Ethical Hacking With Python, JavaScript and Kali Linux

Install two virtual machines—Kali Linux as the server and Windows 10 as the testing victim—inside VirtualBox, on a safe main machine, to run payloads, handlers, and test hacking setups.

Explore essential Linux terminal commands and navigation, master file and directory operations in the root directory, view system information, and use networking utilities.

Master apt-get to update, install, upgrade, and remove packages on Debian-based systems like Ubuntu and Kali, using sudo or root privileges.

Master chmod to set owner, group, and other permissions, view rights with ls -l, and apply recursive, verbose, or force options, including numeric modes to files and directories.

Explore networking basics, including client-server communication and IP and MAC addresses. Learn how data frames and ARP use MAC addresses to route traffic via routers, switches, and firewalls.

Learn to gather network information—IP and MAC addresses, open ports, and operating systems—using netdiscover and nmap to guide port scanning and vulnerability discovery.

Learn to switch a wireless adapter from managed mode to monitor mode using airmon-ng, enabling packet sniffing and capturing traffic from all devices on a network for analysis.

Learn to switch from managed to monitor mode on wlan0 using a manual method, bringing the interface down, configuring with iwconfig and ifconfig, and using airmon-ng to monitor traffic.

Explore ethical wireless security testing by capturing WPA handshakes with airodump-ng and cracking passwords using crunch wordlists, all within permitted networks.

Capture the handshake using airodump-ng and deauthenticate the client to force a reconnection, generate a word list with crunch, and crack the WPA password with aircrack-ng.

Learn how a man-in-the-middle attack uses arp spoofing to hijack mac addresses and ips, intercepting traffic between client and server, impersonating both sides, and exposing public keys and credentials.

Demonstrate arp spoofing and capturing packets with the mitmf framework, spoofing client mac addresses, configuring the gateway and target, and analyzing unencrypted post data.

Learn to use the man in the middle framework and beef plugins to inject payloads, spoof traffic, inject urls, configure gateway and targets, and enable keystroke logging and screen capture.

Learn how to inject a keylogger and capture screenshots using the MITMF man-in-the-middle framework, configuring the gateway, targets, and network interfaces with Python and Twisted.

Explore how Wireshark and the MITMf framework enable interception and analysis of http requests through a man-in-the-middle setup, including packet capture and filtering.

Install the veil framework to generate untraceable payloads and backdoors for client-server communication on Kali Linux. Learn configuration, setup steps, and future topics like reverse connections and Python integration.

Learn to generate a custom payload with Veil, update the framework to bypass antivirus, and configure a reverse backdoor payload on Kali Linux.

Learn to generate a veil payload by selecting options like username and processors, then use a Metasploit msf console multi/handler to listen for a reverse connection.

Explore creating and testing payloads, attempting antivirus evasion with Veil framework and msfconsole listener setup, and evaluating detection results across Virus Total scans.

Shows creating a Veil payload, hosting a reverse connection, and using msf console to obtain a Windows client session from a Kali Linux host.

Explore beef, the browser exploitation framework, and learn how a JavaScript hook links a target browser to the attacker, enabling payloads, redirects, and social engineering.

Demonstrates a man-in-the-middle attack using mitmf and beef to intercept client traffic via arp spoofing, inject a browser hook payload, and control web activity on the target device.

Explore Python basics by writing expressions and using the print command to display results, then create and run scripts versus cells, saving files and executing with a run command.

Identify Python keywords as reserved, case-sensitive words; learn how statements and assignments are executed by the Python interpreter, and use single-line and multi-line comments to document code.

Learn how to declare Python variables, assign strings, numbers, and booleans, apply naming conventions, and perform basic type conversion with input, print, and type casting.

This lecture demonstrates python string formatting using the % operator and the format method. Explore placeholders, tuples, print statements, and input with strip to build messages like name and age.

Explore Python operators and logic, including arithmetic, comparison, and boolean operations. Learn imports and modules with random and math, using dot notation and from import syntax.

