Ethical Hacking and cybersecurity with Python, Kali Linux

Explore Linux fundamentals by learning that everything is a file, including disks and ports, and understand case sensitivity while using the Kali terminal with the Bash shell to run scripts.

Examine the Linux file system from the root, mapping essential directories like /boot, /dev, /etc, /home, /proc, /usr, and /var, and understand device files and system configuration.

Master basic Linux commands in Kali, including pwd, ls, /etc/passwd, /etc/shadow, cat, id, whoami, sudo, and cd, to view files, manage users, and navigate directories.

Create and navigate directories with mkdir and cd, build nested structures like test1/test2, edit files with nano or vi on Linux, and compare changes using diff.

Master copy, move, and rename operations in Linux using cp for files and directories, mv for relocating or renaming, and basic file viewing with cat.

Explore Linux text search tools like locate, where is, which, and find, along with grep, pipes, and text processing to identify files, binaries, and content.

Learn to manage users and privileges with sudo, install and upgrade packages using apt and dpkg, and perform system cleanup on Kali Linux from scratch.

Manage processes on Kali Linux with ps aux and top to monitor cpu and memory, then adjust priorities via sudo renice and terminate with sigterm, sigkill, or sighup.

Use lspci, lsusb, and lshw to list pci and usb hardware and view detailed system information, installing lshw if needed.

Learn to run commands sequentially using semicolons to execute all commands and using && to run the next command only after the previous succeeds.

Learn to pass output between commands with pipes, and explore shell features like comments, background execution, escaping, and how the shell path locates executables to run scripts.

View and interpret file permissions with ls -l, identify owner, group, and others and their r, w, x rights, then modify them with chmod using octal values or symbolic updates.

Use the cut command to extract fields with a delimiter. Try -d space -f 1 file three and -f 2,4, or -f 2-4; also show -d : -f 1 /etc/passwd.

Learn to use the awk command, an advanced alternative to cut, to parse text, print specific columns, and extract hashed passwords from /etc/shadow for analysis.

Master tr and sed commands to translate and delete characters, search and replace strings, and perform in-place edits in files and shell configuration.

Practice shell programming by writing a bash script that reads user input into variables, uses control structures, and prints a greeting with a proper shebang.

Master shell if statements with then and fi, square bracket tests, and conditions such as tac eq, to check file existence, permissions, and ownership.

Learn Bash scripting with a for loop that creates temp files, echoes iteration numbers, sleeps between steps, and uses chmod to make the script executable and run with dot slash.

Create a bash function named clean up to delete temp files in the directory, edit with vi, add a shebang, save, grant execute permission, and run to remove temp files.

Explore the bash while loop, reading lines from a file and accumulating a sum, using awk scripts and basic file operations with vi and chmod.

Master Python basics on Kali Linux by using interactive mode, writing and running scripts with vi editor, handling syntax errors, comments, indentation, input conversion, and accessing cli arguments with sys.argv.

Learn Python variable naming rules, avoid keywords and illegal starts, and construct valid identifiers with letters, digits, and underscores; practice creating and printing variables like port_underscore_number.

Learn Python strings from single, double, and triple quotes; practice concatenation and percent-formatting with %d, %s, %f, %c, and hex styles, plus reassigning variable types.

Explore essential Python string operations in Kali Linux, including len, replace, split, strip, count, round, find, join, upper, lower, and basic type conversions.

Explore Python lists and tuples from scratch, including indexing, reading and updating list items, slicing, two dimensional lists, and understanding that tuples are immutable and not deletable.

Explore how to use Python dictionaries to store key-value pairs, access values by keys, and perform updates, iterations, and sorting with items, keys, values, and length.

Learn Python calculations with +, -, *, /, //, %, and **, break lines with backslash or parentheses, and control print item separators using sep.

Learn how the if statement tests a condition and executes a block when true. Practice with Python and Linux scripting examples, including else handling for invalid input.

Explore how the Python while loop prompts for a username up to five times, tests x < 5, increments x, and branches to welcome or print wrong username.

