Hacking in Practice: Intensive Ethical Hacking MEGA Course

Explore how secure applications defend against input handling flaws that enable buffer overflow, SQL injection, and cross-site scripting, and learn about least privilege and minimizing attack surfaces.

Explores three major app attacks—buffer overflow exploitation, query manipulation and injection, and cross-site scripting—and explains how attackers overflow stacks, manipulate memory, and trigger malicious code.

Learn sql injection techniques, from crafting payloads and exploiting insertion points to using always-true queries and inline comments, and understand how elevated permissions enable database access.

analyze a case app vulnerable to sql injection, showing login bypass with crafted inputs, error-based and blind techniques to map tables, columns, and data types, and potential admin access.

Explore blind SQL injection techniques, including boolean and time-based attacks, using error messages and responses to infer table and column names, and even alter data.

Explore automated sql injection techniques, identifying vulnerable Microsoft ASP.NET sites, decoding encoded queries, extracting database data such as employees and credentials, and understanding automated attack workflows.

Explore cross-site scripting (xss) attacks, including reflected and persistent variants, how malicious scripts exploit comments and links, and the risk of session hijacking via cookies.

learn to assess and secure applications as an administrator, addressing legacy and high-risk programs, exploit paths bypassing firewalls and dmz, and database and web vulnerabilities while navigating vendor support.

Identify application security flaws, such as embedding passwords in code and default passwords, and administrative permissions, and use tools like Process Monitor to inspect data structures and enforce password changes.

Explore current cyber threats, identify the enemy, and uncover weaknesses in computer system protection. Assess user and administrator behavior and learn how consumerization of IT and apt reshape security awareness.

Traces the 1990s stone-age of computer systems and cybercrime, highlighting the Morris worm, the first global denial-of-service attack, and how billions of devices still face millions of attacks monthly.

Explore early 2000s cyber threats like code red and Morris worms, their rapid propagation, and the rise of money-driven malware such as Zoetrope with social engineering.

Explore how cyber crimes evolve, outpacing defenses as 85 percent of attacks rely on social engineering and insider threats. Assess motives behind attacks, including cyber war and terrorism.

Trace the origins of IT security myths from Arpanet to the internet and debunk the myth of total system protection. Explore why even secured machines can fail.

Dispel the myth that you’ll never be hacked by showing how script kids and targeted intrusions exploit weak defenses, bot nets, and zombie computers.

Debunk myths about protection by showing that physical protection and a security policy are essential. Relying on firewalls, obscurity, or client-side safeguards alone cannot defend against local attacks or tampering.

Examine the myth that IT security should always be a priority, showing how security trade-offs affect usability, functionality, and freedom, and why total security is impractical.

Explore how social networks and the internet reshape computer systems security by changing trust and why we are more susceptible to different types of attacks, while attackers evolve.

Explore how social networks reveal location and personal data through geotagged photos, showing how socio-technical attacks exploit online information and the importance of cautious posting.

Public records and social media searches reveal personal data. It shows how sites like Intelius and Spokeo compile addresses, phone numbers, birth dates, and history, illustrating identity theft risks.

Explore how search engines and data mining tools like Spokeo, mylife, and Tigo reveal personal information, exposing privacy risks from geotagging to email harvesting and spam.

Analyze how online privacy reshapes security through real cyber crime stories, showing criminals' motivation and skills range from credit card schemes to denial-of-service attacks.

Examine sniffing software that monitored network traffic to steal credit card numbers, highlighting the TJX breach, 45 million cards stolen, mastermind Gonzales, and related cybercrime outcomes.

Explore cyber war and cyber terrorism, tracing historic incidents from Estonia and Georgia to Stuxnet, and examine methods like espionage, denial of service, and internet propaganda.

Examine how data security relies on confidentiality, integrity, and authenticity within security policies, and how user awareness and the consumerization of IT drive threats like advanced persistent threats.

Explore data integrity, authenticity, and availability, and learn how checksums, digital signatures, and service level agreements shape recovery time objectives and recovery point objectives.

Learn how data confidentiality safeguards information by classifying data as confidential, internal, personal, sensitive, and classified, and explore risks from online exposure and Google hacking using the Wayback machine.

