BeEF and MSF console by creating a reverse TCP payload, deploying it via a notification, and establishing a session.

Learn to block BeEF hooks in your Chrome browser using the vegan extension and verify protection by loading a test infected page that is blocked.

Learn how to generate a backdoor using Weevely, upload a malicious PHP file, and gain remote command execution with server information and netstat commands.

Learn how cross-site request forgery exploits a logged-in user's browser to trigger unwanted actions, with a demonstration of changing a victim's password in a vulnerable app using social engineering.

Explore how phishing attacks use social engineering to clone legitimate websites and harvest credentials, including using the social engineering toolkit to create fake sites and collect usernames and passwords.

Learn to hack wireless networks using multiple techniques and tools such as Aircrack-ng, Wireshark, Cowpatty, pirate, and Krunch River on Kali Linux.

Explore the basics of wireless networks, including wifi standards like n and ac, 2.4 GHz and 5 GHz bands, channels, interference avoidance, and antenna types.

Install Kali Linux in VMware Player to create a virtual lab for practicing wireless hacks, including downloading VMware, creating a Kali VM, and safely running it with host OS unaffected.

Explore aircrack-ng, a suite for manipulating and cracking wifi networks, and learn how to enable packet injection and monitor mode with a Kali Linux setup and the Alpha 036 adapter.

Put your wireless card in monitor mode with airmon-ng, and use airodump-ng to reveal networks and hidden ssids; force client reconnects with aireplay-ng to expose ssids via probe packets.

Learn how to spoof a mac address with mac changer in Kali Linux, including temporary changes and switching to a random or specific address with ifconfig down and up.

Learn to use Wireshark to capture and analyze FTP and HTTP traffic, revealing how usernames and passwords can be exposed, and why HTTPS protects credentials.

Explore denial of service concepts on wireless networks and illustrate how beacon floods and fake access points disrupt connectivity.

Crack wireless WEP encrypted passwords by enabling WEP on the access point, collecting packets with airodump-ng, performing ARP replay and fake authentication, and using aircrack-ng to recover the key.

Crack WPA passwords by capturing the four-way handshake with airodump-ng in monitor mode and aircrack-ng using a word list, noting it's a dictionary attack and may take time.

Learn to create custom wordlists with crunch and pipe them to aircrack-ng for password cracking, saving time and drive space by generating dictionaries and using the crunch output.

Speed up WPA2 cracking by using cowpatty with pre-computed hash files and jpmc to generate pregenerated hashes, enabling faster dictionary-based attacks on the packet capture file.

Explore how pirate/pyrit speeds wifi network password cracking by using all cores, importing password wordlists into a database, setting ssid, and running a targeted attack.

Learn how reaver brute-forces a WPA pin on targeted wifi networks, using monitor mode and wash to identify targets, then perform a pin-by-pin attack with fixed channel.

Explore how an evil twin attack creates a rogue access point that imitates a real hotspot, luring clients to connect and exposing traffic via Wireshark.

Learn practical evil twin attacks with captive portals, including setting up a fake access point, cloning pages, and stealing credentials using social engineering toolkit, Be framework, and Wireshark filters.

Learn how the evil twin attack clones a legitimate wifi network to trick clients into a login page, capturing passwords and traffic through captive portals.

Choose a wireless adapter with a compatible chipset that supports monitor mode and packet injection, then test it in Kali Linux using iwconfig and airmon-ng.

Discover how to sniff and inject packets in a wireless network using Airodump-ng and monitor mode, capture data with a file, and analyze authentication packets with Wireshark.

Learn to set up a Linux access point with dnsmasq and hostapd, configure DHCP and wireless settings, and explore an additional AP method with airbase-ng.

Learn to set up a captive portal by configuring dnsmasq, hostapd, and Apache, creating a login page, and testing redirection on a wifi network.

the lecture shows how a captive portal redirects a connected user and how a packet capture with http post requests can reveal username and password.

Discover how a PHP script captures a victim's username and password through a login form on a captive portal, saving credentials to a capture.txt file on an Apache server.

Learn how to set up a fake captive portal on a wireless access point and use social engineering to redirect users and capture their login credentials.

Learn how the social engineering toolkit enables credential harvesting through a captive portal with a custom login page, demonstrated via a practical attack scenario.

Explore how the BeEF browser exploitation framework works with a captive portal for browser security testing. Configure a hook URL and use the control panel to observe hooked browsers.