Cyber Security For Beginners

Learn footprinting using search engines to gather target information, including office locations, contact details, emails, and employee names, by mastering Google search operators and file type filtering.

Learn footprinting using web services by gathering domain information and discovering subdomains for google.com, using sub lister in Kali Linux across multiple search engines.

Discover footprinting through social sites by using opencorporates to gather company details, including addresses, contact numbers, services, and directors, while exploring social networking platforms like Twitter, Facebook, LinkedIn, and Instagram.

Discover how website footprinting reveals software and operating system versions, web servers, languages, and technologies, how archive.org snapshots expose historical configurations, and JavaScript weaknesses.

Explore how cewl in Kali Linux builds a word list from a target website and saves it to a password dictionary file using the -w option.

Explore whois footprinting by querying domains to reveal registrar, creation and expiration dates, name servers, DNS details, and related IP history and hosting data.

Perform DNS footprinting with nslookup to discover DNS servers and records (A, SOA, MX, NS) for the target domain, and verify with ping, using Kali and root access.

Explore dns footprinting with the prebuilt tool dnsenum in kali, gathering host addresses, mail records, server ips, and reverse ip checks to identify domains hosted on same servers.

Learn network footprinting using the advanced IP scanner to scan a local IP range, identify devices, IP addresses, manufacturers, and MAC addresses, and distinguish live devices from powered-off ones.

Learn network scanning to identify hosts, ports, services, and applications running on the target, using nmap, zenmap, and hping3; perform icmp discovery with -c limits and basic port scans.

Learn to perform a tcp scan with the dimitri information gathering tool, which reveals subdomains, port scans, and whois lookups, using -p for tcp scan and -O to save output.

Use nmap to perform stealth scans and identify open ports such as 23 and 80, while other ports are filtered, then scan a /24 network range with -T5 speed.

Use fping to scan devices and check if hosts are alive, then use nmap to reveal open ports and services, including 23 and 80 on 192.168.0.1 and 135/139/445 on 192.168.0.109.

Download and install Zenmap, the graphical version of Nmap, to run an intense scan, view open ports, and explore host topology and details.

Learn how to identify the operating system and version on a target using ID serve and nmap, and understand how attackers exploit this information to find vulnerabilities.

Explore mac flooding with yersinia and its graphical interface, learn to launch and stop a CDP flooding attack, and view attack details in the running attacks panel.

Explore how a DHCP attack and DHCP starvation flood a DHCP server with discover packets, exhaust IP addresses, and cause denial of service, demonstrated with Kali Linux, Yersinia, and Wireshark.

Explore DNS poisoning, a technique that manipulates DNS records to redirect users to malicious sites, demonstrated via a DNS chef setup and a spoofed IP for phishing and malware.

Protect against sniffers by using encrypted protocols like https and SftP; detect sniffers via promiscuous mode NIC checks with nmap and SRP ARP monitoring, demonstrated on Windows 10.

Examine how social engineering exploits human behavior to breach security and master five techniques: authority, scarcity, social proof, fear, and trust, plus practical countermeasures.

Explore denial of service attacks, including DoS and DDoS, and see how a syn flooding attack using Kali Linux overwhelms a target with traffic, draining resources and disrupting services.

We demonstrate an icmp flood attack by using kali linux to run hping3 with 100 icmp packets to a windows 10 target, while wireshark captures the live traffic.

Learn how the ping of death attack degrades a target by sending 65,500 bytes continuously with ping, observe rising traffic, and stop the attack using Ctrl+C.

Explore the syn flood concept through a metasploit-based demo on Kali Linux targeting Windows 10, and learn practical countermeasures such as firewall filtering, bandwidth management, and reverse proxy monitoring.

demonstrates network level session hijacking by capturing cookies to seize a user session, with practical steps using Burp Suite and Firefox to intercept traffic and credentials.

Explore web server concepts, components like root directory, server root, conf, logs, CGI bin, and virtual hosting, plus practical enumeration using http print.

Learn web server reconnaissance with Skipfish in Kali Linux, capturing scan output and reviewing directory listings for vulnerabilities. Use netcat for footprinting to identify the server name and nginx version.

Learn to identify a web server version with the Metasploit http_version module, then use the files_directory module with a dictionary to locate potentially sensitive files.

Learn to scan a web server for options with the Metasploit Framework, configure the option module, and run a web dev scanner to verify allowed methods and server status.

Create a local offline copy of a website using the Hdtracks website copy tool, setting up a project and target URL to mirror the site on your drive.

Learn vulnerability scanning with Nikto, an open source web server scanner. Run Nikto -host against a server and review the vulnerability list with counts and timestamps.

Learn to perform web application brute forcing with dirbuster to discover directory structures, generate reports, and interpret results.

Upgrade Kali Linux by verifying repositories, updating the package manager, and performing a full upgrade to install the latest packages.

Explore web application exploitation concepts, including dynamic server-side processing, three-layer architecture (presentation, business logic, database), and the role of web services in interoperability.

Learn how sniffing captures a password from an unencrypted session using the Ettercap tool, demonstrated on an unencrypted http login. See why https protects credentials by encrypting traffic.

Learn to use medusa to crack web credentials with username and password wordlists, and perform practical demonstrations cracking ftp and ssh logins.

Explore broken authentication and insecure login forms, learn how credentials are verified, sessions are created and tracked via cookies with session IDs, and how improper logout management can compromise access.

Explore os command injection attacks, selecting the os command injection option and observing dns lookup results blocked by a firewall, then reveal users with net user showing nobody and B.

Learn how cross-site scripting attacks exploit web vulnerabilities by injecting malicious JavaScript, using reflected or stored XSS to reflect input and steal session cookies.

Learn how brute spray performs brute-force attacks against authentication on ftp ports, using nmap outputs and prepared username and password lists to illustrate the attack workflow.

Spot authorization attacks using URI by demonstrating how bypassing login can expose restricted documents, reveal folder access weaknesses, and highlight vulnerabilities in session-based access controls.

Learn how parameter based access control can be abused by manipulating the URL parameter to gain higher privileges, demonstrated on a session management administrative portal.

View and protect session IDs to prevent session hijacking by hackers; the lecture demonstrates how session IDs in URLs can be used to relaunch sessions and why never reveal them.

Learn three topics: web api basics with http-based data exchange and types such as soap, rest, xml, rpc, and json rpc; then webhooks; finally web shell threats.

Explore how sql injection exploits web application vulnerabilities to bypass security, gain unauthorized database access, and manipulate data, highlighting risks in insecure web apps.

Learn how to enumerate a backend database to determine the number of columns using SQL injection techniques like order by and unknown column errors, confirming seven columns.

Demonstrates union SQL injection to determine column counts, enumerate the database and tables, and extract user data such as login and password fields, including hashed passwords.

Learn to perform a blind boolean SQL attack using true or false responses to identify the MySQL version and the database name.

Discover how SQL injection bypasses web application logins on a controlled demo banking site, illustrating authentication weaknesses and how security tools detect such vulnerabilities.