Explore how search engines reveal confidential data, from company spreadsheets to top-secret files, using manual and automated crawling with gulag scanner and Foca to extract metadata.

Explore the OSI seven layers, from physical to application, and examine risks, threats, and layered security measures to safeguard computer networks.

Explore the physical layer of the OSI model, its vulnerabilities to denial of service and data interception, and the realities of securing copper and fiber optic media.

Explore the data link layer of the OSI model, focusing on MAC addresses, MAC spoofing, and how ARP requests and promiscuous mode enable attackers to misrepresent identities in local networks.

Explore how switches learn mac addresses and cam memory, how attackers force hub mode via floods, and how mac spoofing and arp cache poisoning enable traffic interception.

Explore arp poisoning as a man-in-the-middle threat, spoofing mac addresses to intercept traffic and bypass port-based authentication with radius and eap verification.

The lecture demonstrates an ARP cache poisoning attack with the Cain and Abel tool to create a man-in-the-middle and intercept traffic, exposing passwords in plain text.

Investigate the network layer by analyzing IPv4 and IPv6 addressing, subnet masks, and routing to deliver datagrams, while examining icmp diagnostics and the security implications of ip spoofing.

Explore how icmp can carry data in diagnostic packets, reveal third-layer vulnerabilities, and learn to monitor ip and icmp traffic, manage subnets, ipv6 routing advertisements, and spoofing techniques.

Analyze transport layer protocols TCAP and UDP, noting how sockets and ports enable bi-directional communication, while TCAP guarantees reliable delivery via sessions, three-way handshakes, and a sliding window.

explain how idle scan uses zombie machines to enumerate remote computers via ip address sequences, revealing fourth-layer vulnerabilities; defend by blocking unused ports and monitoring for port scans.

Learn ethical hacking techniques in a local network using the metasploit framework and nmap to scan targets, detect operating systems, analyze services, and identify vulnerabilities.

Explore how Metasploit identifies vulnerabilities, executes exploits, and establishes callback sessions to gain control of a remote host, illustrating the transport layer attack and gaining administrator or system privileges.

Explore the session layer in the OSI model, focusing on authentication threats, cookie-based sessions, impersonation risks, and secure authentication practices for apps and operating systems.

Explore the presentation layer of the OSI model, focusing on encoding, decoding, and displaying data between applications and transport protocols, including no byte injection attacks and encoding variations.

Explore the application layer with DNS concepts, including hierarchical root servers, DNS resolvers, local and authoritative servers, and DNS records such as NS and MX.

Explore how DNS servers expose information, including WHOIS data and DNS server IP addresses, and assess zone transfer risks using dig and look-up.

Showcases a backtrack attack demonstration using a Perl DNS reconnaissance script to probe zone transfers, brute-force domain hosts, and map DNS servers and mail servers from a test domain.

Explore the DHC protocol and how rogue DHC servers enable man-in-the-middle and denial-of-service by misconfiguring IP, DNS, and gateway settings, revealing traffic and blocking communications.

Explore how the HTP protocol secures data transfer with certificates, public and private keys, and a symmetric session key, highlighting certificate verification, encryption efficiency, and man-in-the-middle risks.

Explore unencrypted application layer protocols, exposing passwords and data, and learn how secure channels like S-sh prevent man-in-the-middle attacks while highlighting password guessing risks and DoS threats.

Design computer networks by balancing security and functionality, using subnetting, a DMZ, and IPv4/IPv6 addressing to minimize attack impact and safeguard IPsec and remote access services.

Subnet IPv4 networks to segment with firewalls, improving security and monitoring across trusted subnets. Explain classful addressing wastes addresses and classless routing allocates network and host bits using masks.

Explains why IPv6 replaces IPv4 due to address exhaustion, highlights 128-bit addresses, the hex groups format, and the 64-bit network portion with the remaining bits for subnets and hosts.

Explore IPv6 address notation, including zero-group compression, double colon, leading zero omission, and a 64-bit network/host split, with loopback, local unicast, and global addresses, plus automatic configuration and privacy.

Learn how IPv6 subnetting simplifies network design, and how VLANs and DMZs, with multi-firewall layouts and trunk ports, separate internal workstations from external servers for improved security and performance.

