Ethical Hacking for Beginners(2024)

Name: Ethical Hacking for Beginners(2024)
Rating: 5.0 (2 reviews)

Mastering Cyber Security: Fundamentals and Hands-on Labs, NMAP, METASPLOIT

Created byHussain Sagwadiya

Last updated 3/2025

English

What you'll learn

Understanding DoS and DDoS Attacks
Introduction to Ethical Hacking
Footprinting and Reconnaissance/ phases of Ethical Hacking
Vulnerabilities and Port scanning using NMAP
Case studies and LAB PRACTICALS on METASPLOIT
Bettercap Best Practices
Learn Kali Linux from scratch.
Learn to exploit the metasploitable2

Course content

8 sections • 45 lectures • 7h 37m total length

Introduction: DOS and DDOS Attacks11:35
Denial-of-Service (DoS) and Distributed Denial-of-Service (DDoS) attacks are malicious attempts to disrupt the normal functioning of a network, service, or website.
DoS attacks typically originate from a single source, often a single machine or a small number of machines controlled by the attacker. eg-Ping Flood, SYN/ACK Flood etc.

A Distributed Denial-of-Service (DDoS) attack is an evolved form of DoS attack where multiple compromised computers, often part of a botnet, are used to launch the attack. eg-Amplification Attack, DNS Reflection Attack
TYPES OF ATTACKS13:35
Tear Drop Attack: A Tear Drop attack is a type of Denial-of-Service (DoS) attack that exploits vulnerabilities in the reassembly of fragmented packets in a network. The attacker sends overlapping fragments to the target system, causing it to crash or become unresponsive. The attack capitalizes on the inability of the target to properly reassemble the fragmented packets, leading to system instability. Tear Drop attacks exploit weaknesses in network protocols and pose a threat to the availability of services by disrupting the normal functioning of the targeted system.
Flooding Attack: A Flooding attack is a classic form of Denial-of-Service (DoS) attack where an adversary overwhelms a target system with an excessive volume of traffic, saturating its resources and rendering it unavailable to legitimate users. The attacker floods the target with a multitude of requests, such as ICMP ping requests, HTTP requests, or SYN packets, causing the system to become overloaded. Flooding attacks exploit the finite capacity of network resources, disrupting the target's ability to handle genuine user requests and severely impacting its availability.
Volumetric Attack: A Volumetric attack is a subtype of Distributed Denial-of-Service (DDoS) attack characterized by an overwhelming volume of malicious traffic directed at a target. In this attack, a large number of compromised computers, forming a botnet, collectively generate an immense amount of data traffic. This flood of data exhausts the target's bandwidth and other resources, causing service disruption. Volumetric attacks can include various techniques such as UDP amplification, DNS reflection, and HTTP/S floods. Mitigating volumetric attacks requires robust network infrastructure and DDoS mitigation strategies to filter and absorb the high volume of incoming traffic, ensuring uninterrupted service availability.
DOS Attacks using NMAP in Kali linux (lab)12:44
Setting up a DoS Attacks lab for educational purposes involving Kali Linux and a Windows 7 machine provides hands-on experience with network security concepts.

In this lab, students can simulate and understand various Denial-of-Service (DoS) attack scenarios. Using Kali Linux as the attacker and a Windows 7 machine as the target, students can explore the impact and mitigation strategies associated with DoS attacks.
ICMP flood Attack using NMAP6:42
Setting up an ICMP Flood Attacks lab using Kali Linux as the attacker and a Windows 7 machine as the target provides an immersive learning experience for understanding the impact and mitigation of network-based attacks.
In this educational environment, students can explore the intricacies of ICMP (Internet Control Message Protocol) flooding, a form of Denial-of-Service (DoS) attack.
Using tools like Hping3 on Kali Linux, students simulate a barrage of ICMP Echo Request (ping) packets directed at the Windows 7 target. This flood of ping requests overwhelms the target's resources, saturating its bandwidth and leading to unresponsiveness. Students witness firsthand the degradation of network performance and the potential disruption of services.
CAM TABLE Attack9:04
CAM TABLE ATTACK:
Switch works that if a host is communicating with the internet, then the reply will not be broadcast. It is unicast.
The switch stores all the layer-2 addresses and the switch also has a limit to store the mac addresses.