Learn to detect sql injection with a web browser using the web cruiser scanner to audit a web application. Review obsolete backup settings and information leakage findings to protect sites.

Explore wireless networks, their mobility, and how access points connect to local area networks; weigh advantages like minimal wiring and cost effectiveness against security, bandwidth, and interference.

Learn to crack WPA and WPA2 using aircrack-ng, including selecting a wireless adapter, enabling monitor mode, capturing a handshake, and performing a dictionary attack to crack the password.

Learn how encryption encodes plaintext into ciphertext with algorithms and keys, protects data during transmission or storage, and compare symmetric and public key encryption.

Learn how to encrypt files and folders using the crypt for free tool, set a password, decrypt securely, and understand why deleting originals enhances real-world security.

Learn to use hash calculator to generate and compare md5 hashes for a file, demonstrating how tampering changes hash and how integrity can be verified.

Learn to download, install, and run metasploitable 2 in VirtualBox, explore its intentionally vulnerable linux environment, and practice basic root access and management commands.

download metasploitable three from GitHub or Rapid7, unzip the zip, and open the dot ova file in VirtualBox; follow the same process as Metasploitable two.

Explore honeypots, comparing production and research types, their roles in internal networks, and how to deploy and use the paint box tool in Kali to detect and deter intruders.

Learn website penetration testing to identify vulnerabilities and defend against ten attacks, including SQL injection, cross-site scripting, session hijacking, and remote code execution.

download and install Xampp on Windows, set up a local web server with Apache, MySQL, PHP, and Perl, and configure the control panel.

Understand how a web server hosts websites and serves content to clients via an IP address, using Apache and Zamp, with front end, back end, and MySQL database.

Set up a web server with Apache using Xampp, host a page in htdocs, map a domain to a public IP via DNS, and access it through localhost or 127.0.0.1.

Demonstrates a simple SQL injection attack on a login page, analyzes the resulting vulnerability, and outlines building a secure login system with front end, back end, and database.

Build a front-end login using HTML with username and password fields and a submit button, wiring data to verify.php via an action and named fields.

Demonstrates sending login data with get and post, explains how get exposes credentials in the URL, and shows switching to post and creating verify.php in PHP.

Create a php back end script named verify.php that receives username and password via post, prints them with echo, and explains variables in php; conclude by preparing the database.

Learn to create a MySQL database and a users table with an auto-incrementing id in phpMyAdmin via Xampp, defining int and varchar fields for id, username, and password.

Insert data into the users table by adding John and Harry with passwords, then connect verify.php to database using mysqli_connect with localhost, root, blank password, and the practical one database.

Learn basic SQL queries to fetch user data from a users table using select, from, and where clauses; practice with conditions and using select star to retrieve all fields.

verify.php demonstrates counting query results with mysqli_num_rows to validate login credentials and display welcome or error messages, while setting up SQL injection security testing in the next video.

Demonstrates how an sql injection attack on a login page bypasses authentication by injecting or 1=1 into username and password fields.

Learn how sql injection can grant login access via select star on the users table, and restrict the result to one row for a unique username, securing the login page.

Explore how an insecure login page is vulnerable to SQL injection, demonstrating how crafted inputs bypass authentication, and conclude with securing practices using username and password hashing.

Learn how to protect credentials by hashing usernames and passwords with PHP, using MD5 as a one-way encryption, and viewing how hashed values replace plaintext in a sample app.

Learn how to secure a login page by hashing the username and password with MD5 before database checks, ensuring hash-based authentication and protection against SQL injection.

Examine cookies and sessions, including how a session file stores credentials and grants access. See how stealing that file enables session hijacking to open Facebook accounts without re-entering credentials.

Explore how a PHP login flow uses header location to redirect to home.php, letting users reach the welcome page without credentials via back button or direct URL.

Secure a PHP login flow by starting a session and using session variables across login.php and home.php. Implement session checks and logout with session_destroy to prevent back navigation.

Secure the home page by enforcing session checks and redirecting to login.php when the session is empty, preventing direct URL access and ensuring only valid credentials grant access to home.php.

Explore how a network is structured, including routers, IP addresses, and the default gateway, and examine MITM, ARP poisoning, session hijacking, DNS spoofing, and DDoS attacks.

Demonstrates sniffing attacks and man-in-the-middle via ARP poisoning using Cain and Abel in a virtual lab, showing how HTTP login credentials are captured and the need for HTTPS with SSL.

Download and install VirtualBox, import the Kali Linux VM, boot it, and perform apt-get update, upgrade, dist-upgrade, and autoremove for a secure penetration testing setup.

Demonstrate sniffing and spoofing with Ettercap in Kali Linux by performing a two-way ARP poisoning attack on a Windows 7 host to capture login credentials over http.

Discover how dns spoofing redirects a victim's web requests using kali linux and the etercap dns spoof plugin. Learn to locate and edit eter.dns, enable arp poisoning, and capture credentials.

Explore how phishing pages imitate real sites to harvest user credentials, illustrating DNS spoofing and the process of capturing usernames and passwords.

Demonstrates cookie stealing and cookie injecting using Wireshark and a browser editor to illustrate how an attacker can hijack a session.

Explore cross-site scripting (xss) by building a posting form with a vulnerable frontend and a backend that saves posts to a MySQL database. Perform the attack and secure the system.

Develop a PHP home page that posts and displays user updates from a MySQL database, sorts posts by latest, and reveals an XSS vulnerability for later practice.

Demonstrate a practical cross-site scripting attack by building a vulnerable app, injecting html and javascript, and observing defacement and alert exploits in a live demo.

Explore how cross-site scripting enables cookie stealing and session hijacking, including attacker workflows with PHP, back-end file handling, and JavaScript document.cookie to hijack sessions.

Learn to defend a website against cross-site scripting by applying an HTML special chars filter to user input in PHP, preventing script execution and safely displaying status updates.

Demonstrates advanced SQL injection techniques using Kali Linux, sqlmap and Jay SQL injection to test a target URL, reveal databases, tables, and data through blind SQL injection and dictionary attacks.

Explore how databases organize data with tables and views, where views act as virtual tables that combine data from multiple tables via queries or scripts into a single output.

Explore sequences as an automatic numbering system that prevents gaps, and learn how materialized views store the output of queries alongside tables and views in a database.

Understand database triggers as actions based on events between related tables, automatically updating related outputs when data changes.

Explore stored procedures and packages, where procedures perform actions following a process, functions are the smallest logical units, and packages group procedures in a sequence like a category-specific food package.

Master data types and their role in organizing data within a table's columns so databases can accurately return query results, including character, integer, decimal, and date time stamp.

Explore integer, decimal, and number data types, distinguishing whole numbers from decimals with precision and scale, and learn how fixed versus flexible precision affects data validation.

Define date as a data type that stores only day, month, and year, and use timestamp to store date and time with hours, minutes, seconds, and milliseconds.

Explain clob, blob, and b file data types for storing resumes, photos, and audio or video in database columns, and why tools are needed for file storage.

Explore data types and the role of data constraints in validating input. Learn about primary keys, foreign keys, unique keys, not null, and check constraints.