Explore conditional flow using if, else, and elif in Python, learning how conditions direct code execution, handle true/false decisions, and process user input for positive, negative, or zero cases.

Explore how loops work in python, including for and while structures, range behavior, and flow control with break and continue, plus even/odd testing.

Learn to create Python user-defined functions with def, understand positional and default arguments, return values, and how to avoid repetition; explore lambda (anonymous) functions and basic string formatting.

Learn how function scope and global scope affect variable visibility, and master packing and unpacking arguments in Python, using args, tuples, and looping to process multiple inputs.

Learn to read and write files in Python with built-in operations and the with statement for automatic closure. See input written to a text file, appended, and read back.

Explore how Python lists store multiple items, including mixed data types and nested structures, using zero-based and negative indexing, slicing, and common operations like append, insert, remove, and pop.

Explore Python strings as sequences of characters created with single, double, or triple quotes; master indexing, slicing, immutability, concatenation, and built-in methods like capitalize, lower, strip, and len.

Explore Python dictionaries as key-value data structures, learn to create, access, update, and delete items using keys, values, and methods like dict and get.

Explore tuples in Python by creating them with parentheses, noting immutability. Index and slice, including negative indexing, with nested tuples and mixed data types; convert dictionaries to tuples for looping.

Explore object oriented programming by defining classes and creating objects with unique attributes, while sharing methods like sing and dance, demonstrated through a Python bird class with instances.

Explore inheritance in Python by building a base class and a derived class that shares methods and attributes. Use constructors, init methods, and super to access parent behavior.

Master list comprehension in Python, replacing multi-line loop with a single expression using a loop and a condition to generate lists like even numbers from a range, improving readability.

Master regular expressions in Python by building patterns and applying them to strings; learn dot, star, plus, and question mark, and use character classes for targeted matches.

Discover how MAC addresses uniquely identify hardware and guide packets, and learn to change them temporarily on Kali Linux using MAC changer tools and a Python-based approach.

Learn to run shell commands from Python using the subprocess module, capture command output, and extract MAC addresses with a regular expression for cross-platform interfaces.

Learn to change a MAC address on a network interface using Python, down the interface, run a subprocess command, and bring it back up.

Generate and apply random or manual mac addresses by combining Cisco or Dell prefixes with random last bytes, formatting with colons. Set the target network interface and verify new mac.

Learn how Tor browser enables anonymous browsing and access to the dark web through onion routing and new identity circuits, while recognizing safety, legality, and potential trade-offs.

Host and publish a simple website on the deep web using tor hidden services, configure torrc, create a local index, and run a web server with apache.

Install a free vpn via openvpn on linux using the vpnbook bundle, then test your ip and dns leaks to see that anonymity isn't guaranteed.

Configure proxychains on Kali Linux to prevent dns leaks using dynamic chain with socks proxies. Ensure dns request no leak and tor scenarios are understood.

Create an nmap port scanner module in Python, install nmap and the module, and perform single, UDP, and comprehensive scans to identify host, protocols, and open ports.

Learn to perform TCP, UDP and comprehensive Nmap scans with Python, capturing open ports, IP status, protocols, and service detection.

Create a Kali Linux netdiscover clone that uses ARP requests and broadcasts to map IP and MAC addresses on a local subnet, with Python and Scapy.

Learn to use the scapy module to implement arp protocols by crafting and broadcasting arp requests. Discover ip-to-mac mappings and interpret responses to enumerate devices on a subnet.

Demonstrates how to craft a broadcast request to discover connected clients' IP and MAC addresses, using a Python-based SRP workflow and parsing responses to format a network scanner output.

Learn to build a Python keylogger using the pynput module to monitor keyboard and mouse input via a listener. Implement on_press and on_release handlers, run the script, and exit gracefully.

Develop a clipboard-based keylogger using the pyperclip module that captures unique clipboard content every three seconds and demonstrates storing and reviewing captured data.

Learn to build a cross-platform client payload that uses Python's subprocess to execute shell commands, list directories, and send results back to a hacker via socket or email.

