Kali Linux - Hacking for beginners

Install Kali Linux in a virtual machine by downloading a virtual machine image from kali.org, importing it, increasing memory, booting, and logging in as Kali.

Download and import Metasploitable2 into VMware Workstation, configure memory to 1 GB, and log in as msfadmin to practice attacks in a controlled test environment for Kali Linux beginners.

Learn how the CIA triad protects data: confidentiality, availability, and integrity, including preventing unauthorized access, ensuring service availability via service level agreements, and defending against man-in-the-middle threats with encryption.

Learn essential Unix commands for file management and editing, using sudo and root privileges with nano or vi, and redirecting command output to files such as test1 and test2.

Learn to perform comprehensive information gathering with Nmap in Kali Linux, including host discovery, port and service detection, and exporting scan results to files.

Learn to install and run Zenmap, the graphical interface for Nmap, on Kali Linux, using apt-get, updating sources, and choosing target scans such as ping, quick, and regular scans.

Generate a password list for brute-force attacks with CUPP by cloning cupp project from git and running cupp.py. Download lists with -l, generate with -a, and tailor dictionaries using keywords.

Explore how hashvalues protect passwords by transforming them into hash values stored on servers and verified by clients during login, and learn about checksums for secure downloads.

Examine client-server communication and secure shell usage with ssh and putty, and discuss port scans and brute-force attacks targeting default credentials, with best practices to change usernames, passwords, and ports.

Learn how to perform a brute-force password attack using Medusa against a target ssh service, including preparing user and password lists and gaining remote access.

Explore brute-force testing with Hydra, comparing GUI and wizard interfaces, while understanding how to test SSH credentials with a password list and monitor task limits.

Explore how a proxy server redirects traffic and chains multiple proxies to rotate IP addresses, enabling repeated attacks after an initial IP is blocked.

Learn to use proxychains, a tool that hides your identity by chaining proxy servers, configuring the file, and running nmap through the chain with online proxy lists.

Demonstrate how exploits target system vulnerabilities and how to use online databases like CVE and Exploit DB to locate verified exploits and download Python scripts for testing.

Explore using the metasploit msfconsole to identify an IRC service on port 6667, deploy an exploit, and retrieve usernames and password hashes for cracking.

Master hashcat to crack password hashes with a wordlist like rockyou, using kali's tools and attack modes, with force options for practical password security testing.

Learn to crack password hashes using John the Ripper from dumped files, detect hash algorithms like MD5Crypt, and reveal clear-text passwords with a standard wordlist.

Demonstrates using John the Ripper to decrypt an encrypted zip by extracting hash values with Zip to John, then cracking passwords via command line or GUI and wordlists.

Boot a removable media to access Windows repair tools, use diskpart to activate the volume, replace utilman with cmd.exe, and reset the password with net user.

Explore password recovery concepts using a kali linux live usb, including accessing windows system files and the sam database to understand offline credential handling and recovery basics.

Flash a kali live image onto a four gigabyte usb drive to create a bootable usb device, then boot from the usb using the kali live image.

Learn to create an encrypted file container with VeraCrypt, including options for standard and hidden volumes, strong passwords, AES encryption, and mounting as a virtual drive on Windows and Unix.

Learn to scan a web site with nikto on a metasploitable2 setup, identify vulnerabilities like an old apache version, risky http methods, brute-force login potential, and cross script protection header.

Explore Burp Suite on Kali Linux as a proxy for man-in-the-middle testing, intercepting and modifying requests to a vulnerable web app. Practice cross-site scripting and SQL injection demos.

Explore the man-in-the-middle concept in client-server web communication and learn how burpsuite, a proxy tool, analyzes and modifies requests and responses.

Demonstrates using Burp Suite as a proxy to intercept web requests, capture session id and cookies, and use sqlmap to perform sql injection to access databases and retrieve passwords.

Explore web backdoor testing with the Weevely tool to generate a shell, access a remote console, and understand common web server vulnerabilities and privilege considerations.

Learn how a network sniffer listens to traffic, revealing protocols, clear-text passwords, and how encryption protects email, ftp, and web communications.

Use Wireshark to passively capture packets on your network cards and inspect IP headers. Observe ping traffic as echo requests and replies and note the 1514 byte size limit.

Master filtering network traffic with Wireshark, using view filters for protocols like ICMP and IP addresses, plus capture filters, IO graphs, and exporting captures for analysis.

Learn to use aircrack-ng in Kali Linux to test wifi security, including setting monitor mode, capturing a handshake with airodump, and cracking passwords with a wordlist.

Explore using msfvenom to create a payload, wrap it with putty.exe, and establish a meterpreter reverse_tcp session via a Kali Linux setup.

Explore using VirusTotal to upload a sample payload, view which antivirus programs detect it, and assess the reliability of detections for a meterpreter reverse shell.

Encode payloads with msfvenom encoders to evade antivirus detection, rotating payloads with -e and -I. Compare virus total results and recognize custom encoders offer improved stealth.

Explore phishing concepts with the SET toolkit, demonstrating social engineering, website cloning, and credential harvesting, including spoofing and trust challenges in online login pages.

Explore steganography with steghide and stegosuite on Kali Linux, learn to embed and extract a secret text in a picture using a password, and compare console and GUI tools.