Hands-on Penetration Testing Labs 1.0
What you'll learn
- Enumerate/scan systems with Netdiscover, Nmap, Dirb, Nikto, etc.
- Perform remote exploitation of systems
- Escalate local privileges to root level
- Utilize a variety of industry standard penetration testing tools within the Kali Linux distro
- Build buffer overflows manually
Requirements
- Basic Linux knowledge
- Basic networking knowledge
- Kali Linux
- Desktop or Laptop with a minimum of 2GB RAM (8GB+ preferable)
- VirtualBox
- Windows 7 or 10 host OS preferred (tested)
Description
NOTE: This is independent from my other course, Hands-on Pentration Labs 1.0 - they both have original content and you're not required to buy one or the other by itself.
Looking for Powerpoint slides and lectures that will put you to sleep? Keep moving, because this course is not for you.
This course consists of 100% hands-on technical labs, utilizing industry standard open source technology to hack a variety of intentionally vulnerable operating systems. All of the resources to build the labs are free. Detailed instructions on how to set up the labs are included within this course (VMware Player, Kali Linux, Kioptrix, etc.). Moreover, I've set up a Google drive for you to conveniently download all vulnerable VMs. To make the most out of this course, it is recommended that you actually perform the activities within the labs rather than just watch the videos.
The main points that will be covered in this course is enumeration, remote exploitation, buffer overflows, and privilege escalation. These labs will show you how to interpret results from tools such as Nmap, Dirb, and enum4linux, and use them effectively to compromise vulnerable systems. Please note that these labs contain spoilers, and it is a good idea to attempt to compromise the vulnerable systems on your own prior to getting the answers from the walk through that's provided.
Who this course is for:
- Cybersecurity Students
- Cybersecurity Professionals
- New Penetration Testers
- CEH Candidates
- OSCP Candidates
- Pentest+ Candidates
Featured review
![Graham S McLeod](data:image/svg+xml,%3Csvg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64"%3E%3C/svg%3E){kind=avatar}
Course content
- Preview03:49
- 09:43Overview of Lab Commands and Tools
- Preview02:58
- 11:28Download and Configure Kali Linux
- 02:05Download Vulnerable Lab VMs
- Preview09:47
- 23:33Kioptrix Level 2 - Enumeration and Exploitation
- 24:05Kioptrix Level 3 - Enumeration and Exploitation
- 17:26Kioptrix Level 4 - Enumeration and Exploitation
- 18:33Kioptrix Level 5 - Enumeration and Exploitation
- 13:13Tr0ll 1 - Enumeration and Exploitation
- 27:28Tr0ll 2 - Enumeration and Exploitation
- Preview23:17Bonus Lab 1: Security Onion Lab Setup with VirtualBox
- 05:03Bonus Lab 2: Windows 7 Eternalblue Vulnerable VM VirtualBox Setup
- 19:42Bonus Lab 3: Windows 7 Eternalblue Exploitation and Snort/PCAP Analysis
- 11:06Bonus Lab 4: Ubuntu Server 12.04 Vulnerable VM VirtualBox Setup
- 11:47Bonus Lab 5: Ubuntu Server 12.04 Heartbleed Exploitation and Snort/PCAP Analysis
- 31:42Bonus Lab 6: SLMail Buffer Overflow Development
Instructor
- 4.6 Instructor Rating
- 4,433 Reviews
- 43,371 Students
- 7 Courses
Summary: Jesse Kurrus is a cybersecurity expert with a breadth and depth of knowledge, professional experience, and top of the line credentials directly related to his field of expertise. He has provided quality training for thousands of students online, has mentored them one-on-one, and has coached many to acquire jobs in the cyber field. Professional strengths include security analysis, intrusion detection, ethical hacking, penetration testing, training, and technical writing. Jesse has a true passion for cybersecurity and information technology, and an insatiable ambition to further his knowledge and professional skill set.
Specialties: Intrusion Detection / Network Security Monitoring (Security Onion, Snort, Bro, and Suricata); SIEM Technology (Elasticsearch, Logstash, Kibana (ELK), ArcSight, and Splunk); PCAP analysis (Tcpdump, Wireshark, NetworkMiner, NetWitness/Security Analytics); Penetration Testing (Kali Linux, BurpSuite, Nikto, Nmap, Metasploit, etc.)
Current Degrees/Certifications: M.S. in Information Technology with Information Assurance Specialization / B.S. in Computer Networks and Security / Network+, A+, Security+, Linux+, Certified Ethical Hacker v8 (CEH), Offensive Security Certified Professional (OSCP), Certified Information Systems Security Professional (CISSP), eLearnSecurity Web application Penetration Tester (eWPT)