Identify the primary key as the single, unique column in a table that cannot contain duplicates or null values. Auto index this column to enable fast data retrieval.

Explore how a unique key can span multiple columns, enforce no duplicates, allow nulls, and enable auto indexing to support data integrity in your tables.

Explore foreign keys, also known as reference keys, that link a primary key across tables; multiple columns can form a foreign key, with duplicates and null values allowed.

Learn how not null constraints prevent blank values in database columns, allow duplicates, and enforce mandatory data entry.

Apply check constraints to any column to enforce a specific condition, such as salary values greater than 10,000, and prevent invalid inputs with errors.

This lecture introduces sql as structured query language and outlines five categories. It explains data definition language and its ddl statements—create, alter, drop, truncate, and rename—to define database objects.

Learn how data manipulation language (DML) manipulates database data using insert, update, and delete, and distinguish it from truncate for removing all table data.

Learn the basics of transaction control language (TCL) in databases, mastering commit, rollback, and savepoint to manage and undo transactions.

Learn data control language (dcl) and how to grant or revoke access for database users, including permissions like read, insert, change, and delete.

Explore the data retrieval language in SQL, focusing on the select statement to retrieve and view data from a database.

Explore data definition language basics through the create statement to define a table with two columns: exam_code as varchar(10) and exam_type as char(10); end with a semicolon.

Master sql ddl basics by creating tables with multiple columns and data types like integer and varchar, separated by commas. Understand data versus statements case sensitivity and saving scripts reuse.

Explore table design by defining columns, data types, and constraints such as primary key, not null, references, foreign key, unique constraints, and check conditions.

Explore how to name constraints in create table statements, enabling easy modification later, with examples of primary key, not null, reference, unique, and check.

Explain why naming constraints matters in databases by showing how descriptive names, like pk for primary keys and exam domain for columns, simplify identifying tables and constraints.

Use the create statement with as select star from a table to copy an entire table, preserving all columns, rows, and data types for backup.

Explore how the alter statement in DDL modifies data in the database, and learn its six functionalities: add, modify, enable, disable, drop, and rename.

Learn how to alter tables to add columns, define data types, and apply constraints such as primary key, check, not null, and foreign key in SQL.

Learn how to rename a column with alter table and rename column, specifying the current name and new name, using the syntax and semicolon, then verify with a table refresh.

Demonstrates using alter table to modify a column’s size, noting you can increase or decrease on empty tables and not on tables with data, and how to apply not null.

Master drop functionality in alter table statements to remove columns and constraints, including dropping not null constraints and primary keys with cascade when referenced by foreign keys.

Learn how to manage database objects with create, alter, truncate, rename, and drop statements, with syntax and practical examples for truncating data, renaming tables, and dropping tables.

Learn the basics of data manipulation language (DML) after DDL, and use insert, update, and delete to manage data in the database.

Learn insert types in DML 2, including inserting simple values, prompting for input, and selecting columns, plus insert with select and by list of columns, honoring not null constraints.

Learn to insert values into a table using insert into table values, handling numbers, varchar fields with single quotes, and nullable columns with foreign key integrity constraints.

this lecture demonstrates building an insert into table statement with pop up window prompts using ampersand inputs for columns like xm_id, xm_name, xm_code, exome_state, and exome_fee.

Explore SQL insert commands by selecting specific columns and values, duplicating data, and using insert with select to copy rows from one table to another.

Learn to insert into specific columns from one table using select with a where clause to copy a single row into another table.

Learn update and delete statements on the XM1 table to modify xm code values and remove rows, using is null for nulls and noting duplicates can delete multiple rows.

Learn to use commit, rollback, and savepoint to manage data changes in a session. Commit saves changes after insert, update, or delete; rollback undoes a commit; savepoint marks progress.

Explore data control language (DCL) with grant and revoke, showing how to grant select, insert, update, delete, create on a database or table to users or roles, including grant option.

Explains data retrieval language (DRL) and demonstrates select statements, including selecting all columns, specific columns, conditional retrieval, operators, like, order by, and subqueries.

Discover how built-in SQL functions boost query efficiency by using four main types: character, math, date/time, and conversion. Learn about each type one by one.

Master seven string functions—concat, init cap, instr, substr, length, lower, upper, and trim—to learn how to build, locate, extract, measure length, and trim text.

Explore string functions in Oracle SQL with live examples of concat, init cap, and instr, showing how to join words and locate characters with start positions.

Explore substring, length, lower, upper, and trim functions with starting positions, negative indices, and space handling to extract, convert, and clean text.

Learn four numeric functions—count, row numbers, sum, and truncate—and see how they operate on table data, including the numeric use of truncate versus trim.

Explore numeric functions in Oracle SQL with practical examples using air.countries and hr.employees, including count, max (highest salary), rownum, sum, and distinct to handle duplicates.

Explore how truncate controls decimal precision by displaying up to two digits after the decimal, with examples for positive and negative numbers and ignoring unit, tens, and hundreds places.

Explore the date and time function's five types, including system date, system timestamp, current date, current time stamp, and last day of the month.

Learn how to use Oracle date and time functions, including system date, system timestamp, current date, and last day, with live server examples and time zone details.

Explore essential SQL conversion functions, including two date, two character, and two number, with practical examples to convert data to date, character, or numeric formats.

Demonstrates converting strings to date with practical format codes, turning inputs into year month date and time formats. Show how format changes affect the stored date and default display.

Convert numbers to strings and strings to numbers with practical examples, covering decimal places, negative values, and formatting such as dollar signs and leading zeros.

Explore how inner, left outer, right outer, and full outer joins combine data from two tables to retrieve matching and related records, using Oracle join examples.

Explore inner, left outer, right outer, and full outer joins by linking employees to departments on department id to display each employee’s first name with their department.

install Red Hat Enterprise Linux 7.3 from installation media. configure language, network, hostname, and credentials, enable server with gui, accept license, and complete first login.

The terminal serves as the interface between user and system, translating commands into machine language and displaying outputs in a human readable format.

Learn to use ssh for secure remote access, verify fingerprints in the knownhost file, and connect to localhost or a remote host with a password.

Learn to replace password login with ssh keys by generating an rsa key pair and copying the public key to a server using ssh-copy-id, enabling passwordless authentication.

Master the Vim text editor, navigate the Linux directory structure, and work with files while covering user and group management, permissions, and processes.

Master Vim, the vi improved text editor for Linux, by navigating command mode and insert mode, using A, I, O to enter text, and :wq! to save and quit.

This vim-ii tutorial walks beginners through creating a file in the home directory, editing text, saving, undoing, copying, pasting, global substitution, and navigation commands.

Explore the Linux directory structure from the root slash to key folders such as /bin, /boot, /dev, /etc, /lib, /home, and /var, and how they organize system files.

Explore essential Linux file operations with cat, touch, head, tail, wc, cp, mv, ls, ll, and rm, learning how to create, view, copy, move, rename, and delete files and directories.

Learn how linux user accounts connect to processes and view /etc/passwd to identify username, uid, gid, primary group, gecos, home directory, and the default bash login shell.

