
Set up a pen testing lab and install the needed software to safely practice hacking, then explore four penetration areas—network hacking, gaining access, post-exploitation, and website hacking, and learn defenses.
Explore the fundamentals of ethical hacking and the three hacker types: black hat, white hat, and grey hat. Learn why ethical hacking matters and how bug bounty programs strengthen defenses.
Build your hacking lab as a safe, isolated testing ground with virtual machines, a hacking machine, and vulnerable web apps to practice ethical hacking, using VMware and Kali Linux.
Install Kali Linux from Jet Security.org by downloading, unzipping, and running it in VMware on a virtual machine, then log in to UI and customize RAM, processor, and hard disks.
Learn network hacking fundamentals, from reconnection attacks and gaining access to post-connection exploits, including cracking wifi keys, intercepting traffic, and injecting malicious code.
Explore how networks work, from routers as gateways to packet traffic, and learn how packet capture and analysis enable practical network attacks in ethical hacking.
Learn ethical hacking by connecting a wireless adapter to a Kali Linux virtual machine in VMware, enabling monitor mode and packet injection for wireless network testing.
Learn what a MAC address is, how it functions as a unique device fingerprint in a network, and how to change it with ifconfig to stay anonymous or bypass filters.
Compare 2.4ghz and 5ghz wifi bands by their range, speed, and crowdedness. Apply insights with airodump-ng, band options, and adapters to sniff networks across bands in ethical hacking.
Target a single network with airodump-ng by specifying its bssid and channel to gather detailed information, then save the capture and analyze encrypted WPA2 traffic with Wireshark.
Explore deauthentication attacks that disconnect devices from wifi networks using mac address spoofing with airplay engine and aireplay-ng. Learn practical demonstrations and potential real-world uses.
Learn how attackers gain access to diverse devices—from servers to phones—through server-side and client-side attacks, including social engineering, trojans, and backdoors, and how to defend by securing systems.
Explore the theory behind WEP encryption, including Arc4, 24-bit initialization vectors, and how repeating IVs create a keystream vulnerability.
Learn WEP cracking in a practical lab, capturing IVs with airodump-ng in monitor mode and cracking the key with aircrack-ng to connect to a protected wireless network.
Learn how to speed up cracking a WEP network using a fake authentication attack with aireplay-ng, and use Airodump-ng and arp replay to boost data.
Explore how an arp request replay attack injects and retransmits packets to generate fresh ivs, enabling the use of Aircrack-ng to crack a wireless network key.
Compare WPA and WPA2 encryption and reveal how misconfigured Wi‑Fi Protected Setup with an eight‑digit pin creates a vulnerability.
Simulate a fake authentication attack using aireplay-ng to associate with a WPS-enabled network, then recover the WPA key and gain quick access when WPS is not button-activated.
Capture the WPA/WPA2 handshake packets using airodump-ng with the target's BSSID and channel, then trigger a client reconnect via an authentication attack to obtain the handshake for later cracking.
Configure wireless security by enabling or disabling Wi-Fi Protected Setup (WPS) with awareness of the pin and push-button configuration, and disable it when not needed to minimize vulnerability.
Discover post-connection attacks that enable network scanning, intercept and modify data, and inject malicious code after gaining access, using virtual or real wifi networks.
Download Windows 10 ISO from the official Microsoft site, create installation media for a VMware virtual machine, and configure the new VM with the correct language and architecture.
Map a local network with net discover to reveal connected devices, IP and MAC addresses, and vendor guesses, then plan deeper analysis with nmap.
Explore the quick scan plus in Zenmap to identify open ports, operating systems, device types, and service versions, enabling targeted vulnerability lookup and safer ethical hacking practice.
Welcome this comprehensive Ethical Hacking course! This course assumes you have NO prior knowledge! It starts with you from scratch and takes you step-by-step teaching you how to hack systems like black-hat hackers and secure them like security experts!
This course is highly practical but it won't neglect the theory; we'll start with ethical hacking basics, breakdown the different penetration testing fields and install the needed software (on Windows, Linux and Apple Mac OS), then we'll dive and start hacking straight away. You'll learn everything by example, by analysing and exploiting different systems such as networks, cloud servers, clients, websites, etc. No boring dry lectures.