The attackers sent so many mac addresses that the switch memory has been used completely.
It sent out so many frames that the switch forgot the devices with the mac address which was stored with them.
And then the switch starts broadcasting the mac addresses to the interfaces, Which could help attackers to gain the access of legit mac addresses in the same VLAN.
He can now eavesdrop on the network.
It is done using the tool called MAC OF
MITIGATE:
1) We can mitigate those types of attacks by telling the switch that we can only allow 5 max mac addresses to be allowed on the access ports and the rest also will be dropped.

2) We can also enable port security and we can set the restrictions as well.
DHCP Starvation Attack10:01
DHCP (Dynamic Host Configuration Protocol) Starvation attacks are a form of network-based assault designed to exhaust the available IP addresses in a DHCP server's address pool,
thereby causing a denial of service for legitimate network devices. In this type of attack, a malicious actor floods the DHCP server with a multitude of DHCP requests, attempting to deplete the pool of available IP addresses.
During a DHCP Starvation attack, the attacker crafts and sends numerous DHCP discover messages to the DHCP server, requesting IP addresses at an unsustainable rate. As the DHCP server assigns addresses to the requesting devices, the malicious actor continues flooding the server, preventing it from responding to legitimate DHCP requests. This results in a scenario where genuine devices on the network are unable to obtain valid IP configurations, causing network disruption and potential service outages.
ARP Spoofing4:29
ARP (Address Resolution Protocol) spoofing is a malicious technique where an attacker sends false Address Resolution Protocol messages on a local network. By impersonating legitimate devices, the attacker associates their MAC address with the IP address of another system, leading to traffic redirection.
This allows them to intercept, modify, or eavesdrop on data exchanges between connected devices. ARP spoofing can facilitate man-in-the-middle attacks, compromising network security.
RaaS(Ransomware as a Service)11:23
Ransomware as a Service (RaaS) is a sinister online model enabling cybercriminals to deploy ransomware without advanced technical skills. This nefarious service allows users to purchase or rent ransomware tools, facilitating widespread attacks on unsuspecting victims. Operating on the dark web, RaaS providers offer a user-friendly interface, technical support, and profit-sharing schemes, making cyber extortion accessible to a broader range of criminals. This alarming trend poses a significant threat to individuals and businesses, as the proliferation of ransomware attacks continues to rise, underscoring the urgent need for robust cybersecurity measures in the digital landscape.

Introduction10:53
Footprinting and reconnaissance are crucial phases in cybersecurity, involving gathering information about a target system or network.
It includes passive techniques like searching online resources, social media, and public records, as well as active methods such as network scanning and probing.
This phase helps attackers identify potential vulnerabilities, entry points, and critical assets to plan further attacks effectively. Understanding these techniques is vital for defending against cyber threats.
Google Hacking database(GHDB)6:00
The Google Hacking Database (GHDB) is a repository of Google search queries used for identifying vulnerable systems or information leaks. It provides predefined search queries, termed Google Dorks, which can uncover sensitive data inadvertently exposed on the internet. These queries can be customized to pinpoint specific vulnerabilities or targets. GHDB is a valuable resource for security professionals to understand and mitigate potential risks associated with online exposure and data leakage.
Whois Lookup Tool9:02
DIG TOOL14:29
The Dig tool is a network diagnostic utility used to probe and discover information about domain names, IP addresses, and DNS records. It operates through command-line interface or graphical user interface, providing detailed insights into DNS-related information like A, AAAA, MX, TXT records, and more.

Dig enables network administrators and users to troubleshoot connectivity issues, verify DNS configurations, and analyze DNS responses. With its versatility and flexibility, Dig serves as a fundamental tool for understanding and troubleshooting DNS infrastructure, aiding in the efficient management and optimization of network resources.

