Hacking in Practice: Intensive Ethical Hacking MEGA Course

Learn sql injection techniques, from crafting payloads and exploiting insertion points to using always-true queries and inline comments, and understand how elevated permissions enable database access.

analyze a case app vulnerable to sql injection, showing login bypass with crafted inputs, error-based and blind techniques to map tables, columns, and data types, and potential admin access.

Explore blind SQL injection techniques, including boolean and time-based attacks, using error messages and responses to infer table and column names, and even alter data.

Explore current cyber threats, identify the enemy, and uncover weaknesses in computer system protection. Assess user and administrator behavior and learn how consumerization of IT and apt reshape security awareness.

Traces the 1990s stone-age of computer systems and cybercrime, highlighting the Morris worm, the first global denial-of-service attack, and how billions of devices still face millions of attacks monthly.

Trace the origins of IT security myths from Arpanet to the internet and debunk the myth of total system protection. Explore why even secured machines can fail.

Debunk myths about protection by showing that physical protection and a security policy are essential. Relying on firewalls, obscurity, or client-side safeguards alone cannot defend against local attacks or tampering.

Examine the myth that IT security should always be a priority, showing how security trade-offs affect usability, functionality, and freedom, and why total security is impractical.

Explore how social networks and the internet reshape computer systems security by changing trust and why we are more susceptible to different types of attacks, while attackers evolve.

Explore how social networks reveal location and personal data through geotagged photos, showing how socio-technical attacks exploit online information and the importance of cautious posting.

Public records and social media searches reveal personal data. It shows how sites like Intelius and Spokeo compile addresses, phone numbers, birth dates, and history, illustrating identity theft risks.

Analyze how online privacy reshapes security through real cyber crime stories, showing criminals' motivation and skills range from credit card schemes to denial-of-service attacks.

Examine sniffing software that monitored network traffic to steal credit card numbers, highlighting the TJX breach, 45 million cards stolen, mastermind Gonzales, and related cybercrime outcomes.

Explore cyber war and cyber terrorism, tracing historic incidents from Estonia and Georgia to Stuxnet, and examine methods like espionage, denial of service, and internet propaganda.

Examine how data security relies on confidentiality, integrity, and authenticity within security policies, and how user awareness and the consumerization of IT drive threats like advanced persistent threats.

Learn how data confidentiality safeguards information by classifying data as confidential, internal, personal, sensitive, and classified, and explore risks from online exposure and Google hacking using the Wayback machine.

Explore how search engines reveal confidential data, from company spreadsheets to top-secret files, using manual and automated crawling with gulag scanner and Foca to extract metadata.

Explore the OSI seven layers, from physical to application, and examine risks, threats, and layered security measures to safeguard computer networks.

Explore the physical layer of the OSI model, its vulnerabilities to denial of service and data interception, and the realities of securing copper and fiber optic media.

Explore the data link layer of the OSI model, focusing on MAC addresses, MAC spoofing, and how ARP requests and promiscuous mode enable attackers to misrepresent identities in local networks.

Explore arp poisoning as a man-in-the-middle threat, spoofing mac addresses to intercept traffic and bypass port-based authentication with radius and eap verification.

The lecture demonstrates an ARP cache poisoning attack with the Cain and Abel tool to create a man-in-the-middle and intercept traffic, exposing passwords in plain text.

Explore how icmp can carry data in diagnostic packets, reveal third-layer vulnerabilities, and learn to monitor ip and icmp traffic, manage subnets, ipv6 routing advertisements, and spoofing techniques.

Analyze transport layer protocols TCAP and UDP, noting how sockets and ports enable bi-directional communication, while TCAP guarantees reliable delivery via sessions, three-way handshakes, and a sliding window.

Learn ethical hacking techniques in a local network using the metasploit framework and nmap to scan targets, detect operating systems, analyze services, and identify vulnerabilities.

