
Learn ethical hacking using kali linux red team tactics. Use the course to explore red team approaches.
Learn what ethical hacking is, how white hats conduct security assessments with proper approval, scope, and reporting of vulnerabilities, plus remediation and data sensitivity considerations.
Explore what ethical hacking is, and how white hat and red team roles, penetration testing, and vulnerability assessments protect organizations from cyber threats.
Explore the six-step ethical hacking process with explicit consent, from reconnaissance and environmental scanning to gaining and maintaining system access, clearing evidence, and delivering a final report.
Explore the advantages of becoming an ethical hacker, including strong demand, a salary range of about 91,000 to 117,000, and ongoing upskilling to protect networks amid cybercrime and ransomware threats.
Discover why hackers favor Linux for its open source, transparent nature, granular control, and powerful scripting, with most hacking tools built for Linux and Linux-dominated web servers.
Download Kali Linux from the official site, set up a virtual machine (VirtualBox recommended), run the graphical installer, create the user, and boot into Kali for hands-on setup.
Navigate the Linux filesystem from the root directory through key subdirectories like /bin, /etc, /proc, /var, /home, /boot, /lib, /opt, and /media, understanding binaries, configurations, devices, and logs.
Explore essential Linux commands in Kali Linux, from ls and cd to pwd, mkdir, and navigating hidden and parent directories, plus basics of which, locate, find, and sudo.
Explore managing Kali Linux services with systemctl, enabling and starting ssh and Apache, checking status, and understanding default disabled state and startup behavior for red team exercises.
Search, install, upgrade, and remove tools on Kali Linux using apt commands like sudo apt update and sudo apt upgrade, including metasploit framework. Manage Debian packages with dpkg and purge.
Explore environment variables as settings storage across a terminal session, showing path, user, and home, and learn to export variables for sub processes, check status and pid.
Explore the bash history command to view and reuse past commands, using shift+1 to replay the last command, shift+7 to run a specific earlier entry, and ctrl+r to search history.
Master piping and redirection to manage stdin, stdout, and stderr from the command line. Explore using >, >>, and 2>, plus pipes, cat, and wc to capture outputs and errors.
Explore text searching and manipulation with grep, sed, cut, awk, head, and tail. Practice piping, regular expressions, case-insensitive searches, and basic text transformations on sample files.
Edit files from the command line using nano and vim, learn insert mode with i, and save, quit, or force quit with w, q, wq, or !.
Copy a file with cp, then compare files using diff and a visual diff to spot differences and learn basic file comparison features.
Manage processes by using foreground and background jobs, suspending with ctrl-z, and resuming with fg or bg. Locate and terminate processes with ps, grep, and kill -9.
Master file and command monitoring using tail with -5 and -f options, and watch to observe real-time access logs on localhost.
Learn to download files using wget as a non-interactive network downloader. Save content with a chosen filename, and supplement with curl for downloading pdfs or debian packages.
Learn to customize the bash environment by creating aliases, such as ll for ls -l, and persist them by editing the ~/.bashrc to apply in interactive terminals.
Master netcat as a versatile tool to read and write data across networks using tcp or udp, set up listening ports, and explore reverse shells in red team practice.
Create a bash script on the desktop, add a shebang, include a hello there message, mark it executable with chmod, and run it to print the text.
Explore creating and manipulating variables in shell and batch scripts, print and combine variable values, use command substitution, handle script arguments, and read user input.
Master conditional scripting with if, else, and elif statements, learn syntax rules, test operators for numbers and strings, and use fi to close the blocks.
Explore for and while loops in shell scripting, print values, read from files like list.txt, and generate IP ranges with backticks and command substitution.
Master the concept of functions in scripts, mirroring programming languages with function definitions and calls. Learn to define, call by name, and return values from functions.
Learn core computer networks, exploring peer-to-peer and server-centric models, six physical topologies, and essential terms such as hostname, ip address, mac address, dns, arp, and dhcp.
Explain the OSI model, a seven-layer framework that governs physical, data link, network, transport, session, presentation, and application functions, including TCP, UDP, IP, MAC, and LLC.
Wireshark is the world's foremost and widely used network protocol analyzer, enabling live capture, offline analysis, and decryption for TLS, WEP, and WPA via a three-pane browser on multiple platforms.
Install Wireshark across Linux, Kali Linux, Windows, Mac, and VirtualBox by following simple official download steps from wireshark.org. Begin handling Wireshark in the next lecture.
Select the interface (for example eth0) in Wireshark to start capturing packets and observe traffic like TCP packets, then stop with ctrl+c as you prepare for ip protocol filters.