NMAP Introduction & Prerequisites9:30
Nmap, or Network Mapper, is a powerful open-source tool designed for network exploration and security auditing.
It allows users to discover devices on a network, find open ports, and gather information about services running on those ports.
Nmap employs a variety of scanning techniques, including TCP, UDP, and OS fingerprinting, providing valuable insights into the security posture of a network.
How to install KALI LINUX in VMWARE WORKSTATION10:09
Installing Nmap in VMware Workstation allows users to conduct comprehensive network scanning and exploration within virtualized environments.
Begin by creating a virtual machine within VMware Workstation, ensuring it's connected to the desired network. Then, download the Nmap package suitable for your operating system and architecture from the official website.
Transfer the downloaded package into the virtual machine, either through shared folders or other means. Once inside the virtual machine, open a terminal and navigate to the directory containing the Nmap package.
Install Nmap using the appropriate package management commands for your operating system. After installation, users can leverage Nmap's powerful features to discover devices, services, and vulnerabilities within the VMware Workstation network, enhancing network security and understanding.
Installation of NMAP in KALI LINUX1:31
Nmap, or Network Mapper, is a powerful open-source tool widely used for network exploration and security auditing. Installing Nmap on Kali Linux is a straightforward process. Open a terminal in Kali and type:
sudo apt update
sudo apt install nmap
INSTALLATION OF KALI LINUX IN EVE-NG7:34
Installing Kali Linux in the EVE-NG (Emulated Virtual Environment - Next Generation) platform provides a versatile cybersecurity learning environment.
EVE-NG enables the emulation of network devices and operating systems, making it an ideal platform for hands-on security training.
To install Kali Linux in EVE-NG, start by downloading the Kali Linux OVA (Open Virtualization Appliance) image from the official website.
Import the OVA file into EVE-NG, configuring the virtual machine settings such as CPU, RAM, and network interfaces.
Once imported, launch the Kali Linux instance within EVE-NG, allowing users to explore and practice various penetration testing and ethical hacking techniques in a controlled and isolated environment. This setup facilitates practical cybersecurity education, allowing learners to hone their skills in a safe and simulated network environment.
NMAP BASIC COMMANDS13:55
Nmap, a versatile network scanning tool, offers essential commands for security assessments.
"nmap [target]" initiates a basic scan, revealing open ports and services.
"nmap -sP [target]" conducts a Ping Scan to identify live hosts.
"nmap -A [target]" provides in-depth information, including OS detection and service version details.
"nmap -p [ports] [target]" scans specific ports,
while "nmap -sn [target]" performs a stealthy host discovery.
"nmap -O [target]" focuses on OS detection.
Custom scripts enhance functionality, such as "nmap --script [script] [target]." Nmap's adaptability makes it indispensable for network reconnaissance and security auditing.
NMAP TCP connect and Stealthy Scan11:55
Nmap, a versatile network scanning tool, offers TCP Connect and Stealth Scan commands for diverse reconnaissance purposes.
The TCP Connect (-sT) employs a straightforward approach, establishing a full TCP connection to target ports, useful for thorough analysis but conspicuous due to connection establishment.
Conversely, the Stealth Scan (-sS) operates more discreetly, utilizing SYN packets to initiate communication without completing the handshake, reducing detectability.
It's a preferred choice for stealthy exploration, as it leaves a lower footprint by avoiding full connection establishment. Both commands empower users with nuanced scanning options, balancing comprehensiveness and stealth in network assessment.
NMAP Host Discovery & ping sweep15:05
Nmap, a powerful network scanning tool, employs host discovery techniques to identify active devices on a network. The "ping sweep" scan (e.g., nmap -sn) quickly sends ICMP echo requests to potential hosts, determining their online status based on responses. This method aids network administrators in mapping available hosts efficiently. Additionally, Nmap offers more advanced discovery options, such as the "acknowledgment" or "TCP SYN" scans, enhancing precision and providing a comprehensive view of network topology by probing various protocols. These commands empower users with valuable insights into network assets and vulnerabilities, critical for security assessments and system management.
UDP Scanning8:17
Nmap, a powerful network scanning tool, offers comprehensive UDP scanning capabilities to uncover open ports and services.
Users can employ the "-sU" option to initiate UDP scans, probing for potential vulnerabilities in networked systems. Additionally, specifying ports or entire port ranges with the "-p" flag enables targeted exploration. Nmap's UDP scanning employs various techniques, including ICMP errors and custom payloads, to elicit responses from services running on UDP.
Users can refine their scans by adjusting timing parameters such as "-T" for speed and "--max-retries" to control retransmission attempts. These commands empower security professionals to assess network resilience and identify potential weaknesses.
Firewall Evasion-Decoys, MTU, Fragmentation7:20
Nmap, a versatile network scanning tool, employs firewall evasion techniques, such as decoy scanning, to obfuscate its origin and bypass firewalls.
Decoy scanning involves sending packets from multiple IP addresses, confusing defenders about the actual source. Additionally, Nmap utilizes Maximum Transmission Unit (MTU) manipulation and fragmentation to elude detection.
By adjusting MTU sizes and fragmenting packets, Nmap can traverse network boundaries more discreetly, avoiding detection mechanisms that may inspect packet payloads. These evasion tactics enhance Nmap's effectiveness in network reconnaissance while minimizing the risk of triggering security alerts.
Firewall Detection using NMAP11:30
Nmap, a powerful network scanning tool, excels in detecting and analyzing firewalls. Utilizing various scanning techniques like SYN, ACK, and UDP scans, Nmap evaluates open, closed, or filtered ports to discern the firewall's configuration.
Through OS fingerprinting and version detection, it identifies firewall types, their rule sets, and potential vulnerabilities. Nmap's scripting engine further aids in probing firewall weaknesses.
By intelligently probing network boundaries, Nmap facilitates comprehensive firewall assessment, assisting security professionals in fortifying network defenses and ensuring robust protection against unauthorized access or cyber threats.
Exploit using NMAP scripts.18:47
Zenmap- GUI8:37
NMAP Project for beginners17:20

