
Build a cyber security lab environment in EVE-NG, convert images to qcow2, set up web apps on Linux and Windows, and practice 20 attacks, including SQL injection.
Explore the fundamentals of cyber and security, define cybersecurity, and distinguish between cyber attacks and defense, including common attack types and the ongoing arms race between attackers and defenders.
Compare lollipop and onion defense models to show that a single layer exposes assets, while layered protections including firewall, authentication, authorization, endpoint protection, monitoring, and two-step verification shield them.
Explore multilayer cybersecurity that combines prevent, detect, and respond strategies, with firewalls, antivirus, cloud backups, MFA, email and web security, and incident response planning.
The cybersecurity model rests on people, process, and technology; train employees, implement documented processes, and deploy properly configured technologies, including phishing simulations to build a human firewall.
Explore cybersecurity certifications across bodies, covering topics like cyber attack, incident response, architecture design, governance and compliance, risk management, cryptography, and VPN, with computer security plus as a starting point.
Zero trust architecture applies a never trust, always verify policy to every user, device, and application, using multi-factor authentication and next-generation endpoint security to grant minimal privileges and monitor access.
Explain the three layers of the web—surface web, deep web, and dark web—using the iceberg analogy to show visibility, password-protected access, and encrypted activity.
Explore the surface, deep, and dark web, and learn how Tor onion routing hides your source and protects privacy with the Tor browser.
Explore Kali Linux, Parrot OS, and Samurai Web Testing Framework as top hacking and cybersecurity operating systems. Understand their preinstalled tools and editions for ethical hacking and vulnerability testing.
Explore cybersecurity hardware for penetration testing. Learn about Raspberry Pi, USB Rubber Ducky, and wireless adapters used for wireless and RF hacking with Kali Linux.
Explore the OWASP top ten for web app security, including injection, broken authentication, and sensitive data exposure, and learn testing and securing methods in a cybersecurity lab.
Explore vulnerable web applications in a lab to test weaknesses, practice penetration testing and ethical hacking, using buggy, vulnerable, and broken web apps with Metasploit.
download the free eve community edition, client pack, and router and switch images; unzip and organize them for use with vmware workstation pro.
Install VMware Workstation Pro to build a lab in EVE NG, register the license, enable virtualization in BIOS, configure VMnet adapters, and troubleshoot common network setup issues.
Install and configure EVE-NG in VMware Workstation by importing the Community Edition image, setting up adapters (net, host-only, bridge), enabling virtualization, and updating the system with apt-get update and upgrade.
Install the EVE-NG client pack to include putty, ultra vnc, and wireshark, required when running devices such as routers and switches, on Windows, Linux, or mac OS.
Learn to name EVE-NG Qemu images correctly: keep folder names lowercase and use standard inner image names such as hda and virt0a/virt0b to avoid boot errors.
Upload iOS router images to EVE NG by extracting files with 7-zip, transferring ftp, applying permission fixes, and verifying access by logging in and confirming router availability in the lab.
Upload IOU and Linux switches in eve ng, manage licenses and permissions, distinguish layer 2 and layer 3 switches, adjust icons, and enable ip routing on interfaces.
Learn to configure EVE-NG clouds and bridges, connect virtual devices via management cloud and cloud zero/one/two, assign DHCP IP ranges, and verify connectivity with show ip interface brief.
learn how to set up a buggy web app (bWAPP) in eve-ng by converting vmware vmdk images to qcow2 with qemu-img, then deploy and test vulnerabilities.
Configure and troubleshoot Metasploit lab images in EVE NG, fix database name, apply persistent changes across new images using ID, node ID, and MSF admin credentials.
Configure a vulnerable web application in the EVE NG lab by downloading a broken web application VM, converting it to vmdk, deploying it, and validating its OWASP vulnerabilities.
Learn to set up a php auction site lab in eve ng by converting php debian images to vmdk, creating linux/php directories, and configuring root access for Kali machines.
Set up Kali Linux in the EVE NG lab by downloading the VMDK image, converting it for VMware or VirtualBox, and upgrading to install missing tools.
Install big box linux in eve-ng by downloading the vmdk from SourceForge, converting it to qcow2, and applying fixed permissions. Use the ready linux big box for cyber security labs.
Set up Parrot OS in EVE NG by downloading the security edition ISO, installing in a VM, converting VMDK to QCOW2, and uploading for lab use.
Build a cyberattacks lab in eve-ng by importing routers, switches, Linux and Windows servers, Kali attacker, vulnerable apps, and configuring ip, mac, dhcp within a complete topology.