Explore IPsec protocols for securing IPv6 traffic, including ESP and AH, with transport and tunnel modes, replay protection, and a two-phase Diffie-Hellman key exchange establishing security associations.

Demonstrates ipsec phase one by confirming host identity with Kerberos via Active Directory or a certificate, using mutual authentication, challenge-response, and shared secret verification to establish session keys.

Learn how network address translation uses private IPv4 ranges and three NAT types—source translation, destination translation, and masking—to enable internet access and improve security through proxies.

Explore how a radius server authenticates remote users via the domain controller, enabling secure vpn access with eap-tls certificates.

Explore the security of computer networks through real-time packet monitoring with Wireshark, and learn how firewalls control access while noting the limitations of manual analysis versus automatic intrusion detection.

Learn how firewalls block unapproved traffic by default, filter by sender and receiver addresses and ports, and inspect headers and data to support stateful, stateless, and application layer decisions.

Examine how network intrusion detection systems monitor traffic in real time for anomalies and patterns, generating signatures and triggering passive or active responses with honeypots.

Discover how a reverse TCAP session can invert connection direction, bypassing stateful firewalls and IDS, and why many systems fail to detect it.

Explore how Wireshark enables session and protocol level network analysis through charts, coloring rules, and comprehensive data capture across networks. Learn to build baselines, spot anomalies, and generate intrusion-detection reports.

Explore practical wireshark usage to detect network issues and possible attacks, configure adapters and promiscuous mode, apply capture and display filters, and analyze IP and HTP packets and related headers.

Analyze captured data with Wireshark by filtering the DNS protocol and related fields to reveal client activity, DNS responses, and indicators like antivirus updates and suspicious connections.

Analyze telnet traffic with wireshark by following streams to view client-server dialogue, detect login attempts, and create filters and coloring rules for intrusion detection.

Utilize Wireshark’s data visualization and IO graphs to detect high traffic, decode packets with the right protocol, and follow sessions like TCAP, SMB, and Nessus.

Explore computer scans with ip, icmp, udp, and tcp probes to map network infrastructure, identify open ports, and detect remote operating systems using Wireshark.

Explore wireless networks, assess threats and wifi myths, and examine authentication methods, data integrity, authenticity, and confidentiality while reviewing typical attacks on infrastructure and client devices.

Explore wireless network standards and security solutions, from the origins of wireless LANs to rogue access points and eavesdropping risk, through 802.11 generations and channel dynamics.

Explore how wireless LANs connect through access points, SSIDs, channels, and probing, and describe vulnerabilities in WPS and external registrar PINs, recommending disabling WPS for home networks.

Explore various wireless technologies beyond wifi, including Bluetooth, RFID, and NFC, examining encryption limits, interception risks, short ranges, and potential attacker threats.

Explore threats to near-field communication and wireless networks, including NFC card cloning, wardriving, and the limitations of wireless security, and learn how to protect media access, confidentiality, and authenticity.

Discover why hiding SSID, disabling DHCP, and MAC filtering offer little security; static IPs can help, while reducing signal range is unreliable.

Explore wireless authentication methods, including open system, shared key, and 802.1X with a radius server, and how per-user credentials and EAP verify identities.

Examine why 802.11 WEP is insecure due to RC4 encryption with a 24-bit IV, key reuse, and vulnerable checksums that allow tampering and eavesdropping.

Explore the evolution from wpa to wpa2 under 802.11i, featuring dynamic keys, ccmp aes, 48-bit iv, and cryptographic hash data-integrity with Radius authentication.

Explore wireless network threats, including unauthorized connections, eavesdropping, MAC address impersonation, rogue access points, fake open networks, and attackers using fake websites to steal credit card details on public wifi.

Explore how a rogue access point intercepts credentials and redirects DNS to a proxy, enabling eavesdropping and data modification with script injections.

Explore evil twin attacks where a rogue access point and fraudulent radius server capture user credentials, and learn practical countermeasures like mutual authentication and certificate validation in enterprise networks.

Explore denial of service attacks on wireless networks, including hardware-based disruption and key vulnerabilities, alongside defenses using WPA/WPA2, radius servers, and secure pre-shared keys.

Describe a WPA pre-shared key attack by detecting active access points and cracking the password with a wordlist, while noting defenses like avoiding WEP and using WPA with radius.