Explore how for loops iterate over data sequences, using variables, ranges, and steps to generate values such as 0–3 or 1,3,5, and print results.

Explore Python functions, including void and value-returning types, def syntax, calling and returning values, optional arguments, and multi-argument returns with port-to-service mappings.

Demonstrate global versus local variables in Python with a function that defines a port 443 and a global port 80, showing how to modify the global value inside the function.

Learn how to open and manage files in python using the open function with read, write, and append modes, create files if needed, and read the first five lines.

Master Python exception handling using try and except blocks with specific exception names, implement handlers, and utilize a finally clause to ensure code runs after execution, including closing files.

Use loops to collect multiple port name and port number entries from the user and write them to ports.txt, formatting with tabs and newlines, and appending data.

A class defines data, attributes, and methods to create objects as instances. Use the init constructor and self to initialize attributes and access them via the dot notation.

Learn how to create a base class and a derived subclass in Python, initialize attributes with an __init__ method, and access data through methods like port_name_num and port_detail.

Explore how polymorphism lets methods with the same name have different signatures across data types. See concrete examples using len on strings, characters, and dictionaries, plus port_name_number and port_description classes.

Explore Python modules and import mechanics, including .py files and module initialization, and learn to reuse code across apps using import, from, as, and sys.path with standard library examples.

Install Python on Windows 10 and set up the pierogi (py auto GUI) automation library to move the mouse, click, and type, enabling GUI automation of browsers and other apps.

Learn to automatically locate screen elements with image detection using pierogi, returning coordinates and enabling a double click to open apps like Google Chrome from a screenshot.

Create a simple Python tcp client using sockets to connect to 127.0.0.1 on port 2000, send and receive messages with a netcat listener, and encode and decode data.

The address resolution protocol maps ip addresses to mac addresses on local networks, using broadcast requests and arp replies to populate the arp cache for future communication.

Explore how the TCP three-way handshake establishes client–server connections, how HTTP uses port 80, and how Wireshark sniffs traffic to observe SYN and ACK packets in a live network.

Explore how udp is a connectionless protocol and how dhcp uses udp ports 67 and 68 to assign ip addresses. Observe Kali Wireshark sniffing capturing dhcp request and acknowledgement packets.

Demonstrates how ICMP tests connectivity using ping, and analyzes ICMP request and reply packets exchanged between a Kali machine and the access point router using Wireshark.

Explore IPv4 and IPv6 addressing, public and private ranges, netmasks and CIDR notation, and loopback addresses and ports.

Discover active and passive network scanning with netdiscover to identify live hosts, IPs, MAC addresses, and vendors, and practice scanning a given 192.168.100.0/24 range.

Learn to use nmap for port scanning and network security auditing, determine online hosts, and identify open ports and operating systems.

Execute a stealth TCP SYN scan with nmap to identify open, closed, and filtered ports without completing the handshake. Save results in all formats, including dot nmap and dot xml.

Understand that UDP is connectionless and slower to scan; use nmap -sU to probe UDP ports like 53, 161, 162, 67, and 68. Responding behavior reveals open, filtered, or closed ports via responses, lack of response due to firewall, or ICMP port unreachable, with timing options T0–T5 and default T3.

Use Zenmap, the graphical interface for the nmap scanner, to run network scans and view ports. Explore scan profiles such as quick scan and intense scan to tailor results.

Learn to conduct a man-in-the-middle attack using ARP poisoning with Ettercap on Kali Linux. Configure Windows 11 and the gateway as targets, enable IP forwarding, and capture traffic with Wireshark.

Learn how to perform man-in-the-middle attacks on local wired and wireless networks using bettercap to manipulate http and tcp traffic, including arp spoofing and traffic sniffing.

Explore DNS spoofing with BetterCAP on Kali Linux to redirect domain requests to an attacker-controlled IP, and test with cali.org and facebook.com, noting HTTPS limitations.

Outline how a dns spoofing attack with Ettercap on Kali Linux redirects a victim to a malicious page, and discuss defenses like dhcp snooping and vpn.

Explore JavaScript injection attacks that execute malicious code on the client side, potentially stealing sensitive information and redirecting browsers to attacker-chosen sites.

Learn how msfvenom creates a reverse tcp payload for metasploit, and how a kali listener captures a reverse shell from a Windows target.

Learn to create a hidden bind tcp payload using msfvenom on Kali Linux, host it via Apache, and establish a remote shell with a listening port of 4000.

Create a windows reverse tcp payload with msfvenom, configure a metasploit listener, and hide the payload inside an image using an sfx archive to establish a session.

Demonstrate how Arpspoof enables a man-in-the-middle through ARP poisoning, intercepting and potentially modifying or blocking traffic between two devices on a local network using Kali Linux from scratch.

Explore how the Fat Rat tool creates backdoor payloads for Windows and Linux, configures listeners, and tests payloads while highlighting bypassing antivirus considerations.

Explore ethical hacking with Python and Kali Linux from scratch by using veil-evasion to generate payloads that bypass antivirus defenses on Windows targets.

Demonstrate how the browser exploitation framework BeEF hooks target browsers and runs modules like alert, phishing, spider, redirect. Learn to set up BeEF on Kali, start Apache, and deploy payloads.

Install Metasploitable 2 in VirtualBox to create a vulnerable testing environment and practice penetration testing techniques, configure networking, and scan with Nmap and netdiscover.

Demonstrates exploiting an ftp server using vsftpd 2.3.4, scanning with nmap, leveraging metasploit for a remote shell, and cracking shadow hashes with hash identifier and john.

Demonstrates exploiting an ssh service on metasploitable 2 using nmap and the metasploit ssh_login module, leveraging username/password data from files, and capturing traffic with wireshark to observe encrypted ssh streams.

The lecture demonstrates port scanning and service discovery on a metasploitable host, installing the rc-client tool on Kali, and attempting root access by reading shadow file for root hash.

Explore samba on metasploitable using nmap and metasploit to identify vulnerabilities, exploit with a remote host, gain root access, and read the shadow file for full control.

Use the Hydra password cracking tool to perform brute-force testing by iterating usernames and passwords with word lists against an FTP service, then verify access with FTP clients like FileZilla.

Set up Burp suite as a proxy to intercept and inspect browser traffic to a web server. Configure port 8080 with Foxyproxy, route Firefox through Burp, and review HTTP history.

Master cross-site scripting attacks, including reflected, stored, and dom-based variants, by analyzing input manipulation, payload execution, and how attackers steal cookies and session data.

Explore the CPU registers, focusing on general purpose ones for arithmetic and data movement, including 8-bit, 16-bit, and 32-bit forms; also cover segment and flags registers and the instruction pointer.

Explore assembly basics like reserved words, identifiers, mnemonics (mov, add, sub), registers, directives, and data types, and learn integer constants, operator precedence, and comments.

Define byte and signed byte data with unsigned 0–255 and signed -128 to 127. Explain question mark initializers, addresses and offsets, and up/dup storage for byte, word, and quad word.

Explore how x86 processors store data in little endian memory, where the least significant byte occupies the lowest address, and contrast with big-endian storage used by other systems.

Demonstrate assembly language data transfer concepts through mnemonics and operands, showing how move, add, sub, multiply, divide, and compare instructions transfer data and drive jump, call, and exchange operations.

Master boolean and, test, or, xor, not, and compare instructions to manipulate bits, clear and set bytes, invert bits, and evaluate unsigned relationships using zero and carry flags.

Explore unconditional jumps and labels in assembly, distinguishing local and global labels, and implement loops using comparisons and the zero flag to control execution.

Explore assembly language conditional structures by implementing pseudocode with unsigned 32 bit variables, using compare operations, jump instructions (jna) and label-based branching to assign to var two or var one.

Explore how overflow occurs in numeric representations by analyzing binary and hexadecimal addition, detecting carry patterns, and predicting overflow in multi-digit sums.

Learn how the runtime stack is managed by the cpu with the esp register, using push and pop to move the stack downward and handle call and read sequences.