The course is divided into a number of sections, each section covers a penetration testing / hacking field, in each of these sections you'll first learn how the target system works, the weaknesses of this system, and how to practically exploit theses weaknesses to hack this system. As we do this I will also introduce you to different hacking and security concepts, tools and techniques. Everything will be taught through examples and hands-on practicals, there will be no useless or boring lectures!
All the techniques in this course are practical and work against real systems, you'll understand the whole mechanism of each technique first, then you'll learn how to use it to hack the target system . By the end of the course you'll be able to modify these techniques to launch more powerful attacks, and adopt them to suit different situations and different scenarios .
By the end of the course you will have a strong foundation in most hacking or penetration testing fields and you'll also learn how to detect, prevent and secure systems and yourself from the discussed attacks.
The course is divided into four main sections:
1. Network Hacking - This section will teach you how to hack and secure both wired & wireless networks. First, you will learn network basics, how they work, and how devices communicate with each other. Then it will branch into three sub sections:
Pre-connection attacks: in this subsection you'll learn a number of attacks that can be executed without connecting to the target network and without the need to know the network password; you'll learn how to gather information about the networks around you, discover connected devices, and control connections (deny/allow devices from connecting to networks).
Gaining Access: Now that you gathered information about the networks around you, in this subsection you will learn how to crack the key and get the password to your target network whether it uses WEP, WPA or even WPA2 .
Post Connection attacks: Now that you have the key, you can connect to the target network, in this subsection you will learn a number of powerful techniques that allow you to gather comprehensive information about the connected devices, see anything they do on the internet (such as login information, passwords, visited urls, images, videos, etc.), redirect requests, inject evil code in loaded pages and much more! You will also learn how to create a fake WiFi network or a honeypot, attract users to connect to it and use all of the above techniques against the connected clients.
2. Gaining Access - In this section you will learn two main approaches to gain remote access or hack computer systems:
Server Side Attacks: In this subsection you will learn how to gain full access to computer systems without user interaction. You will learn how to gather useful information about a target system such as the operating system, open ports, installed services, then use this information to discover weaknesses / vulnerabilities and exploit them to gain full control over the target. Finally you will learn how to automatically scan servers for vulnerabilities and generate different types of reports with your discoveries.
Client Side Attacks - If the target system does not contain any weaknesses then the only way to hack it is by interacting with the users, in this subsection you'll learn how to get the target user to install a backdoor on their system without even realising, this is done by hijacking software updates or backdooring downloads on the fly. This subsection also teaches you how to use social engineering to hack secure systems, so you'll learn how to gather comprehensive information about system users such as their social accounts, friends, their mails, etc. You'll learn how to create trojans by backdooring normal files (such as an image or a pdf) and use the gathered information to spoof emails so they appear as if they're sent from the target's friend, boss or any email account they're likely to interact with, to social engineer them into running your trojan.
3. Post Exploitation - In this section you will learn how to interact with the systems you compromised so far. You’ll learn how to access the file system (read/write/upload/execute), maintain your access, spy on the target (capture key strikes, turn on the webcam, take screenshots, etc.) and even use the target computer as a pivot to hack other systems.
4. Website / Web Application Hacking - In this section you will learn how websites work, how to gather information about a target website (such as website owner, server location, used technologies, etc.) and how to discover and exploit the following dangerous vulnerabilities to hack websites:
Information Disclosure.
File Upload.
Code Execution.
Local File Inclusion.
Remote File Inclusion.
SQL Injection.
Cross Site Scripting (XSS).
Throughout the course you'll learn how to use use the following tools to achieve the above:
VMware.
Kali Linux
Nmap.
Bettercap.
Wireshark.
OWASP Zap.
Metasploit.
Nexpose.
SQLmap.
Maltego.
Veil Framework.
Crunch.
Netdiscover.
Zenmap.
arpspoof.
Evilgrade.
The Backdoor Factory.
BeEF.
Dirb.
Knockpy.
Netcat.
Aircrack-ng suite .
Airmon-ng .
Airodump-ng .
Aireplay-ng .
Aircrack-ng .
At the end of each section you will learn how to detect, prevent and secure systems and yourself from the discussed attacks.
Checkout the curriculum and the course teaser for more info!