IPV4 DOS POLICY -PRACTICAL LAB10:55
Fortinet firewalls employ a robust IPv4 Denial of Service (DoS) policy to mitigate and thwart malicious attacks. This policy dynamically adapts to evolving threats by monitoring traffic patterns, identifying anomalies, and implementing countermeasures to prevent service disruption. Leveraging sophisticated algorithms, Fortinet's DoS policy detects and mitigates volumetric attacks, protocol-specific exploits, and other DoS tactics. With configurable thresholds and real-time analytics, it ensures optimal network performance while defending against diverse DoS threats, fortifying the firewall's ability to safeguard network resources from potential disruption caused by malicious and unauthorized activities.

Metasploit Framework Deep Dive15:34
The Metasploit Framework is a potent open-source penetration testing tool that empowers cybersecurity professionals to assess and enhance the security of computer systems.
Rooted in Ruby scripting, Metasploit simplifies the execution of security exploits, facilitating the identification and rectification of vulnerabilities in diverse environments.
It follows a modular structure, allowing users to choose from a vast array of pre-built exploits, payloads, and auxiliary modules, streamlining the process of penetration testing and ethical hacking. Metasploit's effectiveness lies in its capacity to automate various stages of the penetration testing lifecycle, from reconnaissance to exploitation and post-exploitation analysis.
With a user-friendly command-line interface and a powerful scripting language, Metasploit stands as a cornerstone in the arsenal of cybersecurity professionals, contributing significantly to the proactive defense of networks against potential cyber threats.
Installation of Metasploitable2 Machine in VMware Workstation4:33
To install Metasploitable 2 on VMware, download the VM image, import it into VMware, and configure the virtual machine settings. Power on the VM, obtain its IP address, and use security tools like Metasploit for ethical hacking and penetration testing on the intentionally vulnerable Metasploitable environment.
Metasploit Basics- Lab practice10:26
Metasploit basic lab practice involves hands-on exploration of the renowned penetration testing framework. Participants gain proficiency in exploiting vulnerabilities, utilizing diverse modules, and understanding post-exploitation techniques.
The lab guides users through simulated scenarios, honing skills in reconnaissance, vulnerability scanning, and exploiting systems within a controlled environment.
Learners delve into crafting custom payloads, evading detection, and comprehending the significance of various modules in simulated cyber attacks.
This hands-on experience equips individuals with practical insights into ethical hacking, enhancing their ability to secure systems and networks by preemptively identifying and addressing potential security loopholes.
Metasploit- Exploiting vsftpd_234_backdoor8:24
The Metasploitable exploit lab for vsftpd offers hands-on practice in exploiting vulnerabilities within the Very Secure FTP Daemon.
This exercise involves leveraging Metasploit's powerful framework to identify, target, and exploit weaknesses in the vsftpd service, simulating a real-world scenario.
Participants gain practical insights into penetration testing methodologies, understanding the intricacies of vsftpd vulnerabilities and their potential impact.
Through controlled lab environments, users refine their skills in exploit execution, post-exploitation activities, and security best practices. This focused exercise enhances proficiency in ethical hacking, equipping individuals with the expertise needed to secure systems and defend against similar exploits in diverse network configurations.
Metasploit- Exploiting Proftpd- FTP EXPLOIT8:22
In the "Metasploit- Exploiting Proftpd- FTP EXPLOIT" lab practice, participants delve into hands-on exploitation of ProFTPD, a popular FTP server.
The lab guides users through leveraging Metasploit's ProFTPD module, understanding the intricacies of the FTP service, and executing a targeted exploit.
