Learn Ethical Hacking: Beginner to Advanced

Master essential Linux commands to navigate directories, manage files, and safely perform directory operations using pwd, ls, cd, touch, rm, mkdir, and rm -r, with caution.

Explore essential Linux commands from cd and whoami to chmod, cat, and grep, then learn file operations, piping, and basic program management.

Learn Linux basic commands for networking and process management, including ps, top, uname, ifconfig, netstat, and ip, to check interfaces, gateways, and connections.

Change the Kali Linux VM network from NAT to bridged adapter and select the correct interface to obtain a 192.168.1.x IP. Ping the Windows host and Google to verify connectivity.

Learn to create a bootable Kali Linux USB drive with Rufus by selecting disk or ISO image and writing the Kali ISO.

Explore essential networking terms for ethical hacking, including the TCP/IP model, IP addresses, MAC addresses, routers, ARP, DNS, DHCP, TCP, UDP, HTTP and HTTPS.

Explore essential hacking terms such as footprinting, scanning and enumeration, system hacking, backdoors and malware, sniffing, social engineering, denial of service, cross-site scripting, cryptography.

Install and configure essential Kali Linux tools, including git and GitHub repositories. Create a non-root user with sudo and explore helpers like tilix and tor to support ethical hacking workflows.

Discover how to use macchanger to view and change a MAC address on a network interface, including randomizing, setting a specific MAC, and restoring the permanent address for anonymity.

Explore footprinting basics, comparing active and passive approaches, and practice Google hacking to identify vulnerable inputs and public data, using commands from the Google hacking database.

Use Nikto to scan a website for vulnerabilities and outdated software, saving results to a file. Specify a target host by domain or IP and adjust basic options.

Explore the whois footprinting tool in Kali Linux to reveal publicly available domain data, including registrant info, expiry dates, and name servers, and learn safe usage for information gathering.

Learn to use the harvester email harvesting tool, run with domain (-d), engine (-b) set to Google, and limit (-l) the results, then troubleshoot intermittent outcomes across domains.

Explore the harvester and shodan to reveal emails, IPs, and IoT devices by domain, and emphasize changing default router credentials to prevent unauthorized access.

Explore zone transfers with dig to assess DNS exposure, understand primary and secondary DNS replication over TCP port 53, and recognize misconfigurations that block transfers on sites like Facebook.

Download metasploitable from rapid7 and import it into VirtualBox, extract the vmdk, and run a vulnerable Linux VM on a host-only network for attacks and scans; log in as msfadmin.

Learn how to use Nmap, a free network mapper, to discover hosts, identify open ports and services, infer operating systems, and assess vulnerabilities—always scan with permission.

Learn how to run Nmap scans on targets, save results to a file, scan all ports or specific ranges, and identify open ports on local networks.

Perform advanced Nmap scans to detect operating systems, identify open ports, and determine service versions across targets. Note that results may be unreliable.

Explore Zenmap, the graphical user interface for Nmap, and learn to input a target IP, select scan profiles, and run fast, verbose scans with OS detection and port details.

Explore tcp scans with nmap, using -Pn to bypass discovery, -sT for tcp connect, -sS for syn scans, and -sU for udp scans to reveal open ports and services.

Explore how to bypass defenses with Nmap by using UDP scans, manipulating TCP handshakes, and applying options such as -sA, --source-port, -g, --data-length, and --spoof-mac to evade restrictions.

Learn to access the preinstalled nmap scripts, run them against a target with --script, and test a brute-force script for ssh while adjusting port and password list on owned machines.

Learn to extend nmap scanning with custom scripts by downloading from GitHub repositories, running multiple scripts against a target, and interpreting vulnerability outputs across open ports.

Download and install the OWASP broken web apps VM in VirtualBox, boot with root/owaspbwa, configure bridged or host-only networking, and explore vulnerable web apps at the VM IP.

Learn the basics of http requests and headers, including the get method, host, user agent, accept-language, accept-encoding, keep-alive, cookies, and authorization, and contrast http with https encryption.

Learn how HTTP responses consist of a header and a body with a status code. Explore server information and cookies, plus methods like get, post, put, delete, options, and trace.

Configure Burp Suite as a local proxy to intercept traffic by setting the proxy listener to port 880, configuring Firefox, and installing the Burp certificate for https.

Practice intercepting, editing, and forwarding http requests in Burp Suite, inspect responses and history, and modify post data and user agent to study login flows and privacy implications.

Use WhatWeb to identify a website's technologies and versions, then Dirb to brute-force directories and prepare for Burp Suite testing.

Learn to set up Burp Suite as a proxy, intercept traffic, spider the site, and perform a password recovery attack using Intruder with a username list.

Brute force a login page with Burp Suite, using username and password lists, Intruder cluster bomb, and grep match to identify a valid credential.

Learn to brute-force a web login with Hydra by extracting the post path via Burp, using user and password lists, and applying a post form attack; consider basic prevention.

Learn how session fixation exploits a preconfigured session ID in a link or email to access a victim's account, highlighting weak session IDs and cookies.

Explore injection attacks, including command injection, and cross-site scripting, and understand how unsanitized user input can trigger server commands or database queries and expose usernames and passwords.

