Learn Network Hacking in 2026: Attacking Network Components

Explore how denial of service and distributed denial of service attacks overwhelm web servers and network components, with syn and http flood types, rate limiting, and traffic analysis.

Demonstrate a simple http flood denial of service against a vulnerable web server using a self-made Python tool across two Linux machines.

Explore Mac address spoofing, how attackers impersonate devices to bypass access controls and enable man-in-the-middle attacks, and learn practical prevention with segmentation, port security, and encryption.

Explore Mac address spoofing to bypass router blacklist by changing your Mac address on Linux or MacBook. Use Macchanger or spoof-mac to obtain a new Mac address and regain access.

Explore how man-in-the-middle attacks work, focusing on ARP spoofing and ARP poisoning, how attackers intercept and modify traffic, and detection and prevention methods.

Demonstrate arp spoofing in practice by using arpspoof on Linux to spoof Windows 11 and the router, view arp tables, enable IP forwarding, and observe traffic rerouting.

Demonstrates how arp spoofing enables a man-in-the-middle attack, using ettercap to automate traffic forwarding and capture credentials on non-encrypted http sites.

Explore DNS attacks such as cache poisoning and tunneling, learn how DNSSEC and secure resolvers defend networks, and examine threats like domain hijacking, DNS rebinding, and typosquatting.

Demonstrates dns spoofing using etercap and a custom python script, detailing configuration, arp poisoning, and redirecting http traffic while sniffing credentials.

demonstrate dns tunneling to establish a reverse shell with a target using the dns cat tool, creating an encrypted command and control channel over the dns protocol.

Explore zero day vulnerabilities in network protocols and how unpatched flaws in DNS, TCP/IP, and TLS enable attackers to compromise global connectivity.

Explain the IPv6 vulnerability CVE-2024-38063, patched August 13, 2024, affecting Windows systems from 2008 onward; demonstrate a Python and Scapy proof-of-concept causing memory corruption and denial of service.

Explore the Dora process in DHCP and examine attacks like starvation, rogue servers, spoofing, and lease-time manipulation, plus essential defenses such as DHCP snooping and port security.

Explore DHCP starvation by building a Python tool with Scapy to flood a DHCP server with DHCP discover packets, exhaust its IP address pool, and disrupt network access.

Explore rogue dhcp attacks using Ettercap to perform dhcp spoofing and establish a man-in-the-middle, configuring ip pool, dns, and gateway to intercept traffic.

Discover how routers direct traffic and defend against attacks such as router password cracking, DNS hijacking, man in the middle attacks, firmware vulnerabilities, and weak encryption.

Explore router security with router sploit to scan for vulnerabilities using auto pwn, assess default credentials and outdated firmware, and examine telnet or SSH access risks on a target router.

Explore weak encryption, outdated algorithms and short keys that enable interception and attacks (WEP, DES, SSL 2.0/3.0, RC4) such as man-in-the-middle, replay, and credential theft.

Discover how weak cryptography exposes plaintext by demonstrating Caesar and xor ciphers, showing brute-force and known-plaintext attacks that break encryption when implemented insecurely.

Develop a zero-day buffer overflow exploit over the network to gain a reverse shell by reverse engineering a vulnerable C chat app, using Python, GDB, and basic assembly.

Explains a vulnerable client-server C setup, reveals a 100-byte buffer overflow, uses GDB to overwrite RIP, and builds a Python exploit to trigger a crash for the next lecture.

Learn how to craft a payload that overwrites rip with a return address to execute shellcode on the target, using padding and a nop sled.

Demonstrate building and testing a real-world exploit with msf console, linux x64 reverse tcp payload, and shellcode, culminating in a reverse shell on the target. Conclude with network protection.