Participants learn to identify and capitalize on vulnerabilities, gaining practical experience in exploiting FTP servers for penetration testing purposes.
This lab not only hones skills in Metasploit usage but also provides insights into real-world scenarios, enhancing participants' proficiency in ethical hacking and securing systems against potential threats associated with FTP server vulnerabilities.
Metasploitable Telnet Vulnerability-port 237:39
Metasploit, a penetration testing framework, includes modules to exploit Telnet vulnerabilities. Telnet's plaintext transmission makes it susceptible to interception and unauthorized access.
Metasploit exploits these weaknesses by delivering malicious payloads through Telnet, compromising security. Ethical hackers can use Metasploit to assess and fortify systems, uncovering vulnerabilities and implementing safeguards against potential exploits in Telnet services, a practice crucial for maintaining robust cybersecurity.
SMTP EXPLOIT-PORT 254:21
Metasploit, a powerful penetration testing tool, offers modules to exploit vulnerabilities in SMTP (Simple Mail Transfer Protocol).
By leveraging these modules, ethical hackers can identify and capitalize on weaknesses in email services. Exploiting SMTP vulnerabilities within Metasploit allows for testing and enhancing cybersecurity measures, ensuring that organizations can safeguard their email infrastructure against potential threats and unauthorized access
SMB Exploit10:35
Metasploit, a leading penetration testing framework, provides modules to exploit vulnerabilities in SMB (Server Message Block) protocol. These modules enable ethical hackers to assess and manipulate weaknesses in Windows file and printer sharing.
Leveraging SMB exploits within Metasploit allows for comprehensive security testing, aiding organizations in fortifying their systems against potential threats and unauthorized access, crucial for maintaining robust cybersecurity posture in network environments.
SNMP Exploit9:01
Metasploit includes modules for exploiting SNMP (Simple Network Management Protocol) vulnerabilities, enabling ethical hackers to assess and compromise network devices. SNMP exploits within Metasploit facilitate testing for weaknesses in network infrastructure, aiding organizations in enhancing their cybersecurity measures. By identifying and addressing SNMP vulnerabilities, businesses can strengthen their defenses against potential unauthorized access and cyber threats, ensuring the integrity and security of their networked systems.

Introduction7:17
Bettercap is a comprehensive network attack and monitoring framework used for ethical hacking and security assessments. It provides a range of powerful features for network reconnaissance, man-in-the-middle attacks, and protocol manipulation.
With capabilities like packet sniffing, injection, and session hijacking, Bettercap allows cybersecurity professionals to identify vulnerabilities and assess network security. It is a versatile tool commonly employed in penetration testing to evaluate and strengthen the resilience of networked systems against potential threats.
Bettercap Basic Commands6:13
Bettercap, a powerful network security tool, offers essential commands for ethical hacking. "set" configures attack parameters, "show" displays information, and "run" executes an attack. Commands like "net.probe" scan for devices, while "net.sniff" captures packets.
Bettercap is a versatile tool, allowing professionals to conduct various security assessments and tests.
ARP Spoofing using Bettercap9:27
Bettercap simplifies ARP spoofing by employing the "net.probe" command to discover devices and "net.sniff" to capture traffic. With "set arp.spoof," it configures ARP spoofing parameters, intercepting and redirecting traffic. The tool's user-friendly interface makes executing ARP spoofing attacks straightforward, providing ethical hackers a powerful means to assess network vulnerabilities and reinforce security measures against potential unauthorized access or data interception in diverse network environments.