Learn to manage users with a command-line utility: view options with --help, create users with department and shell settings, set expiration, verify /etc/passwd, and assign passwords, noting root privileges.

Learn practical user management commands to lock and unlock accounts, assign secondary groups, rename usernames, and set or modify user IDs for secure server administration.

Explore how Linux handles users and groups with /etc/passwd, /etc/group, and /etc/shadow, including primary and secondary groups, GID values, and password aging and expiration settings.

Manage user passwords with the password command, including locking, unlocking, and expiring passwords, configuring maximum and minimum lifetimes with warning days, and viewing current settings for a user.

Explore ownership and permissions in Linux, detailing user, group, and others ownership, the three-permission sets (rwx), and how Linux checks owner, then group membership, then others to apply permissions.

Learn how to manage ownership and permissions by using chgrp and chown to set directory owners and group owners, using staff and sales examples, before applying permissions.

Learn basic permissions—read, write, and execute—and their effects on files and directories. Understand that read on files opens data, read on directories lists contents, and execute enables running or entering.

Learn to manage basic file and directory permissions with chmod using numeric and symbolic modes, understanding read, write, and execute permissions for user, group, and others.

This lecture explains special permissions, including set user ID and set group ID, and how they let executables run as owner or group owner, dangerous when misused, with directory inheritance.

Explore special permissions, including set user id and set group id, and the difference between absolute and relative modes. Learn to use chmod with plus signs and the sticky bit.

Explain how the sticky bit restricts deletion in directories, allowing only the directory owner or parental directory owner, shown in a staff directory example with Jerry and Harry.

Understand how access control lists extend permissions to multiple users and groups for files and directories, and learn to set default ACLs and manage them with setfacl and getfacl.

Explore how access control lists manage permissions using getfacl and setfacl, including recursive and default acl settings to grant staff and sales groups access while preserving existing permissions.

Explore how Linux boots services, reveal running processes with ps ux and wc, and distinguish jobs from processes, including backgrounding with control z and bg.

master linux process management with shell jobs, background and foreground control, and commands like ps, top, kill, pkill, and systemctl status.

Learn to view and filter system logs with journalctl, including boot-specific logs, error highlighting, and real-time updates. Explore integrating journalctl with syslog, plus logrotate basics and setup.

Boot into rescue mode via grub and drop to a root shell using rd.break, remount root as read-write, chroot to sysroot, set a new root password, and relabel SELinux.

Master Vim basics: search characters or words with n, N, and /, highlight results with hlsearch, and use character, line, and block visual modes along with macros and registers.

Explore configuring vim with a vimrc, using set options like HL search, number, backup, and color schemes; manage buffers and multi-file workflows to streamline editing.

Practice three terminal openings, create a Vim file named student, view first eight lines of /etc/passwd and last five of /etc/shadow, copy file, and rename new folder to old folder.

Master vim basics in part one, covering colon help, gg to the top, insert and replace modes, visual mode tweaks, and essential text editing like joining lines.

Open a terminal from context menu, applications, or search, then use vim to create and save a file. Practice head, tail, cp, mkdir, and mv for basic file tasks.

Set up a sysadmin group with Tom and Jerry as secondary members, with Harry lacking an interactive shell. Schedule a cron job for Jerry at 14:23 to run /bin/echo hello.

Create a sysadmin group and three users with passwords and no login for Harry; set /common/admin to 2770, run a cron job for Jerry, and ACLs for Natasha and Sarah.

Create 400 mb ext4 partition mounted at /common; add user neo with uid 1337 and password; search for root in /ATC/passwd and save to /search; back up /ATC to /home/backup.tar.bz2.

Partition and format /dev/sdb with ext4, mount to /common, and verify with df -h. Create neo with uid 1337, then grep root in passwd and tar /etc.

Explore useful linux commands like rev, factor, and yes, and observe a controlled demonstration of a forkbomb, highlighting its risk and how it can exhaust system resources.

Discover the sam file as the most important pillar of Windows security, its location, why it’s inaccessible, and how passwords are stored as unreadable hashes.

Learn why Windows stores passwords as hashes, a one-way encryption that cannot be decrypted, and compare hash with traditional encryption to understand data protection.

Understand how Windows logins work, from typing a username and password to hash comparison with the SAM file. Explore open and closed login scenarios.

Explore how brute force can retrieve, disable, or change Windows passwords across XP to Windows 8, and why long, complex passwords and timely changes boost security.

Demonstrates brute force password cracking with Cain and Abel on Windows 7. Explains LM and NTLM hashes and its limits to XP through Windows 8, not 8.1 or 10.

Learn how to change a Windows admin password using the net user command, running command prompt as administrator. Understand why this bypasses password checks and how to verify the change.

Learn to manage Windows passwords with the net user command, including removing or changing local passwords across Windows XP to Windows 10, and note Microsoft account limitations.

Explore brute force password cracking on Windows using the Ophcrack live OS. Boot from USB or CD, target Windows XP to Windows 8, and note limitations on newer versions.

Explore how Ophcrack uses hash-based techniques to crack passwords by brute force, dictionary, and rainbow table attacks, including how passwords are converted to hashes and matched.

Demonstrate using an offline password cracker on a linux-based live environment to reset or disable Windows passwords across versions, including Windows 7 and Microsoft accounts.

Explore how Kon Boot provides current-session access to Windows without permanent password changes, using a bootable pen drive or CD to bypass passwords faster than offline password crackers.

learn to use lasersoft recovery suite to copy complete data from a windows target computer without a password, and to create an ISO image for bootable media.

Learn the five-step process used by hackers and ethical hackers: footprinting to gather information, scanning for weaknesses, gaining access, maintaining access, and clearing tracks.

Explore how attackers maintain access to a Windows system by building a back door and exploiting login screen vulnerabilities like sticky keys.

Discover how backdoors can grant data access from the login screen, using notepad and explorer.exe to view files and achieve graphical access on Windows, with notes on security limitations.

Explores how sticky keys can be used on Windows 7 to access a system, discusses file permissions and ownership by trusted installer, and covers the ethical considerations of clearing tracks.

Learn practical windows security by configuring bios boot order to hard disk first, enabling boot and bios passwords, and understanding syskey limitations to protect against live-boot attacks.

Explore steganography and how to hide important data behind images or files to protect privacy, with practical steps using binary copy, image sizes, and hidden archives.

Learn to apply and remove file and folder permissions in Windows via command prompt, using cackles to control access for users like everyone, guest, and admin.

Protect your system from attackers with the deep freeze software, which restores changes to the original state after logging off and blocks net user and sethc tampering.

Define malware as software, explain hackers' motives—data theft, ransomware, and spying—and outline entry methods: cracked software, spam, data sharing, removable media, infected sites, like virus, trojan, worms.

Explore a safe virtual-machine demonstration of a basic virus created with a batch script, illustrating how automation can generate folders and simulate looping execution in a controlled Windows environment.

Explore how a virus or worm could harm a Windows system by duplicating the Windows folder to exhaust disk space and overwhelm resources, illustrating potential damage and slowdown.