Learn how command injection can run commands on a server or remote systems, with practical demos including ping, brute-forcing logins with Hydra, and testing vulnerable web applications.

Exploit a command injection vulnerability to perform remote command execution, use netcat to create a reverse connection from the victim to the attacker, and observe the Linux system.

Identify blind command injection in web applications by triggering hidden outputs and validating via network packets with Wireshark; compare get and post requests to reveal vulnerabilities.

Learn the basics of SQL, how databases store data in tables with rows and columns, and how queries using select and where retrieve information, highlighting potential SQL injection risks.

Explore manual sql injection on a vulnerable dvwa app, test user ids to reveal first and last names, trigger errors with apostrophes, and uncover column counts using union select.

Demonstrate manual sql injection steps, such as union select to reveal database names, information_schema tables, user data, and hashed passwords, culminating in a preview of blind sql injection.

Explore sqlmap basics by performing blind sql injection, brute-forcing database names and discovering tables and users, using encoded payloads and automated scans to reveal database structure.

Explore XML and XPath injection vulnerabilities caused by poorly filtered user input and how contains-based queries can leak data; a Burp Suite lab demonstrates identification and understanding.

Learn to install and use xcat to automate XML injection testing, install python3-pip, and apply input filtering to block dangerous characters and SQL/XML injection vectors.

Explore cross-site scripting concepts, including reflected and stored XSS, how user input can trigger JavaScript in the browser, and how attackers exploit dynamic web pages.

Explore stored cross-eyed scripting vulnerabilities, including how a guestbook page can store scripts, prompt warnings, and enable cookie theft and session hijacking.

Explore stored and reflected XSS attacks, demonstrating how DOM injection can alter a webpage’s content and visuals using local and session storage, and discuss implications.

Explore automatic cross-site scripting testing using XSSer and XSSsniper to detect stored, reflected, and DOM-based injection points, and learn how to craft payloads.

Learn ethical hacking by exploring wireless attacking theory with brute force dictionary and evil twin attacks against WPA and WPA2, using the four-way handshake, deauthentication frames, and monitor mode.

Learn to enable monitor mode on your wireless card to capture the four way handshake from a wireless access point, using ifconfig and iwconfig in Kali Linux.

Master capturing the four-way wifi handshake by enabling monitor mode, using airodump-ng to identify targets, and performing an authentication handshake capture with airmon-ng, airodump-ng, and aireplay-ng for security testing.

Learn how to extract a handshake from a captured cap file, transfer it to the attack machine, and brute-force crack the hash using the RockYou word list with aircrack.

Learn to crack WPA/WPA2 passwords by using aircrack-ng with a handshake capture and a rockyou wordlist, exploring command options and how hardware speed affects cracking performance.

Learn to crack wifi handshakes using hashcat by converting cap files to hccapx, selecting hash type 2500, and running GPU-accelerated attacks with rockyou, while exploring password-list creation with crunch.

Learn to generate custom word lists with crunch for targeted brute force attacks on wireless handshakes, and pipe the output to air crack for efficient password cracking.

Learn to generate targeted password lists using cupp, a Python tool, by interactive password profiling to create a dictionary for a single victim, illustrating practical ethical hacking.

Learn to speed up cracking of captured handshakes by creating rainbow tables from password lists, importing ssid data, and hashing passwords with crunch for faster attacks.

The lecture demonstrates running a rainbow table attack with aircrack, using a dot cap file and a word list to show cracking speeds.

Learn to install Fluxion and automate creating an evil twin access point with a captive portal for testing wireless security, including GitHub setup.

Learn to locate hidden wireless networks using monitor mode and airodump-ng, identify the SSID, channel, and MAC address, and perform a targeted authentication attack to connect.

Discover practical security measures to prevent wireless attacks and authentication attacks, including enabling 802.11w protected management frames, using WPA2-PSK with a strong password, and avoiding hidden networks and open systems.

Define the address resolution protocol and explain ARP requests and replies to map IP addresses to MAC addresses, forming the basis for ARP tables and the man-in-the-middle attack.

Explain the theory of the man-in-the-middle attack using ARP spoofing, showing how an attacker intercepts and forwards traffic between a victim and a router to read or manipulate data.

Install the MITMf tool on Kali Linux by cloning its GitHub repository, installing requirements, and running mitmf.py to explore ARP spoofing, DNS spoofing, and other man-in-the-middle options.

Demonstrates manual ARP spoofing to execute a man-in-the-middle between router and Windows 10 target, using ARP cache checks, IP forwarding, and drift net for traffic capture, with security caveats.

Install and configure the MITMf man-in-the-middle framework by following GitHub instructions, resolve dependencies, and verify the tool before attempting the spoofing attack.

Learn how to set up and run an ARP spoofing attack to intercept traffic on a local network, monitor HTTP requests, and understand SSL strip limitations.

explore man-in-the-middle attacks using arp spoofing and dns spoofing, and apply ssl strip to sniff credentials on https sites.

Explore how the beef browser exploitation framework hooks browsers to a controlled page, enabling man-in-the-middle redirection, captive portal attacks, testing on a local network, and outdated browsers.

