Cyber Security Course دورة الأمن السيبراني الشاملة

Name: Cyber Security Course دورة الأمن السيبراني الشاملة
Rating: 4.4 (353 reviews)

Beginner to Master شرح باللغة العربية مبتدئ الى محترف

Created bySami almashqbeh

Last updated 12/2022

Arabic

What you'll learn

تغطي هذه الدورة أغلب المواضيع التي تغطيها الدورات العالمية التالية : (CCNA CYBER OPS , CEH, OSCP PEN-200, CHFI)
ستحصل في نهاية الدورة على شهادة موقعة ومعتمدة من المحاضر وشهادة خبرة عملية في المواضيع التالية
Cyber security and the Security Operations Center الأمن السيبراني ومركز عمليات الأمن السيبراني
Computer Networks Fundamentals and Computer Networks Security شبكات الحاسوب وأمن شبكات الحاسوب
Linux Operating System نظام تشغيل لينوكس
Cryptography and the Public Key Infrastructure التشفير
Penetration test using Kali Linux and Parrot , Python scripting for penetration testing اختبار الاختراق
Digital forensics تحقيقات الأدلة الرقمية
Ethical hacking (Email Security, VPN, Firewall, Brute Force Attack in Web Application, Command Injection, Cross Site Request Forgery, SQL Injection, XSS)
Ethical hacking ( Information Gathering , Sniffing, ARP Cache Poisoning , MITM, Brute Force, DoS ,DDoS, Spoofing, Steganography, Phishing, create malware)
Bug hunting ( JMP ESP, fuzzing), Reverse shell and bind tcp , Msfvenom, Metasploit framework, PE how to create crack and inject malware inside it.
Capture The Flag ( CTF)
القرصنة الاخلاقية

Course content

8 sections • 53 lectures • 54h 6m total length

Introduction to Cyber security and the Security Operations Center56:40
o Explain why networks and data are attacked.
o Outline features of examples of cyber security incidents.
o Explain the motivations of the threat actors behind specific security incidents.
o Explain the potential impact of network security attacks.
o Explain the mission of the Security Operations Center (SOC)
o Elements of a SOC
o People in the SOC
o Process in the SOC
o Technologies in the SOC: SIEM and SOAR

Linux Operating System part11:14:07
o Perform basic operations in the Linux shell.
o Explain why Linux skills are essential for network security monitoring and investigation.
o Use the Linux shell to manipulate text files.
o Explain how client-server networks function.
o Perform basic Linux administration tasks.
o Explain how a Linux administrator locates and manipulates security log files.
o Manage the Linux file system and permissions.
o Perform basic security-related tasks on a Linux host.
o Explain the basic components of the Linux GUI.
o Use tools to detect malware on a Linux host.
Linux Operating System part21:52:15
o Perform basic operations in the Linux shell.
o Explain why Linux skills are essential for network security monitoring and investigation.
o Use the Linux shell to manipulate text files.
o Explain how client-server networks function.
o Perform basic Linux administration tasks.
o Explain how a Linux administrator locates and manipulates security log files.
o Manage the Linux file system and permissions.
o Perform basic security-related tasks on a Linux host.
o Explain the basic components of the Linux GUI.
o Use tools to detect malware on a Linux host.

Network Protocols , Ethernet and Internet Protocol1:40:08
Explain the basic operation of data networked communications.
Explain how protocols enable network operations.
Explain how data encapsulation allows data to be transported across the network.
Explain how Ethernet supports network communication.
Explain how the IPv4 protocol supports network communications.
Explain how IP addresses enable network communication.
Explain the types of IPv4 addresses that enable network communication.
Explain how the default gateway enables network communication.
Explain how the IPv6 protocol supports network communications.
Connectivity Verification, Address Resolution Protocol and The Transport Layer1:18:52
Explain how ICMP is used to test network connectivity.
Use Windows tools, ping, and traceroute to verify network connectivity.
Compare the roles of the MAC address and the IP address.
Analyze ARP by examining Ethernet frames.
Explain how ARP requests impact network and host performance as well as potential security risks.
Explain how transport layer protocols support network communication.
Explain how the transport layer establishes communication sessions.
Explain how the transport layer establishes reliable communications.
Network Services Part 11:26:03
Explain how DHCP services enable network functionality.
Explain how DNS services enable network functionality.
Explain how NAT services enable network functionality.
Explain how file transfer services enable network functionality.
Explain how email services enable network functionality.
Explain how HTTP services enable network functionality.
Network Services Part 255:30
Explain how DHCP services enable network functionality.
Explain how DNS services enable network functionality.
Explain how NAT services enable network functionality.
Explain how file transfer services enable network functionality.
Explain how email services enable network functionality.
Explain how HTTP services enable network functionality.
Network Communication Devices1:42:16
Explain how network devices enable network communication.
Explain how wireless devices enable network communication.

