Ethical Hacking and Penetration Testing

Explore Kali Linux, a Debian-based security auditing distro with hundreds of information security tools, and learn how to set up virtual machines with VMware Workstation for testing.

Create virtual machines and install Linux and Windows 7 inside a virtual workstation. Configure hardware and bootloader settings to support ethical hacking exercises.

Learn information gathering and scanning techniques to identify a target's details—from operating systems via banner grabbing to open ports, websites, people, and companies—using Windows and Kali Linux tools.

Explore network information gathering and scanning with Nmap, using ping scans, quick scans, and aggressive scans to identify live hosts, open ports, operating systems, and traceroutes.

Explore recon-ng's information gathering framework to map subdomains, IPs, and geolocation using Netcraft, GeoIP, and reverse geocoding.

Learn techniques to analyze networks and web applications using Windows and Kali Linux tools, identifying open ports, weaknesses, and injections with Nessus, Burp Suite, and ZAP.

Explore how Burp Suite conducts web application analysis and brute-force login testing. Learn to configure proxies, intercept, spider, and use Intruder with payloads to test login panels.

Learn to analyze and scan a website using the ZAP proxy, crawling and spidering pages, running active scans, and reviewing alerts for vulnerabilities with proper permission.

Explore network scanning with nessus, including home and professional versions, configuring scans, reviewing vulnerabilities, and generating reports for security assessment.

Learn password cracking techniques and use tools like Hydra and Medusa on Windows and Linux to perform brute-force attacks on vulnerable protocols and login pages.

Learn to crack Windows logon passwords using Ophcrack by extracting SAM hashes from the Windows SAM file on a Windows 7 VM and cracking passwords with online hash decrypters.

Explore cracking Linux passwords stored in the shadow file with John the Ripper, highlighting hashing algorithms and dictionary attacks in a Kali Linux setting.

Explore file transfer protocol security by performing brute-force ftp login attacks using Hydra and Medusa, including setting up an ftp server, creating users, and testing login credentials.

Explore database attack techniques, understand how sql queries extract emails, usernames, and passwords from backend databases, and map database structure using tools like sqlmap in a practical context.

Explore how databases power websites by creating databases and tables, entering data, and querying with SQL statements, using a Linux tool to simulate discovery and data extraction.

Explore ethical sql injection testing with sqlmap on Linux to identify database schemas, tables, and columns. Safely extract usernames, emails, and passwords for authorized pentesting.

Explore manual SQL injection attacks without tools, identifying vulnerable parameters, enumerating database tables and columns with order by and union select, and extracting usernames and passwords from a web app.

Discover how to build a personal password dictionary with crunch, controlling min and max lengths, character sets including letters, numbers and symbols, and saving the output to your desktop.

Explore how a graphical user interface tool enables sql injection testing, revealing database structures, tables, and user data in a controlled learning environment.

Explore network exploitation techniques using Kali Linux tools to identify vulnerabilities, deploy exploits, and establish a backdoor session between Linux and Windows for ethical penetration testing.

Learn to use Metasploit for network hacking, craft payloads with msfvenom, host them via Apache, and gain a Meterpreter session on Windows for post-exploitation tasks.

Demonstrates attacking a Windows system using buffer overflow exploits, leveraging Metasploit to gain a session, explore options, and migrate processes for post-access actions.

Explore social engineering techniques, including human-based and computer-based methods, and phishing risks. Identify the social engineering toolkit for attacks and reference Kevin Mitnick's The Art of Deception.

Master the social engineering toolkit to create phishing pages, harvest credentials, and deploy payloads with listeners, using Linux and Windows environments.

Examine the browser exploitation framework BeEF and how it remotely controls a victim’s browser. Explore BeEF’s online and offline modes, the beef control panel, JavaScript payloads, and phishing pages.

We introduce sniffing, its role in man-in-the-middle attacks, and the tools available on Windows and Linux, including Wireshark, with practicals coming next.

Demonstrates man-in-the-middle attacks and sniffing with Wireshark and Ettercap in Kali Linux. Learn to capture and filter traffic to reveal usernames and passwords on login pages.

Explore how Cain and Abel enable sniffing on Windows to perform ERP poisoning and a man-in-the-middle attack, capturing credentials and passwords from target sites.

Explore forensic techniques and tools to verify file integrity by generating md5 and sha hashes to ensure sent files match received ones.

Explore hashdeep, a forensic tool on Gelderland X, to verify file integrity by generating and matching hashes before and after transfer.