Explore a man-in-the-middle framework to screenshot a target's browser, apply image randomization or upside-down effects, and discuss related techniques like dns, arp, captive portals, and ssl strip.

Learn to clone a web page on an Apache web server, create a fake login page, save page assets, and set up redirection for a man-in-the-middle DNS spoofing scenario.

Learn to use Ettercap, with CLI and GUI, for man-in-the-middle attacks on a local network, covering sniffing, ARP spoofing, hosts, targets, and plugins.

Explore the Metasploit framework in Kali Linux, learning to navigate msfconsole, run exploits and payloads, and understand zero days, reverse shells, and related concepts.

Explore the Metasploit framework, its modules, encoders, payloads, and exploits, plus msf console and msf venom. See how Ruby-based exploits, the modules directory, and meterpreter shells illustrate post-exploitation.

Learn to use the metasploit framework to scan an OWASP or Metasploitable target and brute-force SSH on port 22 with ssh_login and ssh_version modules.

Learn to use the Metasploit Tomcat manager login module to brute-force port 8080 on an OWASP VM and access the Tomcat web application manager.

Explore command injection techniques to obtain a meterpreter shell in ethical hacking lab. The lecture demonstrates PHP meterpreter reverse_tcp with msfvenom in an OWASP bWAPP setup featuring Burp Suite.

Explore PHP code injection on a vulnerable page, intercept requests with Burp Suite, execute system commands like pwd, and simulate downloading a shell and connecting with Meterpreter.

Demonstrate two Metasploitable exploits with the Metasploit framework: samba usermap_script and vsftpd_234 backdoor, including payload setup and obtaining a reverse shell.

Install wine on Kali Linux to run Windows programs and support Eternal Blue exploits, and use wine to install Windows Python for future payload development.

Create Windows meterpreter reverse_tcp payloads with msfvenom, choosing x64 or x86 and configuring lhost and lport. Explore encoder options and antivirus detection considerations, including shikata_ga_nai.

Learn to craft a Windows reverse shell payload, set up listeners, and evaluate antivirus detection using VirusTotal, while exploring encoder options and hex editing at a high level.

Explore creating a Windows x64 meterpreter reverse_tcp payload, delivering it via USB drive or Apache2, and establishing a meterpreter session using msfconsole on a Windows 10 system.

Learn to use meterpreter in ethical hacking, mastering basic session management, file system navigation, upload/download operations, and network commands across Windows and Linux targets.

Learn to use meterpreter to escalate to system privileges on Windows 10, bypass UAC with fodhelper, and explore related capabilities like keylogging and screenshot capture.

Learn how to prevent privilege escalation on Windows 10 by configuring always notify for user account control, understanding fodhelper bypass attempts, and securing task manager prompts.

Explore post exploitation modules after gaining privileges, including sniffing packets with meterpreter, ARP scanning the local network, virtual-machine checks, credential hashes, and enumerating installed apps.

Establish a meterpreter session over the internet via port forwarding, generate a msfvenom payload with your public IP, and configure a multi/handler listener.

Demonstrates using the eternalblue doublepulsar exploit within the metasploit framework to gain a meterpreter shell on Windows 7, covering setup, targeting, and persistence concepts.

Learn to establish persistence after gaining a meterpreter shell on Windows 7 target, using run persistence with -u, -X, -i, -p, -r to reconnect and create a registry startup entry.

Learn how ngrok provides a public URL to forward connections over the internet, enabling remote testing with Kali Linux, msfvenom payloads, and meterpreter reverse shells.

Learn how venom automates android and ios device attacks, generating payloads and establishing a meterpreter session, as described through setup and deployment of the tool.

Advance your intermediate hacking skills with web, system, man-in-the-middle, and wireless attacks, then begin coding in python and C to build a back door with persistence.

Master python basics for variables, arithmetic, strings, and percent formatting in python 2, with setup steps to run programs and prepare for backdoor coding.

Learn how raw_input collects user input in Python and converts it to integers or strings, and apply these concepts to simple programs for ethical hacking.

Master Python conditionals by using if, else, and elif to branch logic, with examples that compare values, check even or odd numbers, and print outcomes.

Explore how for loops in Python use range to iterate and increment list items, accumulating sums and increasing each element by one.

Learn how the while loop runs in Python, using a true condition to repeat actions and print results. A break stops the loop, and user input controls when to quit.

Explore Python lists by creating string lists, indexing with zero-based positions, slicing ranges, and using append, remove, and pop; note how functions streamline code.

Learn how to define and call Python functions to automate tasks, process numbers and strings, reverse strings, and count odd and even numbers in lists.

Learn how Python classes group related data, define self and attributes such as name and email, create objects, and access these attributes with print statements.

Learn how to import libraries in Python, use the os library to run terminal commands like clear and ls, and call functions from imported libraries across programs.

Learn to create, write, read, and delete files in Python using file objects and os, covering write, read, and append modes while exploring backdoor file transfers.

Learn to use the try and except rule in Python to prevent crashes from errors, illustrated by handling zero division with a ZeroDivisionError and printing can't divide by zero.