Attackers and Their Tools1:00:59
Explain how network threats have evolved.
Describe the various types of attack tools used by Threat Actors.
Introduction to Hacking the Box
Common Threats and Attacks55:12
Describe types of malware Virus, Worm, and Trojan horse.
Other malware : Ransomware ,Scareware, Phishing, Rootkits, Spyware, and Adware.
Explain reconnaissance, access, and social engineering network attacks.
Password Attacks , Spoofing Attacks , Man-in-the-Middle Attack , Buffer Overflow Attack, and Social Engineering.
Explain Denial of Service (DoS and DDoS Attacks), buffer overflow, and evasion attacks.
Attacking the Foundation59:16
Explain the IPv4 and IPv6 header structure.
Explain how IP vulnerabilities enable network attacks.
Explain how TCP and UDP vulnerabilities enable network attacks.
Attacking What We Do41:32
Explain IP service vulnerabilities
Explain how network application vulnerabilities enable network attacks

Deploying Portable Virtual Lab27:14
Deploying Portable Virtual Lab using Virtual Box
Information Gathering & Countermeasures50:50
Objective of this Lab is to Understanding Information Gathering, Network Discovery, Scanning, Detecting Scanning & Implementing Countermeasures
Foot printing / Network Discovery
Scanning
Enumeration
Shodan , whois , netcraft
NMAP
Dmitry
Sniffing, ARP Cache Poisoning & MITM Attack with Countermeasure54:46
Objective of this Lab is to understand Sniffing, Man in the Middle Attack (MITM),ARP Cache Poisoning Suggesting & Implementing Countermeasures.

Zenmap (for Scanning purpose)
Ettercap (for ARP Cache Poisoning and Sniffing)
Brute Force Attack & Countermeasures26:38
Objective of this Lab is to understand about types of Password Attacks, Hash Function, Password Hashes, Brute Force Attack ,Suggesting & Implementing Countermeasures .
John the Ripper
Denial of Service Attack& Countermeasures52:04
Objective of this Lab is to understand about IP Spoofing, Denial of Service (DoS),Suggesting & Implementing Countermeasures.

Performance Monitor
Hping3
Distributed Denial-of-Service (DDoS) using Botnet39:16
DDos
Botnet
MAC Spoofing18:21
Objective of this Lab is to understand about MAC Spoofing, Process to change the MAC address by generating random MAC address and by giving specific MAC address.

Macchanger
Steganography using image file32:57
Objective of this Lab is to understand about Steganography, Steghide tool and how to send text message embedded with image file.

Steghide
E-Mail Spoofing & Phishing38:38
Objective of this Lab is to understand aboutE-mail Spoofing,Phishing,Phishing techniques and suggested countermeasures.
Steganography using ICMP Payload21:56
Objective of this Lab is to understand about steganography using ICMP Payload, Scapy tool used for steganography using ICMP payload
Trojan, Backdoor &Virus & Countermeasures38:15
Objective of this Lab is to understand about Trojan, Backdoor and Viruses, Suggesting & Implementing Countermeasures

Prorat
Email Security55:54
Objective of this Module is to understand about common E-mail Protocols, E-mail Encryption, Digital Signature.
Configuring Host Based Firewall (Linux)18:44
Objective of this Module is to understand about ,basic concepts of Firewall, basic techniques for Configuring Firewall, host-based firewall & their configuration.
Configuring Network Based Firewall (NGFW) FortiGate UTM1:22:13
Configuring Network Based Firewall (NGFW) as an Example FortiGate UTM

Fortinet is the pioneer of secure networking, delivering flawless convergence that can scale to any location: remote office, branch, campus, data center and cloud. FortiGate is the heart of FortiOS Everywhere, providing deep visibility and security in a variety of form factors, including container firewalls, virtual firewalls, and appliances.
Brute Force Attack in Web Application47:22
In this lab, security of a web application would be analyzed. The burp Suite tool would be used to get the login credentials by using brute force attacks.