Examine how modifying the associated file for exe programs creates a virus, causing an icon change and blocked commands, then restoring the original x file resolves it.

Analyze how a basic virus creates a looping process in Windows, the challenges of stopping it, and the steps defenders take to intercept and prevent malware.

Demonstrate a basic virus that shows 'you have been hacked' popups and persistent log-off messages, creates random folders, slows the system, and shows protection steps in the next lesson.

Discover how an advanced virus disguises as a legitimate program using a VLC icon and batch file, running covertly with bat to x converter and command prompts on Windows XP.

Explore trojans, remote administration tools that grant attackers full control via a backdoor after install. A Troy-inspired example shows how disguised gifts and cracked software hide malware in downloads.

This lecture introduces the Beast Trojan and its server–client architecture, detailing reverse connections and the Trojan’s remote control features like files, registry, remote desktop, webcam, passwords, keylogger, and more.

Explore how a trojan operates in a controlled Python-based lab, using a hacker and target setup to illustrate client-server port communication, messaging, and command execution in a virtual environment.

Install python on Windows 10 across two virtual machines, verify via the command prompt, and configure the path and environment variables before starting to code our trojan.

Demonstrate a basic trojan built with python sockets on two virtual machines, with a listening target and a connecting attacker, illustrating client-server interactions.

Shows how to extend a trojan by sending data between hacker's and victim's PCs using sockets, encode the message with utf-8, and decode and display the received data in python.

Learn how to exchange data and remotely execute commands on a target pc using a Python trojan, including sending input, decoding data, and receiving command output.

Explore how ransomware uses symmetric and asymmetric encryption to lock data, using public keys for encryption and private keys for decryption, and how attackers demand Bitcoin payments.

Detect and stop malware using task manager and Process Explorer; identify suspicious processes like SVC host, compare system processes, and safely kill or delete malicious executables.

Explore the basics of web application hacking with a live SQL injection demo, including finding admin login pages and practicing on a local setup.

Discover how a website works by turning a computer into a web server. Install XAMPP, host web pages, and learn that Apache powers about 67% of sites on Linux.

Learn what xampp stands for—x for any os, apache web server, mysql, php and perl—and how to install it and set up htdocs.

Create a basic web page, save it as index.html, start apache in xampp, find the server IP, and access the page by the IP without typing the file name.

Learn to access a web page from another machine using a VM IP, and access the same page via the loopback address 127.0.0.1 and localhost for offline practicals.

Explore front end and back end concepts, build a login form with HTML, CSS, and JavaScript, and use PHP to validate credentials against a database to illustrate SQL injection concepts.

Design a website login form using HTML input tags for username, password, and a login button, with break tags, and test locally via localhost.

Add a heading using the head tag and h1–h6, then build a login form that sends the username and password to verify.php via the form's action attribute.

Learn how to use get and post methods to send form data from index.html to verify.php on localhost, and implement unique input names for username and password in PHP.

Develop a basic PHP server-side script that receives post data with $_POST, stores it in variables, and echoes the username and password to demonstrate front-end to back-end data transfer.

Create a user authentication database with a three-column users table (id, username, password) in MySQL via phpMyAdmin, starting the MySQL service in Xampp and approving firewall access.

Create a database named example and a new table with id as an auto-incrementing integer primary key, and username and password as varchar fields.

Insert data into a database by adding rows to a table, using the auto-increment feature, and illustrate with sample usernames and passwords.

Edit verify.php to connect the server script to the database, then verify the received username and password against stored records using mysql_connect with localhost, root, and the example database.

Demonstrate how to verify user credentials with a basic SQL query on the users table, using select star, where username and password, and/or logic to determine results.

Build and run a login query using PHP and mysqli, store the query in a variable, count rows with mysqli_num_rows, and display messages based on username and password.

See a simple sql injection attack that bypasses login on an unsecured page and gains access without original username and password, and learn how secure coding practices prevent sql injection.

Understand how a simple sql injection can grant access by making username and password checks true in the backend query, revealing website vulnerability and the need for secure defenses.

Illustrates how SQL injection can access a website and how to edit code to protect it by using limit one, a unique username, and hash-based query termination.

Learn how sql injection can bypass login using a known username like admin, with semicolon and hash comment, and explore beginner security protections.

Explore how hashing, a one-way encryption, protects websites from sql injection by converting usernames and passwords to hashes and validating login on the server.

Learn how to hash text with PHP using MD5 in Notepad++ and apply hashing to usernames and passwords to mitigate SQL injection attacks.

Learn how the login process hashes usernames and passwords with MD5 in verify.php, tests basic SQL injection, and discusses limitations and captcha as an extra defense.

Explains how google search operators like in url, site, in title, index of, and file type filter results from a hacker's perspective, with examples and cautions about confidential information.

Explore Google hacking with search operators to uncover IP cameras, login portals, password lists, and driving-license images via Google hacking database, learning why terms and conditions matter before uploading data.

Explore reverse engineering from a hacker's perspective, learn how license key validation works, and examine how software can be analyzed to bypass activation.

Learn reverse engineering from high level languages to executable binaries, and explore assembly language to understand microprocessor instructions, including why binaries aren’t reversible, with hands-on practice on a virtual machine.

Learn to open an exe's assembly code using a debugger, explore a trial keylogger, and understand how to run and inspect software inside memory with step-by-step debugging.

Master reverse engineering basics by debugging assembly code, setting breakpoints, and analyzing how license keys and registration codes are validated in software.

Explore how social engineering deceives targets, detailing human-based and computer-based techniques, including bank impersonation calls, OTP manipulation, and phishing.

Analyze a social engineering and phishing example by examining a login form, data submission to a server, and basic web page elements like username and password fields.

Explains how phishing pages imitate popular sites to harvest credentials, using 000 web host setup, WordPress, and a verify.php script to capture usernames and passwords.

explore social engineering through phishing to capture user credentials by building a php-based page that uses post requests to collect emails and passwords, demonstrating attacker techniques and web-page spoofing.

Explains how to create a phishing page to collect usernames and passwords, store them in a password.txt with PHP file handling, and redirect users to the real Facebook page.

Learn two methods to run Kali Linux in VirtualBox: use a preconfigured virtual machine or install from Kali Linux ISO, with steps like downloading from kali.org and launching in VirtualBox.

Kali Linux is a Debian-based distribution for high-level penetration testing and advanced security auditing, developed by Offensive Security and built with more than 500 inbuilt hacking tools.

Explore the differences between Unix and Linux, from Unix's Bell Labs origins and paid model with Mac OS, to Linux's free, open-source GPL clone and popular distributions.

Explore why Kali Linux is favored in cyber security: free, highly customizable, with hundreds of built-in penetration testing tools, secure, and inbuilt wireless drivers for broad device compatibility.

Download Kali Linux from kali.org/downloads and choose the format you need—virtual machines, bare metal, cloud, or live images. Check your system architecture (64-bit or 32-bit) to pick the right version.

Learn safe Kali usage options, including bootable USB live systems, write-once CD/DVD drawbacks, and dual-boot limits, with virtualization as the beginner-friendly solution.

