Advanced Ethical Hacking: Hands-On Training

A short overview video of the expectations for building your virtual lab environment using VirtualBox.

In this lab, you will learn how to create a virtual install of Kali Linux which will be your main attack platform used in this course.

In this lab, you will learn how to create a virtual install of Metasploitable2 which will be used as a target.

In this lesson, you will learn how to create an automated Windows 10 virtual machine installation using VirtualBox and a scripted build process. This automated setup helps you build a clean, repeatable Windows 10 target system that can be reused across cybersecurity, vulnerability testing, and DFIR labs. By the end of this lesson, you will have a working Windows 10 VM ready for the next stage of lab configuration.

In this lesson, you will learn how to transfer the PowerShell-Lab folder from your host computer to the Windows 10 target VM. The PowerShell-Lab folder contains the scripts used throughout the course to configure, validate, and prepare the target machine for cybersecurity and DFIR exercises. By the end of this lesson, the folder will be successfully copied to the Windows 10 desktop and ready for use in future labs.

In this lesson, you will learn how to transform your clean Windows 10 lab machine into a vulnerable target using the PowerShell-Lab scripts. These scripts apply a series of controlled security misconfigurations that will be used throughout the course for vulnerability assessments, digital forensics investigations, and cybersecurity exercises. By the end of this lesson, your Windows 10 VM will be ready for the hands-on labs that follow.

In this lesson, you will learn how to automate the installation and configuration of Metasploitable3 (Windows Server 2008) using Packer, Vagrant, and VirtualBox. Rather than manually installing the operating system and vulnerable services, you will use an automated build process to create a repeatable lab environment suitable for penetration testing, vulnerability assessments, and cybersecurity training. By the end of this lesson, you will have a fully functional Metasploitable3 Windows Server 2008 virtual machine ready for use in the hands-on labs that follow.

From time to time, Virtualbox will not have a network available for some network types. In this video, we see how this can be easily fixed.

When configuring two or more devices to use the same network type, you may encounter an issue with VirtualBox issuing the same IP address to both devices This is an easy fix.

In this lab, you will learn how to import the extension pack for VirtualBox. The extension pack extends the capabilities of VirtualBox.

In this lab, you will learn how to use the WebMap Nmap Dashboard application to generate a PDF report of your Nmap scan results.

In this video and lab, you will learn how to conduct an automated recon/enumeration scan using nMapAutomator.

An out-of-the-box Windows 10 virtual machine as part of a lab environment for practicing pentesting is a tough nut to crack. What makes a Windows 10 machine vulnerable are weak folder permissions, vulnerable software, weak passwords, and vulnerable services, just to name a few.

Before we can get to the fun stuff of exploiting our Windows 10 target, we need to enumerate and find as many possible avenues as possible for privilege escalation.

In this short video, you will learn how to download a ready make batch file that will make your Windows 10 target machine vulnerable to privilege escalation.

Download location for the needed lpe_windows_setup.bat batch file: https://github.com/sagishahar/lpeworkshop

In this lesson, you will learn how to perform an automated enumeration of a vulnerable Windows 10 target using WinPeas looking for ways to elevate privileges.

In this short video, you will learn how to use Powershell to quickly copy files and create a reverse shell using PowerCat. 

In this short video and lab, you will learn how to establish a reverse shell using command injection.

In this lab, you will learn how to create a reverse shell using a file upload vulnerability.

In this lesson, you will learn how to spawn a Meterpreter session on a Windows 7 Pro machine by creating an automated resource script file to launch within Metasploit.

In this short video and lab, you will learn how to upgrade a dumb terminal to a fully functional BASH shell.

In this lesson, we will learn how to perform privilege escalation on a Microsoft Windows machine using the Metasploit UAC bypass module.

In this short lab, you will learn how to use Metasploitable2 to create a persistent connection with a Windows 7 Pro machine.

In this lab, you will learn how to create a virtual full install of Server 2016 with GUI.

In this lab, you will learn how to prepare a Server 2016 install for promotion to a domain controller.

In this lab, you will learn how to promote Server 2016 to a domain controller.

In this lesson, you will be shown how to install PowerShell Empire on Kali Linux 2021.1. When it comes to PowerShell Empire, not all installation packages are created equal.

In this lesson, we take a look inside Active Directory using PowerShell Empire. PowerShell Empire has a number of post-exploitation modules.

In this lab, you will learn how to perform post-exploitation tasks against a Windows PC.

Continuing with post-exploitation, we look at how we can use the advanced password hacking capability of Metasploit.

In this lesson, you will learn how to perform post-exploitation of a Microsoft Windows target using Metasploit.

In this lab, you will learn how to brute force the SMB password from a Windows Server configured as a domain controller.

This is the follow-up lab for Brute Forcing the SMB Password For a Windows Server. The previous lab is a prerequisite for this lab. In this lesson, you will learn how to enumerate Active Directory using RPCClient.

In this lesson, you will learn how to capture the authentication password for a wireless network a target machine successfully authenticated to in the past.

In this short video, you will learn how to use Python to quickly and easily transfer files from a staging server to any machine on the network.

HTML Smuggling is an evasive payload delivery method that helps an attacker smuggle payload past content filters and firewalls by hiding malicious payloads inside seemingly benign HTML files.

In this lab, you will learn about the Heartbleed vulnerability. Heartbleed is a vulnerability that came to light in April of 2014; it allowed attackers unprecedented access to sensitive information and was present on thousands of web servers, including those running major sites like Yahoo.

In this lesson, you will learn how to exploit RDP running on a remote target using a brute force attack.

In this lesson, you will see how we can easily capture the username and the hashed credentials for the member of a Microsoft Windows domain using Responder.

In this lab, you will learn how to access Kali Linux across the WAN using NGROK.

In this lesson, you will learn how to perform some basic pentesting tasks and establish a reverse shell using Netcat.

In this lab, you will learn how to perform active information gathering of DNS records using DNSRecon.

This lab focuses on gathering information using Recon-ng. Students learn about the fundamentals of using Recon-ng for reconnaissance and information gathering in a cybersecurity context. This lab provides hands-on experience with a key cybersecurity tool, enhancing students' practical skills in digital reconnaissance and data analysis.

Those of us born with a face made for radio have learned how to fake it until we make it, and that is what this lab is all about.