Ethical Hacking Course: Protect Yourself From Being Hacked

Learn how to create a proper setup for ethical hacking by using virtual machines, installing a hacking machine and a Windows target machine.

Explore how a virtual machine creates a separate computer inside your system using VirtualBox, enabling a Kali Linux hacking lab and a Windows target for safe practice.

Learn to download Kali Linux as a virtual box image from the official Kali website, choosing direct download or torrent for faster setup and Tor options.

Set up Kali Linux in VirtualBox by importing the appliance, adjusting memory and CPU, configuring storage and network, then launching the VM and logging in as root with toor.

import windows 10 into a virtual box, adjust ram, cpu, and disk space, enable snapshots, and configure nat networking to boot and login with the provided password.

Learn to use virtual machine snapshots as save points to revert to a clean state when testing for viruses or Trojan backdoors, by creating, naming, restoring, and deleting snapshots.

Explore Kali Linux as a familiar desktop environment, navigate applications, files, and workspaces, and preview information gathering and wireless attack tools like beef, Net Discover, and Map.

Learn to use the terminal across mac, windows, and linux, navigate directories with pwd, ls, and cd, and run hacking commands and tools for information gathering.

Change the Kali default root password and verify login with the new credential, then add a non-root user and secure access before using tor.

Explore the basics of networks, identify network vulnerabilities, and examine how VPN and DNS can be used to stay anonymous.

Explore how home networks operate, including local and public IPs, routers, and internet protocols, and learn how VPNs can anonymize traffic for ethical testing.

Learn how DNS translates domain names to IP addresses and how a VPN can mask your IP, with cautions about DNS reliability and legality.

Learn to change dns servers in linux to prevent dns leakage by editing resolv.conf, enabling promiscuous mode, and setting open dns and google dns, then restart network manager.

disable web rtc to protect anonymity, configure the browser, download and use vpn book openvpn, connect to US or EU servers, verify ip change, and test for dns leaks.

Learn practical VPN usage to protect privacy and browse anonymously using the Opera browser's built-in VPN, test for DNS leaks, and understand safe online habits and limitations.

Navigate the dark web within legal boundaries for ethical hacking and client research in this course. Emphasize lawful conduct and the risks of illegal activity.

Explore the dark web, distinguish visible web from deep web, and learn how to monitor and access Tor safely to understand how hacking threats and illicit data circulate.

Install tor browser on Kali from torproject.org and run the setup. Configure it to run as a non-root user and connect to the tor network for dark web access.

Navigate the dark web using the tar browser, apply medium security to disable javascript on non https sites, and explore hidden wiki and onion URLs with DuckDuckGo.

Build a proper network penetration testing setup with a wireless card and wireless network adapter, purchase and configure the hardware on your machine, and prepare for a real hack.

Explore network penetration, map devices on a local network, and learn to crack wifi passwords and plan actions after gaining network access.

Choose a USB wireless adapter compatible with the linux-based penetration testing setup that supports monitor mode and packet injection to enable wireless network penetration testing, following model and chipset recommendations.

Connect a wireless USB adapter to the Kali Linux VM in VirtualBox, enable the USB controller, set device filters, then bridge or attach the adapter for a local VM IP.

Learn about the mac address, a media access control used to transfer information between devices, and how to change it with mac changer for privacy and ethical penetration testing.

Learn to switch wireless adapters between monitor mode and managed mode, enabling full packet capture, and use commands like iwconfig and ifconfig to enable and disable monitor mode.

Learn basic network penetration concepts, including authentication, packet information gathering, and fake access points to understand how attackers gain access and how to protect networks.

Sniff wireless networks by configuring monitor mode and running air dump. Identify routers, channels, and encryption such as WPA, WPA2, WEP, or open networks.

Learn how to sniff a targeted wireless network, identify connected devices by MAC address, and analyze captured packets with Wireshark to understand risks and defenses.

Learn to perform a deauthentication attack by pretending to be the client and the router, using aireplay to disconnect a target device and trigger re-authentication.

In real-time deauth attack demonstrations, the instructor simulates disconnecting a target machine from its router to observe wifi disruption and verify control over network access.

Learn how to gain access to networks by analyzing password cracking, encryption types, and various attack methods within ethical hacking practice.

Explore router encryption models, including WEP and WPA variants, and how initialization vectors and handshakes influence cracking attempts while contrasting old and newer security methods.

Explore how aircrack-ng and airodump-ng crack WPA and WEP, using monitor mode to collect data and IVs from targeted networks. See how the captured data leads to recovered keys.

Learn how fake authentication attacks let a client appear authenticated to a target wireless AP, enabling packet injection and collection of IVs to crack the key.

Learn practical wireless security testing by configuring monitor mode, identifying a target AP, performing arp replay, and packet injection to crack the WPA key and assess vulnerabilities.

Learn how WPA secures networks with a unique, temporary key, and how capturing the four-way handshake plus a wordlist enables password cracking.

Generate custom password wordlists with crunch by setting minimum and maximum lengths, applying patterns, and exporting to a file; compare with using prebuilt wordlists available online for handshake testing.

