Ethical Hacking from scratch | Latest Practical Edition

Learn port discovery and port scanning to identify open and closed ports on a target device, using tcp and udp, with port numbers and common network tools.

Learn to map networks using tools like solar winds network mapping tool and labyrinth topology mapper to visualize devices, IP addresses, and credentials.

Learn smtp enumeration techniques to assess mail servers by querying domains, resolving mail servers with nslookup, connecting via telnet to port 25, and testing user existence with smtp commands.

System hacking overview explains bypassing control, gaining access, and maintaining or hiding access, detailing password attack methods: non-electronic, active online, passive online, and offline with rainbow tables.

This lecture demonstrates password reset hacking on Windows using a bootable tool, requiring physical access, to reset or clear passwords and log in without them.

Learn how to create a malicious exe script to gain remote access on a victim's Windows machine using msf venom payload, reverse tcp, and client-server communication.

Explores NTFS alternate data streams for hiding text and executables, demonstrating practical techniques and file system concepts.

Hide data with steganography using the open puff tool, embedding bank details inside media files like mp3s or videos, secured by a three-password scheme and carrier choice.

Explore malware analysis fundamentals and practical protections: use isolated test rigs, virtualization with snapshots, and common tools for debugging, disassembly, and online malware checks like VirusTotal.

Learn to verify file integrity using hash file verification by generating and matching hash values with md5sum on Linux and Emily 5 on Windows, ensuring downloaded files are unchanged.

Discover how sniffing captures network traffic, from passive promiscuous mode on hubs to active techniques like MAC flooding and DHCP/DNS poisoning, plus span port mirroring on switches.

demonstrate how dhcp snooping protects networks by filtering rogue dhcp server messages, allowing only discovery and request from clients, and designating trusted ports to prevent dos attacks.

Learn how dynamic ARP inspection prevents ARP poisoning and MAC spoofing by validating ARP packets on switches, and how CPS snooping and ACLs reinforce protection.

Explore how social engineering exploits trust, fear, and ignorance through phishing and manipulation, and learn practical prevention: training, access controls, policy, logging, and duty rotation.

Explore sql injection, how attackers exploit vulnerable web apps to manipulate databases using input commands like drop table, and defend with firewalls, web application firewall, and secure configurations.

Set up a WordPress lab in a virtual machine, run WPScan to identify vulnerabilities, users, and plugins, and demonstrate brute-force password testing with a wordlist.

Learns ethical Wi-Fi security testing by creating password wordlists with crunch, monitoring networks, capturing handshakes, and demonstrating password cracking workflows with wireless adapters.

Explore how to simulate a mobile malware attack on android devices, including malware creation, payload setup, and remote control demonstrations within an ethical hacking framework.

Identify the top mobile vulnerabilities and practical defenses for Android and other devices, from insecure storage and unencrypted communications to social engineering, updates, and device management.

Learn how honeypots trap attackers by simulating vulnerable services with low- and high-interaction designs. Deploy hardware, virtual, or software honeypots to alert and log activity and identify intruders.

Senior management defines data sensitivity and policy, then deploys security policies across the organization. Enforce auditing, reporting hierarchy, least privilege, and change controls to protect critical assets.

Quantify cyber risk by assessing vulnerabilities, threats, and assets, and apply quantitative and qualitative methods to estimate loss, exposure, and annual loss expectancy for informed security decisions.

Explore separation of duties and off duty controls to prevent a single employee from manipulating data, using rotation, mandatory vacations, backups, cross training, two main controls, and periodic reviews.

Discover the fundamentals of cryptography and the concept of symmetric encryption, where the same key encrypts and decrypts data to protect confidentiality, integrity, authenticity, and non-repudiation in small networks.

Explore asymmetrical encryption, where public and private keys enable encryption with a recipient's public key and decryption with a private key, ensuring confidentiality and authentication.

Explore centralized identity management by unifying authentication, authorization, and accountability across networks, wifi, vpn, and services using radius, ldap, tacacs+, and diameter.

Learn operational security control basics, including data backup and restore, recovery after incidents, and audits to protect the company's security posture.

Develop rapid incident response skills by stopping ongoing incidents, diagnosing root causes, restoring services quickly, and documenting lessons to strengthen policy, communication, and prevention.

Learn how virtual private networks create encrypted tunnels for site-to-site, transport mode, and remote access, using ipsec and ssl with digital certificates to ensure confidentiality, integrity, and authentication.

Learn practical penetration testing tips, including written permission, internal and external audits, vulnerability scanners, CVE details, and white, gray, and black box testing.