Explore terminal basics as the interface between user and system; view active interfaces with ifconfig and identify IP address and netmask, and use apt-get update to manage Kali Linux software.

Learn to copy files with the cpp command, rename on copy, and move them with mv; view your current directory with pwd or wd, and navigate root and downloads paths.

Learn how to sort file contents using the sort command in both ascending and descending order, including reverse with the -r option, through practical file data demonstrations.

Master zip and unzip commands in the terminal, including creating a zip file, replacing files on prompt, and extracting to a specific directory with -d, plus ls checks.

Create a user with add user, set passwords, switch between users with su, and verify identity using who am i, highlighting root versus standard user contexts.

Learn the chmod command to change file and folder permissions for admin, group, and others, using r, w, x or numeric values 4, 2, 1 and 7 as full permission.

apply permissions to a folder and all its contents using recursive chmod 777, and verify propagation to files and subfolders.

Master essential Linux shortcuts for the terminal, including clear with ctrl-l, kill with ctrl-c, stop with ctrl-z, and copy-paste with ctrl-shift-c and ctrl-shift-v.

Explore anonymity and the limits of online privacy, noting you are never 100% untraceable, and learn about proxy servers, IP address changer, VPN, and Tor browser for legal use.

Learn how a proxy server hides identity by relaying requests, and how a firewall can be bypassed with a proxy to access blocked sites.

Download anon surf from GitHub, clone the repository, and run the installer to set up a proxy tool on Kali Linux, then verify your IP and switch proxies.

Explore how a vpn creates an encrypted, secure tunnel that hides your activity from websites, isp, and authorities, and learn how to set up a vpn.

Set up a free open vpn from vpnbook by downloading tcp 443 configuration, run it with sudo in terminal on Kali, and enter vpnbook credentials to establish a secure connection.

Explore how Tor, the onion router, enables anonymous online communication by routing through three or more proxy servers, using dot onion domains, and distinguish surface web, deep web, dark web.

Learn how to publish a website by linking a domain to hosting through ip addresses and dns records, and understand tor and the dark web.

Discover how Tor routes user traffic via entry, middle, and exit relays, applying protections, with the exit relay decrypting before reaching the destination; proxy chains further conceal origin.

Discover how proxychains in Kali Linux routes every tcp connection through a chain of proxies such as tor or http/https, and learn to install tor and proxychains when missing.

Explore using Tor and Proxychains in Kali to change your IP by enabling dynamic chain and adding socks5 127.0.0.1:9050.

Learn to temporarily change your mac address (mac spoofing) on Kali using ifconfig, bringing the connection down and up to verify a new six-octet address, note the change is temporary.

Explore how to change a mac address using the inbuilt mac changer in Kali, including show, version, random, manual mode, and reset options with sudo and eth0.

Footprinting gathers information about a target, revealing host details like operating system, networking, registrar, services, and ports; use the Dmitry tool in Kali for this gathering.

Explore dns enumeration to reveal a records, name servers, mx records, and zone transfers, using dns name and kali tools to uncover dns data, ip addresses, emails, and open ports.

Explore how dnsenum reveals name servers, A records, and mail server details for a target. Learn brute force with dns.txt and AXFR, and dnsenum comes with Kali for easy use.

Practice brute force techniques using a password dictionary word list and dns map to enumerate subdomains of google.com, revealing IPv4 and IPv6 addresses.

Trace DNS using the DNS tracer to map the chain of domain name servers from the hostname to the target, identifying each server in the path and the IP address.

Learn to use nmap for network mapping, detect live hosts and services by scanning IP ranges in Kali Linux, and interpret results like gateways, MAC addresses, and open ports.

demonstrates using nmap to perform service and operating system detection on a windows 7 host from kali linux, revealing open ports, services, and system details.

Learn to use nmap in verbose mode (-v) to display every detail of requests and responses. Explore using Zenmap and apt-get to install nmap, and target websites by domain name.

Learn to search exploits offline with the search exploit tool and the -E exact option. Explore Exploit DB results for Windows 10, Android, and OpenSSH and locate the offline path.

Master website footprinting by using whatweb to identify server details, scripting languages, and technologies, then gather domain and admin contact information with whois, and search for hidden files with dirb.

learn how vulnerability analysis identifies weak points in a target website using tools like nikto in Kali, revealing insecure files, misconfigurations, and outdated software to guide ethical hacking.

Explore live cross-site scripting on a test site, showing how scripts can modify profiles, trigger alerts, and demonstrate how clickjacking and redirects to malicious pages compromise user security.

discover Red Hawk, a php-based all-in-one vulnerability assessment tool. perform information gathering, nmap port scans, whois, DNS, and subdomain lookup for ethical hacking.

Explore Unix and Linux security auditing by using the Linux tool to audit your own system, identify misconfigurations, vulnerable software, and practical tips for server hardening.

Demonstrates using sqlmap on a test site to detect and extract database information through sql injection, covering selecting databases, tables, and columns while emphasizing ethical and legal guidelines.

Explore sql injection with the j sql gui, discovering databases, tables, and the users table on a testing site.

Demo shows sqlsus-based sql injection on a vulnerable MySQL URL, covering Kali setup, config generation, launching the attack, and extracting database tables and data.

Learn how password attacks relate to encryption and hashing, and why one-way hashes on servers prevent decryption while guiding password resets after authentication.

Convert plain text to an MD5 hash with an online tool, observe a 32-character output, and note that hashes cannot be reversed; sites like Facebook verify passwords by hashing inputs.

Identify hash types with the hash identifier in Kali, then compare hashes from passwords like hack, hacking, or password to the hash; you cannot decrypt hashes, only match them.

Explore hash cracking workflows using the find my hash service with md5, and learn basics of running a python script after cloning tooling from git.

learn how to create a custom word list with c e l, a ruby app that spiders a url to a depth and saves password candidates to a password list.

Create a custom word list with crunch in Kali by setting minimum and maximum password lengths and a character set, then output the results to screen or a file.

Learn how to crack passwords offline using John the Ripper on Kali Linux, exploring shadow file hashes, word lists, and hash matching to reveal root and user passwords.

Explore how to crack any MD5 hash with John the Ripper by using the raw-md5 format, cracking a file hash, and trying different options with the free tool.

Learn how to crack a password protected zip by extracting its hash and applying a dictionary attack with John the Ripper using a wordlist.

Explore offline password cracking with THC Hydra in Kali, using GUI and command line modes to test SSH on Metasploitable 2, with wordlists and verbose output.

Master Medusa, a fast, modular login brute-force tool in Kali, and learn to configure host, username, password list, and ssh module for offline password cracking.

Explore sniffing as capturing network traffic, comparing encrypted and unencrypted packets, and analyzing them with tools like Wireshark in Kali to understand man-in-the-middle attacks and data exposure.

Launch Wireshark, choose an interface, and start capturing packets. The interface is divided into four parts: packet filtering, packet list, packet details, and packet bytes.