DNS Introduction11:53
A DNS (Domain Name System) server acts like the internet's phone book, translating human-readable domain names (like www.example.com) into IP addresses computers use to communicate (like 192.0.2.1). For beginners, understanding DNS involves grasping its structure and function. DNS operates hierarchically with multiple types of servers:
Root DNS Servers: They store the master list of all top-level domain (TLD) names and their corresponding IP addresses.
TLD Servers: They manage the top-level domain names (like .com, .org) and direct queries to authoritative name servers.
Authoritative Name Servers: They hold specific domain records, like IP addresses for individual websites.
When a user types a domain name into a browser, their device queries DNS servers in this order until it finds the IP address associated with the domain. DNS servers play a crucial role in internet functionality, facilitating seamless navigation and communication across the web.
DNS (PART-2)7:41
DNS (PART-3)12:27
The DNS Server SOA (Start of Authority) record is a fundamental component of the Domain Name System (DNS), acting as the authoritative source of information about a domain. For beginners, understanding the SOA involves grasping its key elements: the primary name server, responsible for managing the domain's DNS records, and the email address of the domain administrator.
The SOA record also includes important timing parameters such as refresh, retry, expire, and minimum TTL (Time to Live), which govern how DNS data is updated and cached across the internet. Beginners should appreciate that the SOA record serves as a marker of authority for a domain, indicating where to find essential DNS information and how frequently to check for updates. Mastery of this topic lays a solid foundation for understanding DNS management and troubleshooting in networking and web development.

Requirements

basics of IT terminologies.
basics of Linux os

Description

Gain a profound understanding of cyber threats with our comprehensive course on "Cybersecurity fundamentals with Lab Practices (2024)" Delve into the world of Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks, exploring the techniques employed by malicious actors to disrupt critical systems and services.

Risk Assessment and Impact Analysis: Develop the skills to assess the potential impact of DoS and DDoS attacks on various systems and organizations, conducting thorough risk analyses.

Understanding DoS and DDoS Attacks: Gain a profound insight into the workings of DoS and DDoS attacks, exploring the motivations behind them and identifying potential targets.

Legal and Ethical Considerations: Ideal for cybersecurity professionals, network administrators, system administrators, web developers, IT managers, ethical hackers, law enforcement, and anyone keen on enhancing their expertise in defending against disruptive cyber threats.

Practical Labs and Simulations: Engage in practical labs and simulations, providing a hands-on experience to reinforce theoretical concepts and enhance practical skills. We will be covering practical labs on NMAP , Metasploit tools.

Prepare to navigate the evolving landscape of cyber threats confidently. Enroll in "Cybersecurity fundamentals with Lab Practices (2024)" and fortify your defenses against one of the most pervasive challenges in the digital realm.

Join us to fortify your cybersecurity arsenal and protect against disruptive threats in today's digital landscape.

Who this course is for:

Network Administrators
System Administrators
Web Application Developers
Ethical Hackers and Penetration Testers
IT Managers and Decision-Makers

Ethical Hacking for Beginners(2024)

What you'll learn

Explore related topics

Course content

Introduction: Attacks and its practical Aspects8 lectures • 1hr 20min

Footprinting & Reconnaissance4 lectures • 40min

NMAP - A Complete KALI LINUX GUIDE13 lectures • 2hr 22min

Prevention and Mitigation:1 lecture • 11min

Metasploit9 lectures • 1hr 19min

Bettercap3 lectures • 23min

Cybersecurity fundamentals4 lectures • 51min

BONUS Section3 lectures • 32min

Requirements

Description

Who this course is for: