Ethical Hacking Practical Cert Bootcamp – Real Hands-On Labs

Install Parrot OS on VMware to create a portable pentesting lab. Download Parrot ISO, set up VMware, install the ISO, then use the terminal with sudo su for root access.

Install VMware player, create a new virtual machine with the Kali live ISO, enable bridged networking, boot the live system, and verify the ip address with ifconfig.

Download a pre-built Kali Linux VM image from the official website, open it in VMware, configure CPU and disk, set bridge networking, and boot to use Kali tools.

Learn to set up metasploitable 2 on VMware as a target for pentesting, including downloading, configuring a virtual network with Kali Linux, and logging in as MSF admin.

Master Google dorking and advanced search techniques for osint, using Google, Bing, Yandex, and DuckDuckGo. Learn site filters, filetype queries, subdomain enumeration, and vulnerability research.

Discover directory bursting and host enumeration for web pentesting with Go-buster and Alpha, using word lists to uncover hidden directories and virtual hosts.

Enumerate Linux subdomains for a TryHackMe takeover room by connecting via OpenVPN, scanning with Nmap, brute-forcing with GoBuster and wordlists, updating host file, and retrieving the flag from a subdomain.

Identify a website's technology stack using browser extensions like Wappalyzer, online scanners like BuiltWith, OSINT stack detector, and command-line tools like WhatWeb to assess CMS, servers, plugins, and security posture.

Explore how digital certificates enable passive reconnaissance by revealing subdomains tied to a domain. Use certificate search engines to view issuing authorities and certificate histories, including expired certificates.

Explore dns footprinting and enumeration to gather dns records, subdomains, and zone transfer data, using tools like dig, host, and nslookup to map target infrastructure.

Learn to brute force DNS to discover subdomains with Nmap, dnsmap, and fierce. Use word lists to map the target's DNS infrastructure and uncover hidden entry points.

Learn to identify live hosts on a network using net discover, Nmap, ARP scan, and Angry IP Scanner, the essential first step in ctfs and pentesting exams.

Learn to perform service and OS discovery with Nmap and supporting tools, identifying open ports, running services, versions, and operating system details through banners, scripts, and TTL analysis.

Learn smb enumeration using nmap and linux enumeration tools to discover shares, users, and the target's os and computer name.

Explore network attacks and remote exploitation in the practical pentesting module, gain a foothold, and test hands-on methodology by setting up a vulnerable system and using eternalblue against Windows 10.

Explore the metasploit framework, its core components, and post-exploitation on Windows 10, with a demo covering scanning with nmap, eternalblue exploitation, and remote actions like screenshots.

Learn to scan networks and hosts with Nmap, discovering live hosts, open ports, OS and services, and vulnerabilities. Explore common scan types like tcp connect, syn, udp, and fin.

Perform a vulnerability assessment by scanning targets to identify security weaknesses and generate a hardening report. Nessus will scan the target for vulnerabilities and provide a detailed report.

Demonstrate exploiting the Vsftpd 2.3.4 vulnerability using metasploit from a Kali machine, gain shell on the target, and explore processes and files.

Explore post exploitation on Windows 10 using Meterpreter to elicit data, capture screenshots, stream the desktop, keylog, migrate processes, dump hashes, and elevate to system, with reporting.

Practice pentesting on TryHackMe blue machine from scanning with nmap to exploiting Ms17-010 vulnerability, then perform post-exploitation to escalate privileges and crack hashes with John the Ripper and find flags.

Master setting up Hack the Box to practice pentesting, connect via OpenVPN to the playground, and crack your first machine using Nmap, ping, and Telnet on a Kali environment.

Learn ftp exploitation by enumerating port 21 on a client-server ftp, recognizing vsftpd, using anonymous login or hydra-based brute-forcing with wordlists to access and download ftp.txt.

Explore ftp exploitation on a hack the box machine for ceh practical training, using nmap to identify port 21 and vsftpd 3.0.3, then login anonymously and fetch the flag.

Explore smb exploitation by enumerating shares with enum for linux and nmap smb os discovery, then access the target via smb client and ssh to obtain the flag.

Connect to hack the box via openvpn, spawn the dancing machine, run an nmap scan to enumerate smb shares, then access a blank-password share to download the flag.

Explore Telnet as a plain-text protocol, scan for ports with Nmap, connect to a back door, and obtain a reverse shell using Netcat and MSF venom to copy the flag.

Connect via vpn to hack the box, enumerate the Redeemer machine, and access the Redis service on port 6379 using redis-tools to retrieve the flag.

Learn how Polkit's pkexec vulnerability (CVE-2021-4034) lets a local user escalate to root, illustrated with a proof-of-concept exploit and practical demonstration.

Demonstrates escalating privileges on a Linux machine by exploiting a misconfigured network file system share, including configuring exports, mounting shares, and gaining root access.

Practice practical pentesting by solving the simple CTF on Tryhackme, using nmap for stealth, version, and OS enumeration to identify services and a vulnerable CMS Made Simple.

Learn to create covert communication channels by embedding data in unused TCP/IP header fields, bypassing firewalls, and exchanging data between Kali Linux and Parrot OS using a gcc-compiled tool.

Explains how ntfs alternate data streams conceal executables inside text files, demonstrates hiding a calculator binary in a text file and creating a backdoor link to execute it.

Explore how to hide data in ascii text with whitespace steganography using the Snow tool, by appending spaces to line ends to conceal messages.

Explore image steganography using Open Stego and Tag Online to hide and extract data in cover images, including using passwords and randomness options.

Install dvwa on Kali Linux with apt, log in using admin and password, and reset the database to begin practicing web application security testing with attack types and security levels.

Install dvwa on windows using xampp, apache, and mysql; download from github, place in docs, edit config with root and a blank password, and access localhost to reset database.

Learn Linux command injection vulnerabilities through the DVWA module, practice bypassing input filters with pipes, and obtain reverse shells using Netcat across low, medium, and high difficulties.

Explore Windows command execution techniques in dvwa, using Windows-specific commands like ping, dir, hostname, whoami, tasklist, taskkill, and type to demonstrate injection and process control.

solve the pickle Rick challenge on TryHackMe, focusing on command injection vulnerabilities, directory enumeration, credential discovery, and using a python reverse shell with netcat to gain access.

Solve low and medium file upload vulnerabilities in dvwa by creating malicious php payloads, triggering reverse shells, and bypassing basic sanitization and content-type checks with burp.

Explore brute forcing techniques against a dvwa login using burp suite and hydra, testing with a word list on Kali Linux or Parrot OS, including token handling and csrf challenges.

Brute force a Tryhackme room to obtain credentials, using OpenVPN, Nmap, and Hydra, then access SSH, explore the admin panel, escalate to root, and capture the flags.

Explore how to chain multiple vulnerabilities on dvwa to exploit a web app, focusing on command injection and file upload weaknesses, with practical techniques in a secure lab setting.

Learn how sql injection attacks work by solving a low difficulty challenge on a vulnerable web app, and use burp and sqlmap to enumerate databases, tables, columns, and data.

Explore medium and high difficulty sql injection vulnerabilities in dvwa, bypassing mysql real escape string mitigation with payloads in select elements and drop-down user IDs to reveal data.

Practice sql injection with sqlmap on TryHackMe, using GoBuster for directory discovery, Burp Suite for interception, and sqlmap to enumerate databases and dump tables.

Explore file inclusion attacks, including local and remote file inclusion, and learn how a low-difficulty DVWA challenge reveals user password details and server vulnerability.

Learn to enumerate WordPress sites with WP scan, identify themes, plugins, and users, discover vulnerabilities, and brute-force passwords using Kali, Metasploit, and a WP scan API key.

Explore how SQL injection vulnerabilities allow unauthorized access on a Windows server and MySQL/MSSQL databases, including login bypass and database manipulation, in a hands-on lab walkthrough.

This walkthrough demonstrates using sqlmap to detect and exploit sql injection flaws on a mssql database, enumerate databases and tables, and dump user credentials from the target site's database.

Detect SQL injection vulnerabilities on a web app using the RDS scanner, including handling GET and POST parameters, cookies, and a vulnerable URL to reveal user accounts.

Walkthrough demonstrates detecting SQL injection vulnerabilities with OWASP ZAP, using automated scans to test a web app, review the alerts tab, and inspect risk levels from low to informational.

Learn to perform vulnerability research using the Common Weakness Enumeration database, explore advanced search features, view weaknesses by concept, and review the 2023 top 25 most dangerous software weaknesses.

Perform vulnerability research in the Common Vulnerabilities and Exposures database to view the latest vulnerabilities, search by CVE or service type, and access detailed information.

Learn vulnerability research in the National Vulnerability Database (NVD) using CVSS scores, vulnerability search, and listings to assess base, temporal, and environmental scores and impacts on confidentiality, integrity, and availability.

Perform vulnerability analysis using Openvas, a comprehensive vulnerability scanning and management framework with unauthenticated and authenticated testing, a feed of more than 50,000 vulnerability tests, and detailed results.

Learn how to use Nessus to perform vulnerability scanning across multiple technologies, configure scan policies and credentials, and generate detailed vulnerability reports for a target such as Windows Server 2022.

Perform web server and application vulnerability scans using Nikto CGI scanner, tune for deeper tests, check for CGI directories, and save results with -o and -f.

Analyze malware to identify type, infection methods, and indicators like registry entries, keys, and file names for signatures. Apply static, dynamic, code, and behavioral analyses to map attacker communication.

Analyze malware with hybrid analysis, an online service that scans suspicious files and URLs, detects viruses, worms, trojans, and shows cross antivirus reports and behavior details.

Perform a strings search with the bin text tool to extract embedded strings from an executable, identify ascii and unicode strings, and analyze file and memory positions during malware analysis.

Identify packaging and obfuscation methods using the pid tool to detect packers and compilers in malware. Learn static analysis steps to reveal the program logic and other metadata.

Analyze an elf executable with Detect It Easy to identify elf headers and sections via analysis. Use signature-based detection to reveal file type, compiler, entropy, and strings for malware analysis.

Open the p explorer tool and load the malware executable to view portable executable information, including header details, entry point, data directory, and section headers with hex view and report.

Identify file dependencies with Dependency Walker to map a program's required dlls and imports. Analyze runtime requirements and spot issues such as missing modules and export calls.

Learn to perform malware disassembly with IDA, conduct static analysis by dismantling executables into binary form, identify the language used for malware, inspect assembly code, and assess threats.

Disassemble malware with OllyDbg to analyze a malicious file using static malware analysis tools, tracing registers, API calls, constants, and strings, and inspecting memory maps, logs, modules, and threads.

Perform malware disassembly with Ghidra and Hydra, import a sample binary, and explore imports, exports, and functions for static malware analysis.

Learn how to gain control over a victim machine using the njRAT remote administration tool, and review its capabilities like keystroke logging, camera access, and remote desktop.

Explore how a remote access trojan operates in a client-server setup, illustrating malware deployment concepts and control features like process viewing, screen capture, and key logging.

Explore how a virus maker tool demonstrates key concepts in ethical hacking and security auditing by simulating malware behavior in a controlled environment, highlighting potential weaknesses to address.

Explain how to analyze unencrypted http and ftp traffic with Wireshark to reveal usernames and passwords, using filters to inspect http post requests and ftp credentials.

Learn to detect denial of service and DDoS attacks using Wireshark by capturing, filtering, and analyzing packets in real time or offline to pinpoint SYN flooding and atypical conversations.

Analyze IoT traffic using MQTT: understand publisher-subscriber architecture, broker roles, topics, payloads, QoS levels, keepalive, last will and testament, and example packet analysis with Wireshark.

Walkthrough of capturing and analyzing IoT traffic by setting up an MQTT broker and device simulator, publishing a message, and inspecting the data in Wireshark.

Explore mac flooding with the macof tool to flood the cam table with random mac and ip addresses, forcing switches to act as hubs for traffic sniffing observed in Wireshark.

Demonstrate performing a DHCP starvation attack using Yersinia to exhaust a DHCP server, causing a denial of service, with live traffic capture in Wireshark.