Burp Suite
Password cracking
Brute Force Attacks
Command Injection in Web Application39:59
In this lab, security of a web application would be analyzed by using command injection attacks. The unsecure web application would be secure coded to mitigate the command injection attacks.
Cross Site Request Forgery in Web Application16:49
In this lab, security of a web application would be analyzed by using CSRF attack. The unsecure web application would be secure coded to mitigate the CSRF attacks.
XSS Reflected in Web Application14:17
In this lab, security of a web application would be analyzed by using XSS (Reflected) attack. An 'attacker' can inject their own scripts into the web application and change the password using curl string in Kali Linux.
XSS Store in Web Application9:25
In this lab, security of a web application would be analyzed by using XSS (Store) attack. Allow an 'attacker' to inject malicious scripts into the database.
SQL Injection in Web Application38:58
In this lab, security of a web application would be analyzed by using SQL injection. SQL injection allows unauthorized people to use SQL syntax to query the web server database backend; it is called injection because the SQL syntax is inserted into web application variables.
vulnerability scanning and penetration testing1:22:35
Vulnerability scanning
Penetration testing
Nessus
OpenVas GVM
ZAP
Metasploit framework
Msfconsole
SOC , SIEM , Isolate Compromised Host Using 5-Tuple Lab25:46
In this lab, you will review logs that were gathered during the exploitation of a documented vulnerability to determine the compromised hosts and file.

Security Onion virtual machine
SIEM
SOC

Advanced Network Scanning Part149:33
Tools to be used : NMAP and SCAPY
Diving into Important Network Protocols (TCP, UDP, ICMP, ARP, etc)
Nmap –advanced.
Host Discovery
Tracing the Route
Port Scanning
Idle scan
OS and Service Fingerprinting
Learning Python essentials
Packet Crafting with scapy
Advanced Network Scanning Part21:55:57
Tools to be used : NMAP and SCAPY
Diving into Important Network Protocols (TCP, UDP, ICMP, ARP, etc)
Nmap –advanced.
Host Discovery
Tracing the Route
Port Scanning
Idle scan
OS and Service Fingerprinting
Learning Python essentials
Packet Crafting with scapy
Advanced Network Scanning Part354:00
Tools to be used : NMAP and SCAPY
Diving into Important Network Protocols (TCP, UDP, ICMP, ARP, etc)
Nmap –advanced.
Host Discovery
Tracing the Route
Port Scanning
Idle scan
OS and Service Fingerprinting
Learning Python essentials
Packet Crafting with scapy
Software Exploitation Part11:29:03
CPU Instructions & Registers
Functions, High Level View
Stacks and Stack Frames
Memory Addressing
Managing Stack Frames
Functions, Low Level View
– Understanding the Process
– Call Types
– Assembly Language
– General Trace
– Code Optimizations
– Stack Reliability
Memory Corruption
Software Exploitation Part221:56
CPU Instructions & Registers
Functions, High Level View
Stacks and Stack Frames
Memory Addressing
Managing Stack Frames
Functions, Low Level View
– Understanding the Process
– Call Types
– Assembly Language
– General Trace
– Code Optimizations
– Stack Reliability
Memory Corruption
Debugging Fundamentals for Pentesters47:18
Immunity Debugger
Debuggers , Popular Debuggers, Which to use?
Shellcode
Shellcode Basics
Shellcode Types ( bind TCP, Reverse TCP)
Useful Shellcode Tools
Memory Corruption part 152:34
Memory Corruption Classes
Memory Corruption Exploits
Vulnerability Analysis
Stack Buffer Overflows
Identify Usable Characters
Identify Offsets
Fill in Memory Addresses
Identify Usable Space
Drop in Payload
Memory Corruption part 21:41:43
Memory Corruption Classes
Memory Corruption Exploits
Vulnerability Analysis
Stack Buffer Overflows
Identify Usable Characters
Identify Offsets
Fill in Memory Addresses
Identify Usable Space
Drop in Payload
Vulnerability Identification and Fuzzing1:23:40
a quick road to bug hunting
Taking Advantages of Bugs
Exploits Language
Bug Hunting Formal Process
Common Techniques
Fuzzing
Fuzzing History
Fuzzing Methods
What data can be Fuzzed?
What does Fuzzed data consist of?
When to Fuzz?
Two Approaches
Determine Exploitability
Types of Fuzzers
Common Fuzzers
The Fuzzing Process
Protocol Fuzzing
SPIKE
Jumping Strategies and SEH Exploitation22:13
JMP (or CALL)
POP RET
PUSH RET
JMP ret + offset
Blind Return
SEH
POPAD
Short Jumps
Conditional Jumps
Backward Jumps
Weird Relative Backward Jump
Exploit Mitigation and Structured Exception Handling part11:59:28
Visual Studio /GS Flag
Structured Exception Handling
SEH Frame Overwrite Attack
Visual Studio SafeSEH
SEH Case Study
SEH Based Exploitation
Structured Exception Handling part21:39:38
SEH Case Study
SEH Based Exploitation
Egg Hunter1:42:37
Egg Hunting Conditions
How it works?
Egg Hunting Disassembly
Exploit Mitigation
How to create crack in portable executable file (PE)46:26
Data Execution Prevention DEP and Return Oriented Programming ROP48:17
Data Execution Prevention DEP
Return Oriented Programming ROP
Bypassing DEP
Return to lib ret2lib
Return Chaining
ASLR Address space layout randomization
Bypassing ASLR
Capture The Flag2:22:08
Target #1 - Windows 7 (Exploitation)
1. Exploit the vulnerable service on this target.
2. Create as many tunnels (pivoting points) needed to reach and attack the Windows 2008 Server target.

