Ethical Hacking: Linux Intrusion Essentials

Demonstrates how an attacker brute forces ssh on an Ubuntu system running OpenSSH server, using nmap for discovery and Hydra with the rockyou password list to gain access.

Learn how attackers scan Linux hosts, exploit SSH, and escalate from Ubuntu to root via CVE 2019 14287 sudo vulnerability, underscoring timely system updates.

Explore command injection, illustrating how a malicious script downloaded from the internet via curl and bash can be executed, often leaving no local files.

Shows how a Kali Linux attacker can gain access to an Ubuntu system via a single script and erase traces by deleting and recreating the bash history.

Learn how installation scripts may carry malicious lines like reverse shells, and why running such scripts as root risks full control; verify source code or use official package managers.

Detect Linux intrusion by examining processes, network connections, and system logs for a reverse shell, even after bash history is deleted, and check /var/log, /etc/passwd, and crontab for persistence.

Understand how phishing emails with attachments gain initial access to company systems. Attackers harvest corporate emails with Hunter.io to craft targeted messages that prompt a single user to act.

Phishing emails lure Linux users into executing a malicious attachment or script, enabling a reverse shell that grants the attacker user-level control over the victim's machine.