Ethical Hacking from scratch | Latest Practical Edition

Introduce the ethical hacking course and trainer; outline the certified ethical hacker syllabus and the 95-part video series, covering Windows and Linux readiness, attack types, and practical tools.

Explore attack types and vectors, including advanced persistent threat (apt), botnets, cloud vulnerabilities, insider threats, mobile intrusion, malware, os flaws, misconfiguration, and application level risks, with focus on defense training.

Learn to perform footprinting and reconnaissance by gathering target information, assessing security posture, operating systems, services, and vulnerabilities, and mapping network topology with tools like Google, DNS, and social engineering.

Learn how metagoofil performs metadata reconnaissance on a target website by locating and downloading documents such as pdf, doc, xls, and ppt, then generating a report of discovered metadata.

Discover how to perform email footprinting and reconnaissance by extracting email headers, using tools like email tracker pro and IP locators to reveal sender location, IPs, and routing information.

Learn to scan networks to locate live devices, IP addresses, and open ports. Use nmap and trace route to identify operating systems and collect vulnerability details for a network diagram.

Learn port discovery and port scanning to identify open and closed ports on a target device, using tcp and udp, with port numbers and common network tools.

Learn stealth idle scan using a John B identity, spoofed packets, and fragment analysis to determine open or closed ports on a victim without revealing the attacker’s identity.

Explore operating system and application fingerprinting, including active and passive methods and banner grabbing, to identify operating systems and services on local networks. Use nmap and netcat for demonstrations.

Learn how to identify vulnerabilities with a practical vulnerability scan using Nessus, including setting up the tool, registering for an activation code, and generating a report with risk levels.

Learn to map networks using tools like solar winds network mapping tool and labyrinth topology mapper to visualize devices, IP addresses, and credentials.

Learn how to use a proxy server to hide your identity, disguise sources, and access blocked websites through a proxy chain and client configurations.

Learn to use a proxy switcher to locate and test public proxies, then connect to them to mask your IP for anonymous browsing.

Explore SNMP enumeration by enabling SNMP on Windows Server 2016 and a Cisco router, using MSF and SNMP walk to reveal hostname, model, interfaces, and routing data.

Learn smtp enumeration techniques to assess mail servers by querying domains, resolving mail servers with nslookup, connecting via telnet to port 25, and testing user existence with smtp commands.

System hacking overview explains bypassing control, gaining access, and maintaining or hiding access, detailing password attack methods: non-electronic, active online, passive online, and offline with rainbow tables.

Explore how to reset a Windows password by booting from installation media, accessing the command prompt, and using local user management to set a new password.

Explore password cracking concepts, including social engineering and dictionary and brute-force attacks. Review defenses such as complex passwords, domain policies, lockouts, and anti-malware protection against key loggers and Trojans.

Demonstrates password capture via sniffing and a man-in-the-middle attack using Cain and Abel, ARP poisoning, and MAC address spoofing in telnet, http, and ftp sessions.

set up a lab to practice rainbow cracking by dumping the sam file, generating a rainbow table, and cracking passwords with rainbow crack or opiate crack.

Demonstrates using a rainbow table to crack Windows SAM file passwords: dump the SAM file, generate a rainbow table, and crack passwords with rainbow crack or opiates crack.

This lecture demonstrates password reset hacking on Windows using a bootable tool, requiring physical access, to reset or clear passwords and log in without them.

Demonstrate a DHCP starvation attack that exhausts the DHCP server's IP pool by flooding discovery requests with multiple MAC addresses, causing denial of service; learn port security to prevent it.

Learn how to create a malicious exe script to gain remote access on a victim's Windows machine using msf venom payload, reverse tcp, and client-server communication.

Explores NTFS alternate data streams for hiding text and executables, demonstrating practical techniques and file system concepts.

Hide data with steganography using the open puff tool, embedding bank details inside media files like mp3s or videos, secured by a three-password scheme and carrier choice.

Explore how ethical hackers use the social engineering toolkit to create trojans, deliver payloads, and defend networks with integrity checks and safe download practices.

Explore virus overview: self-replicating malware that infects data and files, evolves to avoid detection, and encrypts or corrupts data; learn virus stages, types, and antivirus defenses.

Explore virus creation concepts in ethical hacking, from manual notepad scripting and command prompts to using virus maker tools, and understand implications for defense and prevention.

Detect malware in Windows systems by checking open ports and listening connections, examining running processes, device drivers, services, startup programs, registry changes, and performing signature verification with built-in tools.

Explore malware analysis fundamentals and practical protections: use isolated test rigs, virtualization with snapshots, and common tools for debugging, disassembly, and online malware checks like VirusTotal.

Learn to verify file integrity using hash file verification by generating and matching hash values with md5sum on Linux and Emily 5 on Windows, ensuring downloaded files are unchanged.

Discover how sniffing captures network traffic, from passive promiscuous mode on hubs to active techniques like MAC flooding and DHCP/DNS poisoning, plus span port mirroring on switches.