Explore the session layer in the OSI model, focusing on authentication threats, cookie-based sessions, impersonation risks, and secure authentication practices for apps and operating systems.

Explore how DNS servers expose information, including WHOIS data and DNS server IP addresses, and assess zone transfer risks using dig and look-up.

Showcases a backtrack attack demonstration using a Perl DNS reconnaissance script to probe zone transfers, brute-force domain hosts, and map DNS servers and mail servers from a test domain.

Explore how the HTP protocol secures data transfer with certificates, public and private keys, and a symmetric session key, highlighting certificate verification, encryption efficiency, and man-in-the-middle risks.

Design computer networks by balancing security and functionality, using subnetting, a DMZ, and IPv4/IPv6 addressing to minimize attack impact and safeguard IPsec and remote access services.

Explains why IPv6 replaces IPv4 due to address exhaustion, highlights 128-bit addresses, the hex groups format, and the 64-bit network portion with the remaining bits for subnets and hosts.

Explore IPv6 address notation, including zero-group compression, double colon, leading zero omission, and a 64-bit network/host split, with loopback, local unicast, and global addresses, plus automatic configuration and privacy.

Explore IPsec protocols for securing IPv6 traffic, including ESP and AH, with transport and tunnel modes, replay protection, and a two-phase Diffie-Hellman key exchange establishing security associations.

Learn how network address translation uses private IPv4 ranges and three NAT types—source translation, destination translation, and masking—to enable internet access and improve security through proxies.

Explore the security of computer networks through real-time packet monitoring with Wireshark, and learn how firewalls control access while noting the limitations of manual analysis versus automatic intrusion detection.

Examine how network intrusion detection systems monitor traffic in real time for anomalies and patterns, generating signatures and triggering passive or active responses with honeypots.

Explore how Wireshark enables session and protocol level network analysis through charts, coloring rules, and comprehensive data capture across networks. Learn to build baselines, spot anomalies, and generate intrusion-detection reports.

Explore practical wireshark usage to detect network issues and possible attacks, configure adapters and promiscuous mode, apply capture and display filters, and analyze IP and HTP packets and related headers.

Analyze captured data with Wireshark by filtering the DNS protocol and related fields to reveal client activity, DNS responses, and indicators like antivirus updates and suspicious connections.

Analyze telnet traffic with wireshark by following streams to view client-server dialogue, detect login attempts, and create filters and coloring rules for intrusion detection.

Explore computer scans with ip, icmp, udp, and tcp probes to map network infrastructure, identify open ports, and detect remote operating systems using Wireshark.

Explore wireless networks, assess threats and wifi myths, and examine authentication methods, data integrity, authenticity, and confidentiality while reviewing typical attacks on infrastructure and client devices.

Explore how wireless LANs connect through access points, SSIDs, channels, and probing, and describe vulnerabilities in WPS and external registrar PINs, recommending disabling WPS for home networks.

Explore various wireless technologies beyond wifi, including Bluetooth, RFID, and NFC, examining encryption limits, interception risks, short ranges, and potential attacker threats.

Explore wireless authentication methods, including open system, shared key, and 802.1X with a radius server, and how per-user credentials and EAP verify identities.

Explore the evolution from wpa to wpa2 under 802.11i, featuring dynamic keys, ccmp aes, 48-bit iv, and cryptographic hash data-integrity with Radius authentication.

Explore wireless network threats, including unauthorized connections, eavesdropping, MAC address impersonation, rogue access points, fake open networks, and attackers using fake websites to steal credit card details on public wifi.

Explore how a rogue access point intercepts credentials and redirects DNS to a proxy, enabling eavesdropping and data modification with script injections.

Explore evil twin attacks where a rogue access point and fraudulent radius server capture user credentials, and learn practical countermeasures like mutual authentication and certificate validation in enterprise networks.

Describe a WPA pre-shared key attack by detecting active access points and cracking the password with a wordlist, while noting defenses like avoiding WEP and using WPA with radius.