Configure two web servers, tiny core linux and windows xp, in cybersecurity lab, by assigning 192.168.1.6 and 192.168.1.7, setting gateway and dns, saving permanent config, and validating via a browser.
Configure vulnerable servers in the EVE NG lab by setting static IPs for Kali Linux, a buggy web app, and a metasploit image; verify connectivity and restart networking.
Configure the edge router to obtain an auto ip via cloud, set the lan mac, and enable a dhcp server for the 192.168.1.0/24 network, with nat overload.
Learn active reconnaissance in a cyber lab, mapping networks, identifying alive hosts, open ports, OS and web services with tools like nmap in Kali Linux.
Demonstrates a mac flooding attack that fills the switch's mac address table with fake addresses, turning it into a hub and enabling traffic capture for a DoS scenario.
Explore a ping of death denial-of-service test in a lab using two PCs and Kali Linux, sending oversized fragmented packets captured with Wireshark to observe impact.
explore icmp flooding, a dos attack using echo requests and spoofed sources to overwhelm a target, with traffic captured via wireshark and hej ping three.
Demonstrates a syn flooding attack against a server by sending numerous spoofed syn packets, exploiting the tcp three-way handshake to create half-open connections and deny service.
Explore how a smurf attack uses ICMP broadcast floods and spoofed source IPs to overwhelm a victim and trigger a distributed denial-of-service across a network.
Explains land attack, a denial-of-service technique that uses identical source and destination IPs to loop traffic, overwhelm a Windows XP server, and take the service offline.
Demonstrates the slow loris attack, a dos method that floods a target with incomplete http requests to exhaust open connections and disable services, using Metasploit in Kali Linux.
Explore how arp spoofing and arp poisoning enable a man-in-the-middle by spoofing mac addresses, turning a Linux box into a router to intercept traffic.
Examine a DHCP starvation attack that floods a DHCP server with Discover, Request, and Acknowledgement messages, depleting IP bindings, using Kali Linux tools like Yersinia and DHCP starvation commands.
Demonstrates combining a DHCP starvation attack with a rogue DHCP server to route client traffic through the attacker, enabling man-in-the-middle traffic capture and forwarding via a spoofed gateway 192.168.1.8.
Demonstrates password attack techniques, focusing on dictionary and brute force attacks using Hydra against Telnet, SSH, and FTP, with rockyou word lists.
Explore phishing attacks that deceive users to harvest credentials and financial data, and learn to use the social engineering toolkit in Kali Linux to clone websites and redirect victims.
Explore sql injection attack techniques and the risks of insecure input fields that allow attackers to query databases, retrieve user information, and bypass authentication in web applications.
Explains command injection and command execution via insecure input in a web interface, showing how attackers run Linux commands to reveal user identities, processes, and directory information.
Demonstrate how DNS spoofing, or DNS poisoning, redirects users from legitimate domains to a fake site by spoofing the DNS server in a lab with Kali Linux and Apache.
Introduction:
This Course will teach you how to set up an environment to practice your Cybersecurity, Ethical Hacking and Pen testing skills such as Launching a cyberattack, verifying vulnerabilities, Conducting research projects and Much more. After this Course I am sure you will never ask someone to provide you EVE NG qcow2 images as you will learn how to convert any type of image to qcow2 with 4 different methods also, you will easily troubleshoot EVE NG errors which you are facing on daily basis. you will
discover how to add several different target systems from the latest Windows platform to systems that are intentionally vulnerable such as Metasploitable, OWASP, phpAuction, DVWA, Mutillidae etc. Having these targets will allow you to launch attacks, verify vulnerabilities, and conduct research projects without your production environment.
Who Should Attend:
Anyone who wants to learn cyber security and apply its principles in a risk-free environment should take this course. If you want to master cyber security research and learn hacking tools, then this is a perfect place to start.
Attacks:
Reconnaissance Attack
MAC Flooding Attack
Ping of Death Attack
ICMP Flooding Attack
SYN Flooding Attack
Smurf Attack
LAND Attack
Slowloris Attack
ARP Spoofing Attack
DHCP Starvation Attack
DHCP Spoofing Attack
Password Attack
Phishing Attack
SQL Injection Attack
Command Execution Attack
Attacker Systems:
Kali Linux OS
Parrot OS Setup
Backbox Setup
Vulnerable Web Applications:
bWAPP
Metasploitable
OWASP
PHP Auction Site