
Learn to find and tag vulnerable systems, set up a Metasploitable 2 practice lab, and grasp ethical hacking basics by scanning networks, identifying systems, banners, and common services and ports.
Learn to set up Kali Linux and Metasploitable 2 on VMware by downloading, extracting, and running both virtual machines, with default credentials Kali/Kali and MSF admin/MSF admin.
Metasploitable Download link: http://downloads.metasploit.com/data/metasploitable/metasploitable-linux-2.0.0.zip
Discover how to identify a target IP address by scanning the same network with three methods: iPhone scan, net discovery, and map with nmap, revealing 192.168.174.128.
Learn to read banner information from a remote service to reveal the web server name and version, then search for vulnerabilities and possible exploits using nmap -sV.
A port number acts like a door number guiding data to the right program, with ports categorized as well known, registered, and ephemeral (0–65,535), and https uses 443.
Master FTP, the file transfer protocol, to send and receive files between computers on the internet, using port 21 for control and port 20 for data after connection.
Explore port 21 ftp through terminal scanning of a target ip address, identify the ftp service version, view options, and set the host in an ethical hacking lab.
execute a brute force on port 22 using metasploit to obtain SSH credentials on a metasploitable host, then interact with the session to explore files and manage directories.
Demonstrate how port 23 telnet opens a service on a Metasploitable machine, enabling login with MSF admin and basic directory operations.
Enumerate smtp users on port 25 using nmap, metasploit, and netcat to verify valid user accounts on a target system.
Explore how http and port 80 enable web communication and expose vulnerabilities like SQL injection, cross-site scripting, and buffer overflow that can lead to data theft and system compromise.
Explore exploiting port 80 on a Metasploitable target using a CGI injection exploit, set the host, obtain a shell, and run basic file operations such as listing and removing directories.
Scan open ports with nmap to reveal port 1099 running Java RMI, then use Metasploit to set the host to the victim IP and exploit the Java RMI server.
"Ethically Hack the Planet Part 2" is an advanced cybersecurity course that delves into the intricacies of network penetration testing and ethical hacking. Building upon the foundational knowledge gained in Part 1, this course extends the understanding of cybersecurity concepts to a deeper level. One of the core components of the course is the exploration and practical use of Metasploitable 2, a purposely vulnerable virtual machine that provides a safe environment for hands-on learning and experimentation.
The course covers essential techniques such as network scanning to identify IP addresses within a network. Students learn about banner grabbing, a method to gather information about a target system, including the operating system, software versions, and more. Understanding port numbers and their associated services is a crucial aspect of the course, particularly focusing on commonly exploited ports like FTP (Port 21), SSH (Port 22), Telnet (Port 23), SMTP (Port 25), HTTP (Port 80), and ports 139, 445, and 1099.
FTP, SSH, Telnet, SMTP, and HTTP are explored in detail, discussing their functionalities, vulnerabilities, and potential security risks. Practical exercises involve utilizing ethical hacking techniques to assess and secure these services, thereby preparing students to identify and mitigate vulnerabilities in real-world scenarios.
By the end of "Ethically Hack the Planet Part 2," participants will have a comprehensive understanding of network security, ethical hacking methodologies, and the tools necessary to assess and fortify network infrastructures against potential cyber threats. The course empowers individuals to use their knowledge and skills for constructive purposes, promoting a safer and more secure digital landscape."