This lecture demonstrates building a payload that extracts wifi profile passwords and delivers them to a Gmail account using SMTP, illustrating exfiltration techniques.

Explore how to design a download workflow in Python using requests, discuss payload delivery concepts, and preview packaging and social engineering techniques for ethical hacking contexts.

Learn to build and modify a keylogger using bee logger in Kali Linux, capture keystrokes with Python, convert to executable, and send logs to an email account.

Develop a keylogger that captures keystrokes and emails the logs to a Gmail account, using a send mail method and class initialization for email and password.

Explore keylogger deployment and observation in an ethical hacking context, configuring a Kali Linux server, delivering the keylogger to a client, and receiving key logs via email for analysis.

Learn to implement a client side download feature to retrieve and execute a key logger via Kali Linux.

Explore LaZagne as a tool to extract stored Windows passwords and demonstrate a malware-inspired workflow that exfiltrates credentials to an email or server, with notes on antivirus detection.

Package a python file for Linux using wine to run the Windows by installer, install Python, configure wine, and build an executable from the script.

Explore a packaging technique to wrap a payload in a PDL file, disguising it as a video while bypassing antivirus detection and downloading a covert executable to a temporary directory.

Learn how to convert a backdoor into trojans by packaging a payload with a custom icon and video content using a pyinstaller workflow, including icon conversion and adding data.

Study threading in Python to enable multitasking and parallel execution by running multiple threads. Learn subclassing Thread, overriding run, starting threads, and using sleep to illustrate concurrency.

Explore backdoor and reverse shell concepts using the socket module in a Python client-server setup, detailing binding, listening, connecting, and future cross-platform packaging.

Master sending and receiving data between a server and client using Python sockets. Handle bytes in Python 3 and encode messages to ensure reliable communication.

Explore building a backdoor workflow on kali linux using python sockets to enable server-client communication, with binding, listening on port 4444, accepting connections, and data handling.

Learn how to run multiple threads with the threading module to handle concurrent socket operations, including binding, accepting connections, and processing jobs from a queue.

Develop and manage a command-line interface to list active client connections, display detailed client information (IP, PC name, OS), and gracefully close connections in a multi-client server.

Explore client-server socket communication, sandboxed execution via Sandboxie, implement mutex protection, and detect virtual machines using Windows Management Instrumentation and Win32 APIs.

Connects to the server via a socket, handles reconnection, retrieves host name, platform system, release, and user environment information, and lists active connections for management.

Explore building backdoors with python and kali linux, manage server–client connections, and interact with a target to retrieve IP address, PC name, OS, and user information.

Send message to client from backdoor shows how a server issues commands to a connected client, prints messages, and handles message prompts in a backdoor workflow.

Learn how a server can remotely command a client to open a web browser and navigate to a specified URL by parsing signals and executing a backdoor command.

Explore how a backdoor captures and transmits screenshots from a client to a Kali Linux server, using Python for screen capture, encoding, and data transfer.

Shows how a backdoor logs the host, sends encoded location data to the server, and uses the ctypes module to call Windows APIs to lock the workstation.

Learn how to hijack the client's command prompt to access its file system via a remote command shell from the server side and exchange commands and results.

Implement a client-side command shell hijack that receives server commands, opens a pipe, decodes responses, and prints the standard output and errors for backdoor communication.

Explore turning a Python backdoor into an executable, then test its detectability across antivirus tools and VirusTotal, analyzing which scanners flag or miss the file.

learn to build a simple web crawler in Python using the requests module, fetch a URL with the get method, and handle responses and exceptions to verify status codes.

Learn to crawl and enumerate subdomains of a main domain, then assess potential vulnerabilities using a Python-based script and HTTP requests to verify subdomain availability.

Build a simple Python web crawler that fetches a site, decodes content, and extracts hyperlinks with regular expressions, then joins relative links to complete URLs.

Learn to build a web crawler quickly using BeautifulSoup with Python requests, parsing HTML, and extracting anchor hrefs.