Demonstrate how to capture web traffic with Wireshark, inspect http packets, and reveal why transmitting credentials over http is insecure and why https with ssl matters.

Explore how Wireshark captures packets from multiple machines on the same network interface, like ethernet zero, and how to analyze captured data including IP addresses and login attempts.

Explore spoofing: attackers use fake DNS entries to redirect users to a counterfeit site while the URL appears legitimate, illustrating DNS-based attack mechanics.

This lecture demonstrates DNS spoofing using Ettercap on Kali, illustrating how fake DNS entries can redirect traffic on public wifi, with configuration tweaks and GUI usage.

Configure Ettercap for a man-in-the-middle attack by starting sniffing, scanning hosts, and enabling the DNS spoof plugin to redirect microsoft.com to the Kali IP.

Explore essential wifi terms like WPA, WPA2, and WEP, and learn how PSK, BSSID, SSID, and channel identifiers are used in monitoring and attacks.

Learn about wireless attacks by exploring WEP hacking with aircrack-ng, including setting up an external wireless adapter, monitor mode, and capturing and cracking packets to reveal a WEP password.

Explore how to crack WPA and WPA2 networks using aircrack-ng in Kali Linux, including capturing a handshake and performing dictionary attacks to crack the password.

Learn to use a graphical Wi-Fi cracker tool to monitor wireless networks, scan access points and connected stations, select a dictionary, and crack a password by capturing a handshake.

Explore Metasploit, an open source framework for exploiting remote targets, used in Kali or Windows. Start the MSF console, review exploits and 596 payloads, and search Android exploits for testing.

demonstrates a buffer overflow attack with metasploit against windows xp service pack 3, using a reverse tcp payload and meterpreter to achieve shell access and post-exploitation actions.

Explore honeypots by contrasting production honey pots for internal monitoring with research honey pots used by government operations, and learn their setup with the paint box tool via git clone.

Learn to download and run Paintbox, configure a honeypot in auto and manual modes on ports 80 and 4444, and observe intrusion alerts across Kali and Windows machines.

Explore browser exploitation attacks with the beef browser exploitation framework to conduct client-side attacks on web browsers using JavaScript, in a Kali Linux and Apache setup.

BeEF demonstrates browser-based attacks against a Windows XP target, testing commands, social engineering like fake updates and phishing, and spoofed address bars.

Explore the basics of controlling network connectivity using netcut and netcat, including IP and MAC address discovery, netcut defender, and how winpcap enables packet handling.

Learn to reset a Windows 10 password using sticky keys to access a command prompt, then use net user to reset passwords and create an administrator account.

Discover how to reset a Windows 7 password by using startup repair, renaming utilman to open a command prompt, and running control userpasswords2 to reset the password.

Learn to download and install Oracle VirtualBox, set up a pentesting lab in a virtual environment, and create a Windows 7 test virtual machine.

Install Windows 7 in VirtualBox, use snapshots to revert to a saved state, and configure ISO, language, license, and time zone during setup.

Install Kali Linux in VirtualBox by downloading the Kali ISO, creating a Debian 64-bit VM, and completing the graphical installation with grub boot loader.

Master essential networking basics like IP and MAC addresses, ping, and LANs, and gain Linux basics—from commands to permissions, processes, users, and the Linux directory and file system structure.

Learn to install Windows 10 in VirtualBox, attach the ISO, create and configure the VM, customize the installation, and prepare Windows 10 for penetration testing.

Install and configure Microsoft SQL Server 2012 in VirtualBox using a Microsoft ISO for a 180-day evaluation, selecting GUI, and setting a strong password.

Chapter 10 guides you to download and boot Metasploitable in VirtualBox, configure safe networking, and log in as MSF admin to begin ethical hacking practicals.

Use virtual machine snapshots to bookmark Kali states, taking snapshots during new installations or updates (a, b, c, d), then restore to a prior snapshot to revert changes.

Explore ethical hacking and the six phases, including footprinting, active and passive reconnaissance, scanning (port, vulnerability, network mapping), gaining and maintaining access, clearing tracks, and report writing.

Identify the three main hacker types: white hat ethical hackers who protect organizations with permission, black hat attackers who harm and steal data, and grey hat hackers who blend methods.

Configure networking for your VMs in VirtualBox by creating and selecting a net network, so the host acts as a router and VMs avoid sharing the same IP address.

Explore footprinting, the first step in ethical hacking, to collect information about a target. Understand networking, access points and how packets traverse wireless networks, and how interception can reveal data.

Verify target reachability by testing connectivity between systems, adjust firewall settings, measure packet sizes with ping, and map the route with tracert to identify hops and server behavior.

Use nslookup to query the domain name system, view the default dns server and ip addresses, and inspect canonical name (cname) records linking facebook.com and www.facebook.com.

Explore how to use Web Data Extractor to pull emails, phone numbers, and fax from a target site, showing steps from downloading version 8.3 to extracting data.

Learn how to trace suspicious emails by analyzing headers with Email Tracker Pro CE, revealing geolocation, ISP, DNS, and hops from sender to receiver.

Perform footprinting with the harvester tool in Kali to extract information such as employee names, emails, open ports, banners, IP addresses, and subdomains, using -d, -l, and -b options.

Explore Shodan, the hacker's search engine that lists potentially vulnerable devices—from IoT to routers—worldwide. Learn how free access limits results and what comes next with Google hacking.

Discover how Google hacking, following Shodan context, surfaces targeted results, revealing vulnerable webcams, Google Drive movie links, login.php pages, and index of results for ebooks and PDFs.

Discover network scanning with nmap and hping3, the second phase of hacking, using Kali and Zenmap to identify live hosts via nmap -sn.

Use nmap to discover hosts and ports on a target IP, identifying 135 (Mssp RPC) and 139 (NetBIOS) as open, with 3 open and 997 closed of 1000 scanned.

learn to use h3 to discover live ports and live hosts, scan port ranges from 0 to 1000 or 5000 with syn flags, and compare outputs to nmap.

Explore nmap usage, including -s for scan and -S for syn, target a Metasploitable VM, and scan 1000 ports, then filter to tcp open ports with -T.

Explore Zenmap, the graphical Nmap, on Windows 10: install Nmap and Npcap, run regular and intense UDP scans, and review ports, topology, host details, and script results.

Explore operating system fingerprinting by using Nmap to detect the target's OS and verify results with Zenmap, noting how firewall settings can affect accuracy.

Explore network mapping with nmap to detect the exact topology and resource placement in a target network, demonstrated by a practical scan revealing devices and topology.

Learn the ethics of gaining and maintaining access in ethical hacking, including creating a back door with the wheel framework in Kali, and following GitHub installation steps.

Demonstrate email spoofing and the role of disposable email services like Gorilla Mail and mi ok.cc, while highlighting privacy, end-to-end encryption, and open-source options such as ProtonMail.

Explore steganography by hiding data behind other data with NTFS streams, including concealing an executable behind a text file and illustrating a backdoor or trojan through symbolic links.

This chapter demonstrates white space steganography using a snow tool to hide and retrieve secret data in text files with a password.