Learn to crack a WPA network using a captured handshake and a wordlist with aircrack-ng to retrieve the key. The lecture highlights the risk of weak passwords.

Access your router via the local IP, change the default admin password, and set a strong WPA or WPA2 password. Disable WPS and adjust the channel for security.

Learn the man-in-the-middle attack, analyze the data we gathered from the man-in-the-middle attacks, and complete network penetration testing after gaining access to the network.

After gaining access on the same network, learn to discover the target IP with net discover and map tools and set up a virtual box network for demonstrations.

Use netdiscover to map your connected network, identify devices by IP and MAC addresses, and reveal routers and hosts on wireless and NAT networks for effective network discovery.

Learn to map networks with nmap and zone map, discover devices and ports, and interpret services like DNS (port 53) and HTTP (port 80) to assess security for later exploration.

Exploit a target's network with a man-in-the-middle attack using ARP poisoning to redirect traffic through the attacker, enabling you to intercept and view packet details on the local network.

Execute a manual arp poisoning attack to position the attacker between the target and the router, monitor their arp tables, and forward traffic through the compromised machine.

Demonstrate how to install and use the man-in-the-middle framework to perform ARP spoofing and intercept http login credentials, capturing usernames and passwords on a test e-commerce site.

Demonstrates how hsts enforces https to prevent ssl strip and man-in-the-middle bypass, and outlines alternative attack vectors like keyloggers, screenshots, and beef attacks.

Demonstrates DNS-based man-in-the-middle attacks, showing how DNS spoofing redirects users to fake sites to steal credentials and disrupt web access.

Learn to perform a man-in-the-middle attack with dns spoofing to capture screenshots of a target's browser activity, review saved images in log files, and adjust screenshot intervals.

Explore how a keylogger works within a man-in-the-middle framework to capture keystrokes and screenshots, illustrating methods used in ethical hacking to monitor target activity.

Explore how a man-in-the-middle framework injects JavaScript code into the target browser, demonstrating payload injection and basic code execution to reveal potential access.

Set up Wireshark to graphically capture and analyze traffic from a man-in-the-middle framework, using interfaces and gateway IPs to visualize activity between the target and the network.

Use Wireshark to capture and analyze network traffic, filter HTTP, DNS, and TCP packets, inspect post requests for credentials and cookies, and save captures for later review.

Learn how to defend against mitm attacks by verifying arp tables and router mac addresses, recognizing mac address mismatches, and using wireshark to monitor traffic and detect arp requests.

Study attacking computers by identifying vulnerabilities to gain access, then learn to gather basic information and exploit those weaknesses in this ethical hacking course.

Gain access to computer systems by exploiting misconfigurations, forgotten passwords, and other flaws, while studying ARP poisoning, man-in-the-middle attacks, and DNS manipulation.

Install Metasploitable, a linux vm designed with built-in vulnerabilities for hands-on hacking training with adjustable security levels; download from Rapid7 or SourceForge, import, boot, and log in as MSF admin.

Identify the target by obtaining an ip address on the same network through discovery, then run map scans to reveal open ports, services, versions, and potential vulnerabilities for ethical testing.

Identify an ftp anonymous login vulnerability and use Metasploit to select and configure a module, run the exploit, and gain a shell on the target.

Practice exploiting a username map script vulnerability with Metasploit, leveraging a no authentication vulnerability on port 139 to gain a shell and study unauthorized access.

Examine a PostgreSQL vulnerability through a rapid7 exploit, uploading a shared object, and creating a user defined function to enable arbitrary code execution; navigate msf console and post exploitation steps.

Run a vulnerability scan by creating a project, setting a local IP, launching quick and full scans, reviewing vulnerability results, and preparing for the exploit phase.

Discover vulnerabilities, open a session, run exploits via a graphical Metasploit interface, manage modules, and interact with the target host to browse files, upload payloads, and review results.

Learn how attackers target users, exploring vectors and trojans, using the real framework to create back doors and deliver access to target computers.

Learn to target users with backdoors and trojans requiring user interaction, exploring social engineering as a next step to gain access, complementing prior system vulnerability lessons.

Explain how to install the Veil framework, generate payloads and backdoors, and bypass antivirus software to understand security risks.

Explore the Veil framework overview, detailing evasion, payloads, and back doors, with emphasis on updating the wheel and understanding meterpreter and reverse http connections.

The lecture demonstrates creating a first backdoor with a reverse http payload, configuring the host and port, generating a compiled executable, and preparing for antivirus testing.

Explore ethical hacking concepts as backdoors and payloads are tested against popular antivirus engines, analyze detection rates, and strengthen defenses against undetectable threats.

Learn to use the Metasploit multi handler to listen for incoming connections, configure a Windows Meterpreter reverse http payload, and test backdoor delivery by setting host and port.

This lecture demonstrates testing a trojan backdoor, from payload delivery to establishing a covert connection, and discusses how social engineering and delivery methods challenge defenses.

Learn to configure BDF Proxy to backdoor a downloaded file and perform a man-in-the-middle attack, with OS-specific settings for Windows and other targets.

Learn to execute a man-in-the-middle attack with arp spoofing, intercept downloaded files, inject backdoors, and establish a meterpreter session using msfconsole.