Hacking in Practice: Intensive Ethical Hacking MEGA Course

Learn sql injection techniques, from crafting payloads and exploiting insertion points to using always-true queries and inline comments, and understand how elevated permissions enable database access.

analyze a case app vulnerable to sql injection, showing login bypass with crafted inputs, error-based and blind techniques to map tables, columns, and data types, and potential admin access.

Explore blind SQL injection techniques, including boolean and time-based attacks, using error messages and responses to infer table and column names, and even alter data.

Explore current cyber threats, identify the enemy, and uncover weaknesses in computer system protection. Assess user and administrator behavior and learn how consumerization of IT and apt reshape security awareness.

Traces the 1990s stone-age of computer systems and cybercrime, highlighting the Morris worm, the first global denial-of-service attack, and how billions of devices still face millions of attacks monthly.

Trace the origins of IT security myths from Arpanet to the internet and debunk the myth of total system protection. Explore why even secured machines can fail.

Examine the myth that IT security should always be a priority, showing how security trade-offs affect usability, functionality, and freedom, and why total security is impractical.

Explore how social networks and the internet reshape computer systems security by changing trust and why we are more susceptible to different types of attacks, while attackers evolve.

Public records and social media searches reveal personal data. It shows how sites like Intelius and Spokeo compile addresses, phone numbers, birth dates, and history, illustrating identity theft risks.

Analyze how online privacy reshapes security through real cyber crime stories, showing criminals' motivation and skills range from credit card schemes to denial-of-service attacks.

Explore cyber war and cyber terrorism, tracing historic incidents from Estonia and Georgia to Stuxnet, and examine methods like espionage, denial of service, and internet propaganda.

Explore how search engines reveal confidential data, from company spreadsheets to top-secret files, using manual and automated crawling with gulag scanner and Foca to extract metadata.

Explore the OSI seven layers, from physical to application, and examine risks, threats, and layered security measures to safeguard computer networks.

Explore the physical layer of the OSI model, its vulnerabilities to denial of service and data interception, and the realities of securing copper and fiber optic media.

Explore arp poisoning as a man-in-the-middle threat, spoofing mac addresses to intercept traffic and bypass port-based authentication with radius and eap verification.

The lecture demonstrates an ARP cache poisoning attack with the Cain and Abel tool to create a man-in-the-middle and intercept traffic, exposing passwords in plain text.

Explore how icmp can carry data in diagnostic packets, reveal third-layer vulnerabilities, and learn to monitor ip and icmp traffic, manage subnets, ipv6 routing advertisements, and spoofing techniques.

Learn ethical hacking techniques in a local network using the metasploit framework and nmap to scan targets, detect operating systems, analyze services, and identify vulnerabilities.

Explore how DNS servers expose information, including WHOIS data and DNS server IP addresses, and assess zone transfer risks using dig and look-up.

Explains why IPv6 replaces IPv4 due to address exhaustion, highlights 128-bit addresses, the hex groups format, and the 64-bit network portion with the remaining bits for subnets and hosts.

Learn how network address translation uses private IPv4 ranges and three NAT types—source translation, destination translation, and masking—to enable internet access and improve security through proxies.

Explore the security of computer networks through real-time packet monitoring with Wireshark, and learn how firewalls control access while noting the limitations of manual analysis versus automatic intrusion detection.

Explore practical wireshark usage to detect network issues and possible attacks, configure adapters and promiscuous mode, apply capture and display filters, and analyze IP and HTP packets and related headers.

Analyze captured data with Wireshark by filtering the DNS protocol and related fields to reveal client activity, DNS responses, and indicators like antivirus updates and suspicious connections.

Explore computer scans with ip, icmp, udp, and tcp probes to map network infrastructure, identify open ports, and detect remote operating systems using Wireshark.

Explore wireless networks, assess threats and wifi myths, and examine authentication methods, data integrity, authenticity, and confidentiality while reviewing typical attacks on infrastructure and client devices.

Explore wireless authentication methods, including open system, shared key, and 802.1X with a radius server, and how per-user credentials and EAP verify identities.

Explore wireless network threats, including unauthorized connections, eavesdropping, MAC address impersonation, rogue access points, fake open networks, and attackers using fake websites to steal credit card details on public wifi.

Explore how a rogue access point intercepts credentials and redirects DNS to a proxy, enabling eavesdropping and data modification with script injections.

Explore evil twin attacks where a rogue access point and fraudulent radius server capture user credentials, and learn practical countermeasures like mutual authentication and certificate validation in enterprise networks.