Ethical Hacking Fundamental Course - Learn From Scratch

Learn information gathering techniques using Google hacking, mirroring, and email tracking to extract useful data. Explore competitive intelligence, public company insights, and mapping tools to understand network structures.

Learn information gathering in Kali Linux using Recon-ng and Netcraft to enumerate domains, subdomains, and IP addresses, then organize results in workspaces.

Discover information gathering with tools like whois lookups, DNS queries, and traceroute to identify domain IPs, subdomains, and network blocks, plus social engineering tactics such as phishing.

Practice information gathering for domains by using whois to reveal registrant and contact details, plus diagnostics and trace.

Learn practical information gathering techniques by using search engines, people search sites, and social networks to collect names, emails, and locations for research and ethical hacking.

Master information gathering by using tools to reveal IP addresses, domain hosting, and how websites share hosting and connect to one another.

Sunil Gupta demonstrates scanning part 2, showing how to detect live networks and open systems using tools like nmap and ip scanners to map hosts and ports.

Explore the scanning phase of ethical hacking, using Nessus to identify open ports and vulnerabilities, map assets, and assess network risk for secure, protected systems.

Explore how scanning and network discovery tools reveal network architecture. Learn how proxies mediate between devices and the internet, hide ip addresses, and enable proxy chaining.

Explore deep scanning techniques and tools to safeguard employee data and prevent enumeration attacks. Learn how the network time protocol synchronizes clocks and how encryption and restricted access protect credentials.

Learn how deep scanning reveals network access points, public data exposure, and how to view your desktop, IP, MAC address, and BIOS information using scanning tools.

Explore privilege escalation and common hacking tools and techniques, including password resets, user access manipulation, trojans, spyware, backdoors, crackers, and keyloggers, to understand how attackers gather information from victims.

Explore spyware concepts and steganography techniques, including keystroke logging, data exfiltration, and hiding secret messages in images, audio, or documents using common tools.

Practice hacking fundamentals through practical exercises in password cracking, hash extraction, and steganography, including hiding and extracting messages in image files and using Linux and Windows tools.

Explore social engineering and insider threats—intentional and unintentional—contrast with outside attackers, and examine mitigation through policies, audits, training, and user awareness against phishing.

Learn about social engineering techniques, including impersonation, identity theft, eavesdropping, dumpster diving, shoulder surfing, piggybacking, delegating and accepter, and explore tools like Netcraft toolbar in Firefox to block phishing sites.

Explore social engineering theory and practical add-ons through the life of the popular hacker Mitnick, who used dumpster diving and credential theft, and wrote the art of deception.

Examine mitm techniques on networks through MAC flooding attacks on switches, using spoofed MAC addresses and DHCP exhaustion, and review defenses like port security and limiting MAC entries.

Learn how DNS cache poisoning and domain name system attacks redirect users, the role of hosts files, and de-risking strategies to limit trusted DNS data and prevent spoofing.

Explore man-in-the-middle concepts and learn how to use Wireshark for live capture and offline analysis in ethical hacking, with practical insights into security and traffic inspection.

Discover how to change your MAC address and spoof messages using dedicated software, verify the new MAC and IP addresses, and understand practical steps for MAC address manipulation.

Learn to use a key sniffing tool to monitor network traffic, access login pages, and sniff credentials through HTTP.

Learn the dos attack fundamentals, assess risk, and address infrastructure protection with a security checklist, identifying single points of failure and network layer mitigation strategies.

Deliver a practical introduction to a denial of service attack, showing how Windows and Linux tools simulate flooding a website to observe traffic and IP behavior.

Learn about ransomware, boot sector viruses, and macro viruses, how they encrypt files, restrict access, slow systems, and demand payment or trigger automated actions in apps like Microsoft Word.

Explore a malware practical session that guides you through process monitoring, ports, and local address analysis, and testing exploits across Windows and Linux using commonly available software.

Engage in a malware practical that demonstrates hacking Windows from Linux, including crafting payloads, transferring executables, configuring a handler, and establishing a backdoor connection to gain control.

Learners discover how session hijacking can occur when SSL is not used, enabling attackers to steal cookies by sniffing traffic and how session fixation traps users into logging in.

Explore how session hijacking happens through predictable session IDs and cookie access via in-browser scripts, and how invalidating sessions and cookies prevents unauthorized access.

Explore session hijacking techniques, including blind and man-in-the-middle attacks, by intercepting and manipulating packets, sniffing traffic, and using proxies to capture cookies.

Explore how proxies can steal cookies and hijack browser sessions through practical lab exercises, revealing security risks and defensive considerations in ethical hacking.