Set filters to capture packets from a specific source IP and to a specific destination IP, using and/or operators to tailor the capture.
set a protocol filter to display http and dns traffic, capture specific protocol requests, and inspect source, destination, and response details for traffic analysis.
Set filters to capture tcp packets by a specific source or destination port to observe traffic between a client and a destination such as google dot com.
Learn to display tcp packets containing a specific term by inspecting tcp contents, and determine whether the term appears in the request or the response via source and destination addresses.
Learn to filter HTTP GET and POST requests by selecting the method with the -x option, capture requests live, and switch between GET and POST to verify what is captured.
Filter out specific protocols in packet captures using not and or operators with brackets to exclude DNS and ARP, noting case sensitivity.
See netcat capture insecure connections, view plaintext data via TCP streams with Wireshark, and use netcat as a flexible client to test connectivity while noting it’s not for secure communication.
Explore how ftp, a plaintext file transfer protocol, leaves passwords vulnerable to man-in-the-middle attacks and show how to capture them in Kali Linux, then switch to sftp.
Learn how to capture and extract files transferred over FTP with Wireshark, inspect TCP streams, and recover plain text data, highlighting security risks of FTP.
Explain how passwords can be captured over http when a site doesn't use https, showing that usernames and passwords appear in plain text and stressing the danger of unencrypted websites.
Capture images and other files from HTTP traffic by exporting objects, stopping capture, and saving JPEGs and BMPs, while recognizing the security risks of non-HTTPS sites.
Perform whois enumeration to gather domain information such as domain name, name servers, registrar, creation and update dates, country, and organization, using the whois client.
Discover how to conduct Google hacking by using site:domain searches and filetype filters to reveal vulnerabilities and misconfigured sites, and study Google Docs filters with a reference sheet.
Explore Netcraft's free web portal and its tools for passive information gathering, including DNS searches and subdomain discovery for domains such as google.com.
Explore Shodan, a search engine that crawls devices connected to the internet, including servers, routers, and IoT devices, and learn basic usage with hostname and domain queries and search filters.
Explore how the security headers scanner analyzes activity response headers to assess a target site's security posture. Learn how to scan DNS for basic insights in ethical hacking practice.
Learn how the harvester tool helps ethical hackers gather email and domain information from target sites, using domain queries and source constraints to support reconnaissance for red team tactics.
Discover information gathering frameworks like OCI in IT and OCI anti framework, uniting tools and websites in one location, with Maltego for data mining and collecting public records and usernames.
Experiment with DNS enumeration using host and DNS enum to reveal IP addresses, subdomains, and text records, including brute-force subdomain discovery and automation strategies.
Explore port scanners essentials, including TCP and UDP scanning techniques, ping and stealth scans, and the role of IP addresses and well-known ports.
Nmap is a network scanner used for host discovery and vulnerability scanning, using IP packet analysis to identify remote hosts, operating systems, and services via the terminal.
Set up a safe testing environment by installing VirtualBox, Kali Linux, and Metasploit, configuring bridged networking, and creating a dedicated lab without live targets.
Learn nmap scanning techniques, including udp scan, fin scan, syn scan, tcp syn scan, tcp connect scan, virgin detection, and idle scan, with practical command examples.
Run a basic nmap scan against an IP or hostname to identify open ports, such as 443 and http, and practice only on local or test machines to avoid trouble.
Learners perform an nmap ping scan to detect hosts on a subnet (8.0/24) by sending ICMP packets, revealing four active hosts including Kali Linux and blood machine.
Learn how to perform comprehensive port scanning in Kali Linux, choosing all ports or targeted ranges with dash p, and identify open or closed ports in hands-on fashion.
Practice scanning multiple IPs in kali linux hands-on by targeting two machines, running multi-target scans, and noting hosts up and ports closed.
Learn to scan the most popular ports with Kali Linux red team tactics, starting from the top 100 ports to top 1000 and 10,000, using Metasploit against your IP address.
Create a text list of IP addresses, then scan the hosts to determine which are up using predefined parameters for safe test-machine practice in Kali Linux.
Save Nmap scan results to a file by directing the output, capturing the IP address, and reviewing the saved results for analysis.
Learn to disable DNS name resolution to speed up Nmap scans by using the -n option. The hands-on demo shows scanning a local network quickly without DNS lookups.
Perform rapid OS and service detection with fast execution during a hands-on scan. Observe FTP version details and possible anonymous access as version and OS detection run.
Detect service and daemon versions by running a scan with the -sV flag against a target IP, revealing state, service, and version details.
run tcp and udp port scans using sudo, observe that tcp scans execute quickly while udp scans require root privileges and take longer to complete.