This lecture demonstrates hiding a text file behind an image using OpenStego and QuickStego, setting a password, creating a stego file, and extracting the hidden data.

Learn how to use quick stego to hide and extract text data within an image, including installation, hiding text, saving the image, and retrieving the hidden data.

Explore how to detect hidden files using steganography tools, focusing on alternate data streams and the spy tool for scanning and deleting hidden streams across NTFS drives.

Explore keyloggers: a program that records keystrokes and may capture screenshots, used for monitoring or stealing information, highlighting security risks and defensive considerations.

Explore Linux fundamentals with Red Hat Enterprise Linux, learn basic commands, and configure users, groups, permissions, partitions, and an Apache server.

Install Red Hat Enterprise Linux version seven in VirtualBox by creating a VM named rhel seven and configuring memory, storage, and graphical installation.

Open the terminal, read prompts like root on localhost and dollar sign for standard users, and learn to use mkdir, rmdir, and rm -r -f to manage folders in Linux.

Explore essential Linux shell commands, including mkdir with -p, rmdir, rm -rf, clear, pwd, ls and ll, cd navigation, touch, date, logname, and hostname, with practical usage and help options.

Master essential linux commands for beginners, including cat, head, tail, and wc for viewing; cp, mv, rm, and mkdir for file handling; ifconfig and man for system info and manuals.

Explore user and group management in Red Hat Linux, including root, standard, and service users; create primary and secondary groups; use useradd, groupadd, and usermod; inspect /etc/passwd, /etc/group, and /etc/shadow.

Learn linux permissions: read, write, and execute differ for files and folders, with owner, group, and others. Use chmod and numeric modes like 7 (4+2+1) to grant access.

Explore the Linux root directory and essential folders like /bin, /boot, /dev, /home, /lib, /usr, /proc, /root, /var, and /media, understanding how they support boot, devices, libraries, and user data.

Create a primary Linux partition on a new hard disk with fdisk, format sdb1 ext4, mount via fstab, and verify with df -h using vim and partprobe.

Learn to create logical partitions from an extended partition on a second hard disk using fdisk, print, and n commands, then format as ext4, mount at /root/sdb5, and update fstab.

Learn how to create and configure a Linux swap partition to boost performance, including fdisk steps, changing type to 82, mkfs.swap, swapon, and fstab updates.

Learn to create and manage Linux LVM partitions by making physical volumes, volume groups, and logical volumes, format with ext4, mount at /LVM, and review with df -h.

Learn how to reset the root password by booting into grub with rd.break, remounting the sysroot as read-write, chrooting to root, setting a new password, and relabeling SELinux before reboot.

Examine how Linux boots services and tracks running processes with ps ux and wc. Distinguish shell jobs from system processes and learn pausing and backgrounding with control z and bg.

Learn to manage linux shell jobs, handle background and foreground tasks with ctrl z, monitor processes using ps and top, and terminate with kill, pkill, or killall by pid.

Discover how to extract the original password from windows hashes using dump7, a rainbow table generator, and rainbowcrack, including generating tables from the SAM database and cracking to plaintext.

Demonstrate generating a Windows payload with msfvenom and hosting it on Apache, then use the Metasploit multi/handler to establish a reverse Meterpreter session from Kali to a Windows target.

This lecture demonstrates how to create a trojan using Kali’s social engineering toolkit, deploy a payload to a Windows target, and establish a Meterpreter session with post-exploitation commands.

Learn about ERP spoofing and ERP poisoning, and see how a man in the middle redirects traffic between Windows 10 and the router, with Wireshark capturing the network packets.

Learn to perform ARP spoofing and ARP poisoning using Ettercap, sniffing and spoofing traffic, set targets for MITM, and capture traffic with tcpdump and Wireshark.

Reset a Windows 10 user password using Hiren Boot CD’s offline password changer, boot from the ISO, select the correct partition, and set a new password.

Explore how the veil framework enables evasion and payload creation for backdoors, using Meterpreter payloads and reverse connections to understand antivirus evasion and detection challenges.

Examine how to configure a backdoor, adjust options to avoid detection, and test antivirus defenses using online scanners and Windows Defender on a virtual machine.

Examines how a backdoor is created and used to bypass Windows security, using Metasploit and Meterpreter, with live demonstrations on Kali and Windows Defender and antivirus defenses.

Explore how to identify and clear system logs using auditpol and event viewer, covering log types and the steps to view and clear application, security, setup, system, and forward events.

Plan, prepare, and review ethical hacking reports for different audiences, using plain language for non-technical readers, detailing impact, losses, and security improvements before management.

learn to create a pen testing report with executive summary, attack narrative, vulnerability details, mitigations, screenshots, and cvss-based risk ratings from 0 to 10 for management.

Learn that wireless hacking must follow country-specific cyber laws and require explicit permission; clearly explain scope to clients and obtain written authorization to avoid penalties.

Explore wireless hacking through 802.11, the Wi-Fi Alliance, and Wi-Fi certified logos, then learn offensive and defensive techniques for WEP, WPA, and WPA2 hacking.

Practice safe penetration testing by building a personal wireless lab with Kali Linux, using the aircrack suite tools like airmon-ng to monitor, inject packets, and create a fake access point.

Learn web application penetration testing by understanding websites and web servers, then practice footprinting and sql, xss, and denial of service attacks in a safe virtual environment.

Explore what a website and web server are, and how front end (client side) and back end (server side) power web applications with HTML, JavaScript, PHP, Python, MySQL, and Apache.

Explore the basic structure of accessing a website: DNS resolution turns domain names into IP addresses, routes to a web server hosting multiple sites, and delivers HTML pages.

Explore website footprinting by discovering the target's IP address, domain ownership via whois, hosting details, web server and database (Apache, IIS, MySQL), and DNS records.

Discover how to gather target website information with whois, Netcraft, and Robtex, covering DNS details, IPs, mail servers, DNS records, subdomains, and beta testing.

Explore SQL injection techniques in a controlled lab using Kali Linux and Metasploitable, demonstrating how databases like MySQL store users and credentials and how phpMyAdmin and DVWA reveal them.

Demonstrates how SQL injection can bypass authentication on vulnerable web apps, using DVWA and Mutillidae scenarios, and explains boosting security levels to prevent breaches.

Find out whether input filtering happens on the client or server by using Burp Suite to forward requests and test SQL injection, revealing a client-side bypass that grants admin access.

Demonstrate sql injection on unknown usernames and passwords to log in as admin at low security, arrogant and top levels, and secure coding to stop sql injection and cross-site scripting.

Explore sql injection concepts by demonstrating live website vulnerabilities, using tor for privacy, and stressing responsible hacking with permission.

explores how sql injection and xss are used against web sites, then shows using reverse ip domain checks to discover other sites on the same server and potential attack surface.

Automate SQL injection with sqlmap, an open source tool, to detect and exploit database vulnerabilities and extract data from vulnerable websites, with commands and outputs demonstrated.

Learn about cross-site scripting (XSS) vulnerabilities in web apps, including refracted, stored, and dom based XSS, how attackers inject scripts, and bug bounty opportunities.