Discover how cam table overflow lets attackers sniff traffic, and how port security with sticky MAC addresses and protect, restrict, and shutdown modes prevents it.

demonstrate how dhcp snooping protects networks by filtering rogue dhcp server messages, allowing only discovery and request from clients, and designating trusted ports to prevent dos attacks.

Learn how dynamic ARP inspection prevents ARP poisoning and MAC spoofing by validating ARP packets on switches, and how CPS snooping and ACLs reinforce protection.

Explore how social engineering exploits trust, fear, and ignorance through phishing and manipulation, and learn practical prevention: training, access controls, policy, logging, and duty rotation.

Explore how denial of service attacks degrade availability, including volumetric, fragment-based, and application-layer methods, plus DDoS, DNS spoofing, UDP floods, and mitigation with firewalls, load balancers, and separate servers.

Learn how session hijack lets an attacker act as a logged-in user by stealing session IDs, then defend with port security, re authentication, ssl, secure cookies, and logout.

Explore how buffer overflow attacks exploit heap and stack memory in C/C++ to crash services or leak information. Use cookies, stack guards, boundary checks to prevent them.

Explore the fundamentals of structured query language and relational databases, learn core SQL commands (create, drop, insert, update, delete, select) and install SQL Server on Windows.

Explore sql injection, how attackers exploit vulnerable web apps to manipulate databases using input commands like drop table, and defend with firewalls, web application firewall, and secure configurations.

Set up a WordPress lab in a virtual machine, run WPScan to identify vulnerabilities, users, and plugins, and demonstrate brute-force password testing with a wordlist.

Learns ethical Wi-Fi security testing by creating password wordlists with crunch, monitoring networks, capturing handshakes, and demonstrating password cracking workflows with wireless adapters.

Explore how to simulate a mobile malware attack on android devices, including malware creation, payload setup, and remote control demonstrations within an ethical hacking framework.

Identify the top mobile vulnerabilities and practical defenses for Android and other devices, from insecure storage and unencrypted communications to social engineering, updates, and device management.

Explore how firewalls protect networks with hardware and software forms, ACLs, and stateful inspection. Learn attacker evasion tricks like port scans, IP spoofing, proxies, and tunneling to strengthen defenses.

Discover how firewall access control lists work, comparing standard and extended access control lists, and learn to apply, test, and manage top-to-bottom rules on routers or firewalls.

Explore how intrusion detection and intrusion prevention systems detect threats using signature and anomaly-based methods. Learn optimal placement relative to firewalls and basic configuration.

Learn how honeypots trap attackers by simulating vulnerable services with low- and high-interaction designs. Deploy hardware, virtual, or software honeypots to alert and log activity and identify intruders.

Explore cloud computing fundamentals, including public, private, and hybrid clouds, service models (IaaS, PaaS, SaaS), and benefits like self-service, metering, elasticity, pooling, with data location and security concerns.

Senior management defines data sensitivity and policy, then deploys security policies across the organization. Enforce auditing, reporting hierarchy, least privilege, and change controls to protect critical assets.

Quantify cyber risk by assessing vulnerabilities, threats, and assets, and apply quantitative and qualitative methods to estimate loss, exposure, and annual loss expectancy for informed security decisions.

Explore separation of duties and off duty controls to prevent a single employee from manipulating data, using rotation, mandatory vacations, backups, cross training, two main controls, and periodic reviews.

Discover the fundamentals of cryptography and the concept of symmetric encryption, where the same key encrypts and decrypts data to protect confidentiality, integrity, authenticity, and non-repudiation in small networks.

Explore asymmetrical encryption, where public and private keys enable encryption with a recipient's public key and decryption with a private key, ensuring confidentiality and authentication.

Discover how to reduce risk through control types, authentication and authorization, least privilege, data classification and reclassification, and practical defenses like firewalls and cryptography.

Learn how multi factor authentication strengthens security by using password plus a card or biometric verification, and how training and password policies reinforce valid authentication.

Explore centralized identity management by unifying authentication, authorization, and accountability across networks, wifi, vpn, and services using radius, ldap, tacacs+, and diameter.

Master backup basics by comparing full, incremental, and differential types, and learn rapid recovery with encrypted backups and secure offsite storage media like tapes.

Learn operational security control basics, including data backup and restore, recovery after incidents, and audits to protect the company's security posture.

Protect data and assets by implementing physical security controls. Implement fences, guards, cameras, lighting, motion detectors, electronic access control, and sensors to deter intruders.

Develop rapid incident response skills by stopping ongoing incidents, diagnosing root causes, restoring services quickly, and documenting lessons to strengthen policy, communication, and prevention.

Learn how virtual private networks create encrypted tunnels for site-to-site, transport mode, and remote access, using ipsec and ssl with digital certificates to ensure confidentiality, integrity, and authentication.

Learn practical penetration testing tips, including written permission, internal and external audits, vulnerability scanners, CVE details, and white, gray, and black box testing.

Explore real-world hacking case studies, revealing common vulnerabilities and policy gaps while detailing attacker techniques from penetration testing, including Outlook misuse, XSS, network misconfigurations, and the importance of employee training.