Learn CVE detection with Nmap and its scripting engine, using Lua scripts to scan for vulnerabilities and reveal FTP backdoors and vulnerable servers.
Learn about denial of service concepts with a hands-on demo of slow loris style attacks, using Nmap scripting to test a host, while emphasizing ethical use and system hardening.
Learn to run a brute force attack with nmap's script against an ftp server (ftb server) on port 21, noting that brute forcing is time-consuming and not a modern approach.
Detect malware infections on remote hosts using nmap scripts and Google malware detection. Explore ethical hacking and white-hat practices within Kali Linux red team tactics, including IP versus domain considerations.
Learn web application security essentials, including common attacks such as cross-site scripting (XSS), SQL injection, CSRF, and DDoS, and how testing detects vulnerabilities with DAST and SAST.
Understand how web applications operate as client and server side software, with html, css, and js on the client, app logic with a server-side database, plus the end-to-end request flow.
Explore how the hypertext transfer protocol enables client–server web resource exchange, including http and https, requests and responses, headers, methods, status codes, and proxies.
Explore how the domain name system translates names into IP addresses, enabling browsers to load resources, and learn the eight-step DNS lookup, caching TTL effects.
Explore the OWASP top ten vulnerabilities, from injection and broken authentication to cross-site scripting and insecure deserialization, and learn practical, hands-on remediation and testing strategies.
Explore how the web content scanner DIRB uses a word list to discover directories and pages by sending requests to a server, with options for non-recursive scans and request delays.
Configure Burp Suite for web application security testing by intercepting traffic, setting a manual proxy, and trusting the Burp Suite certificate.
Explore Nikto, a highly configurable open source web server scanner that tests for thousands of dangerous files and programs and shows scan results for web site assessment.
Open a terminal and launch the MSF console to initialize the Metasploit framework. Use the quiet command to run without ASCII art while exploring the Metasploit interfaces and setup steps.
Master Metasploit framework syntax by navigating modules, showing options, configuring the target host with its IP, and running a port scan using the auxiliary scanner.
Initialize a Metasploit database with db init, open the msf console, and use services and hosts to view results. Utilize workspace and port filters with -p to tailor findings.
Navigate auxiliary modules in Kali Linux by listing and searching them by type, name, or options, then use show options and info, and upload a file as needed.
Explore Metasploit payloads and Meterpreter payloads inside Kali Linux red team tactics, and examine how the interpreter's multifunction payload extends features beyond a simple command chain.
What is ethical hacking?
Ethical hacking involves an authorized attempt to gain unauthorized access to a computer system, application, or data. Carrying out an ethical hack involves duplicating strategies and actions of malicious attackers. This practice helps to identify security vulnerabilities which can then be resolved before a malicious attacker has the opportunity to exploit them.
Also known as “white hats,” ethical hackers are security experts that perform these assessments. The proactive work they do helps to improve an organization’s security posture. With prior approval from the organization or owner of the IT asset, the mission of ethical hacking is opposite from malicious hacking.
What Is A Red Team?
A red team consists of security professionals who act as adversaries to overcome cyber security controls. Red teams often consist of independent ethical hackers who evaluate system security in an objective manner.
They utilize all the available techniques to find weaknesses in people, processes, and technology to gain unauthorized access to assets. As a result of these simulated attacks, red teams make recommendations and plans on how to strengthen an organization’s security posture.
How Does A Red Team Work?
You might be surprised to learn that red teams spend more time planning an attack then they do performing attacks. In fact, red teams deploy a number of methods to gain access to a network.
Social engineering attacks, for example, rely on reconnaissance and research to deliver targeted spear phishing campaigns. Likewise, prior to performing a penetration test, packet sniffers and protocol analyzers are used to scan the network and gather as much information about the system as possible.
What Is A Blue Team?
A blue team consists of security professionals who have an inside out view of the organization. Their task is to protect the organization’s critical assets against any kind of threat.
They are well aware of the business objectives and the organization’s security strategy. Therefore, their task is to strengthen the castle walls so no intruder can compromise the defenses.
How Does A Blue Team Work?
The blue team first gathers data, documents exactly what needs to be protected and carries out a risk assessment. They then tighten up access to the system in many ways, including introducing stronger password policies and educating staff to ensure they understand and conform to security procedures.
Monitoring tools are often put in place, allowing information regarding access to the systems to be logged and checked for unusual activity. Blue teams will perform regular checks on the system, for example, DNS audits, internal or external network vulnerability scans and capturing sample network traffic for analysis.