Target #2 - Windows 2008 Server (This must be attacked using a TUNNEL created from Target #1)
3. Find a SQL Injection vulnerability, exploit it and change administrator’s password and dump the whole database. Also, find what is the MySQL root password? Tasks must be done using SQL injection ONLY,!
4. Show proof of a Cross Site Scripting (XSS) vulnerability and how could an attacker (tester) benefit from it (e.g. gain the cookies of a user).
5. Find a Remote Code Execution (RCE) vulnerability and use it to add user to the system.
NOTE: Do not use the user added to complete all tasks. Each goal must be achieved using the mentioned vulnerability.
6. Find any open shares on the system, and show proof how it could be used for exploitation (hint: psexec hint :need user).
7. Find any network service and try to figure out their users and passwords (Brute force). You can use the predefined list of usernames and passwords given.
8. Find a file upload vulnerability and use it to upload a PHP Shell. Show proof of what could be done using the phpshell (note: could be a meterpreter or a c99 shell as the one given).
9. Present a final report and a proper presentation of your achievements.

Requirements

No experince needed. you will learn everything you need to know
لا حاجة للخبرة. سوف تتعلم هنا كل ما تحتاج إلى معرفته

Description

####################################################################
## ####
####################################################################

تغطي هذه الدورة أغلب المواضيع التي تغطيها الدورات العالمية التالية : (CCNA CYBER OPS , CEH, OSCP PEN-200, CHFI)

هذه الدورة تقدم بشرح باللغة العربية ومحتوى المادة باللغة الانجليزية , تتكون من 80% عملي و 20% نظري , ويتخلل الجزء العملي شرح تفصيلي يغطي الجزء النظري المتعلق بالعملي وتتكون من اكثر من 100 لاب عملي وكذلك المادة قابلة للتنزيل هي وجميع البرمجيات التي تحتاجها حيث تحتوي المادة على كثير من نسخ أنظمة التشغيل التي تحتوي على ثغرات امنية ليتم التطبيق مباشرة عليها.
تتعلم في هذه الدورة الأساسيات التي تحتاجها لتدخل الأمن السيبراني , ثم تتقدم الدورة تدريجيا الى أن تصبح محترفا في مجال الأمن السيبراني
تتعلم فيها المواضيع التالية :
- شبكات الحاسوب وأمن شبكات الحاسوب (Computer Networks and Computer Networks Security)

- أنظمة الحماية والجدار الناري (Firewall)

- الأمن السيبراني ومركز عمليات الأمن السيبراني (SoC and SIEM) (Cyber security and the Security Operations Center)
- نظام تشغيل لينوكس (Linux Operating System)
- التشفير (Cryptography and the Public Key Infrastructure)
- اختبار الاختراق باستخدام Kali Linux و Parrot و Python
(Penetration test using Kali Linux and Parrot , Python scripting for penetration testing)
- تحقيقات الأدلة الرقمية (Digital forensics)
- القرصنة الأخلاقية (Ethical hacking)
- Ethical hacking (Email Security, VPN, Firewall, Brute Force Attack in Web Application, Command Injection, Cross Site Request Forgery, SQL Injection, XSS)
- Ethical hacking ( Information Gathering , Sniffing, ARP Cache Poisoning , MITM, Brute Force, DoS ,DDoS, Spoofing, Steganography, Phishing, create malware)
-Bug hunting ( JMP ESP, fuzzing), Reverse shell and bind tcp , Msfvenom, Metasploit framework, PE how to create crack and inject malware inside it.
- Capture The Flag ( CTF)

Who this course is for:

This course is for anyone who wants to become an expert in security, privacy, and anonymity.
The ideal student for this course is technically minded with an interest in how hackers hacker, how trackers track and what you can do to stop them.
For IT staff
for lawyers and prosecutors

Cyber Security Course دورة الأمن السيبراني الشاملة

What you'll learn

Explore related topics

Course content

Introduction to Cyber security and the Security Operations Center1 lecture • 57min

Linux Operating System2 lectures • 3hr 6min

Computer Networks Fundamentals5 lectures • 7hr 3min

Threats and Attacks4 lectures • 3hr 37min

Cryptography1 lecture • 1hr 40min

Ethical Hacking ( Practical Labs)22 lectures • 13hr 53min

Quick road to bug hunting16 lectures • 19hr 57min

Digital Forensics2 lectures • 3hr 54min

Requirements

Description

Who this course is for: