Kali Linux for Ethical Hackers

Learn to use msfconsole, the Metasploit Framework's powerful command-line interface. Navigate modules, set targets, search payloads, and save configurations for ethical security testing.

Explore the burp decoder tab in Burp Suite to encode and decode data using base64 and url formats across input, operations, and output areas, then practice with smart record.

Learn to use Burp Repeater in Burp Suite to manually modify and resend HTTP requests, test logins with sql injection payloads, and compare it with intruder for ethical testing.

Perform a password brute force attack in a controlled lab using burp suite, focusing on proxy, repeater, and intruder tabs to test login page security.

Learn about http methods such as get and post, and security via body vs url data, plus burp suite interception and options, delete, and put methods.

Master Burp Suite essentials by revisiting the proxy, target, intruder, repeater, sequencer, decoder, compiler, scanner, extended, and spider tools. Consolidate your security testing skills for effective web application testing.

Nmap, a network mapper, lets you see which devices are connected to your network and the services they run by scanning the subnet, revealing active devices and their IP addresses.

Learn to scan a vulnerable web application with nmap to uncover open ports, including ftp 21, http 80, rtsp 554, and ftp 1723, and verify nginx 1.19 on port 80.

Learn to use the nmap scripting engine to run pre-written scripts for domain whois, ip details, and web server discovery, then chain commands to enumerate directories and ports.

Discover host discovery techniques to identify live devices and their IP and MAC addresses using nmap scans, from single IP to range scans, with timing templates t0 to t5.

Learn to use nmap for practical MAC address spoofing in real-world scans. Generate random or vendor-based MACs, apply specific prefixes, and spoof a target IP to observe scan results.

Learn to use SQLMap, an open source penetration testing tool, to automate detection and exploitation of SQL injection vulnerabilities in web applications, test login forms, and extract sensitive data.

Set up a Kali Linux ethical hacking lab with VirtualBox, install Kali and update the system, then clone the pen test lab from GitHub, install docker, and deploy DVWA.

Explore tamper scripts for sqlmap that modify and base64 encoded sql payloads to bypass web application firewalls, intrusion detection systems, and intrusion prevention systems.

Demonstrates gaining a SQL shell with SQL map by exploiting SQL injection to interact with a database, list databases and tables, and retrieve usernames and passwords.

Learn to use sqlmap to test for SQL injection on a web app, crawl across pages, enumerate databases, tables, and columns, and dump user data in a non-interactive workflow.

Define targets for hydra by specifying a single target and service, using URL format or a custom port with hyphen S; load targets from a file with hyphen m.

Learn to use Hydra to brute force ssh logins by mastering key flags for usernames and passwords, creating wordlists, and running practical tests against a Metasploitable target.

Create wordlists with crunch by setting min and max lengths and character sets, save to a file, and use hyphen t to fix known segments, then Hydra for SSH.

Use nmap to identify an ftp service, then brute force ftp logins with hydra to discover valid credentials.

Analyze how to test login security with Hydra by brute-forcing credentials on a vulnerable web app, observing http get vs post, session ID, and varying db security levels.

Explore how Kali Linux ethical hackers compare Hydra and Burp Suite for advanced web login brute forcing, handling dynamic user tokens and anti-CSRF protection with payload-driven intruder attacks.

Explore the three main modes of John the Ripper: single mode, wordlist mode, and mask mode, with practical hash-cracking examples.

Learn to use zap proxy in Kali Linux to crawl and scan a website, identify vulnerabilities from the alerts tab, including cross-site scripting, and generate a report.

Practical steps to attack a WPA2 wifi network using monitor mode, capture the handshake with airodump-ng, perform a deauthentication attack, and crack the password with aircrack-ng using a wordlist.