Ethical Hacking for Beginners: BurpSuite, NMap and SNORT

Learn how to configure Burp Suite Community Edition with Firefox proxy on 127.0.0.1:8081, install and trust the CA certificate, and use Burp Suite to intercept, modify, and forward browser requests.

This lecture defines SQL injection attacks, describes their impacts on databases and sensitive data, and demonstrates authentication bypass on a demo site to access and modify information.

The lecture demonstrates SQL injection authentication bypass payloads on a login page, showing how to access the admin account using payloads from SQL injection cheat sheets.

Demonstrates exploiting a sql injection vulnerability in the login function of a Portswigger lab to bypass authentication using Burp Suite to access an admin account and update email.

Learn to use sqlmap on Kali Linux to conduct sql injection against a test php site. Enumerate databases, select a database and tables, inspect columns, and dump usernames and passwords.

Demonstrate reflected cross-site scripting by injecting a script tag into a demo site's search box to trigger an alert, proving the vulnerability and exploring payloads from GitHub and Portswigger labs.

Demonstrates stored XSS through a Portswigger lab, showing how injecting a script tag into a comment stores it on the page and affects other users.

Install, configure, and run snort on Kali Linux, create local rules, and generate alerts for icmp, http, and ssh traffic using snort commands.

Learn to use nmap, a network mapper, to scan IP addresses and ranges, reveal open, closed, and filtered ports, and identify services like ftp, telnet, http, and https.

demonstrates using nmap to specify ports and ranges on a target IP, revealing open services such as ftp, telnet, domain, http, and https.

Demonstrates nmap network scanning in Kali Linux, including SYN port scan, TCP connect scan, UDP scan, and operating system and service version detection to identify open ports.