Kali Linux for Ethical Hackers

Install and configure the Metasploit framework on your system, set up PostgreSQL, initialize the msf database, and verify the connection for security research and testing.

Learn to create, manage, and switch Metasploit MSF workspaces in the MSF console, organize hosts and data by workspace, and detect OS versions and vulnerabilities with SMB scanning.

Learn to use msfconsole, the Metasploit Framework's powerful command-line interface. Navigate modules, set targets, search payloads, and save configurations for ethical security testing.

Perform port scanning and service enumeration with nmap, detect OS and versions, and import results into Metasploit using db_import and db_nmap for deeper analysis.

Demonstrates ethical penetration testing of a Windows 7 machine using the eternalblue exploit, including network configuration, nmap scanning, msf console exploitation, and meterpreter session capture.

Explore Burp Suite, Portswigger's modular web application security testing tool, and its core components—proxy, spider, scanner, and intruder—with editions from community to enterprise for scalable penetration testing.

Set up Burp Suite professional on Linux by installing Java JDK 8, unzipping, granting permissions, activating the license, and creating a symbolic link for one-tab startup.

Explore the burp decoder tab in Burp Suite to encode and decode data using base64 and url formats across input, operations, and output areas, then practice with smart record.

Explore burp intruder, a burp suite tool for automating fuzzing, brute force, and parameter enumeration against web applications, using cluster bomb payloads to test username and password combinations.

Learn to use Burp Repeater in Burp Suite to manually modify and resend HTTP requests, test logins with sql injection payloads, and compare it with intruder for ethical testing.

Perform a password brute force attack in a controlled lab using burp suite, focusing on proxy, repeater, and intruder tabs to test login page security.

Explore cookie tampering attacks, learn how modifying cookies can impersonate users and escalate privileges, and see a practical demonstration using Burp Suite to decode, tamper, and compare cookies across requests.

Identify weak, sequential session tokens and assess their randomness with Burp Suite, using proxy and Sequencer to detect predictability and prevent tampering in authorized environments.

Learn about http methods such as get and post, and security via body vs url data, plus burp suite interception and options, delete, and put methods.

Explore HTTP verb tampering, where changing methods like GET, POST, and DELETE tricks web apps into performing unintended actions. Learn server-side validation and strong access control to prevent this vulnerability.

Master Burp Suite essentials by revisiting the proxy, target, intruder, repeater, sequencer, decoder, compiler, scanner, extended, and spider tools. Consolidate your security testing skills for effective web application testing.

Nmap, a network mapper, lets you see which devices are connected to your network and the services they run by scanning the subnet, revealing active devices and their IP addresses.

Install nmap on Windows, Mac, and Linux and verify its configuration for network discovery and security auditing. Perform a local network scan with nmap -sn <network>/24 to identify active hosts.

Master network scanning with nmap to discover live hosts, identify IPs and services, detect operating systems and versions, using ping (-sn), syn (-sS), UDP (-sU), and aggressive (-A).

Learn to scan a vulnerable web application with nmap to uncover open ports, including ftp 21, http 80, rtsp 554, and ftp 1723, and verify nginx 1.19 on port 80.

Use nmap to detect the target's operating system and service versions, revealing a Linux kernel version between 2.6.19 and 2.6.33 and services like ftp with vsftpd, guiding vulnerability checks.

Learn to use the nmap scripting engine to run pre-written scripts for domain whois, ip details, and web server discovery, then chain commands to enumerate directories and ports.

Discover host discovery techniques to identify live devices and their IP and MAC addresses using nmap scans, from single IP to range scans, with timing templates t0 to t5.

Learn to use nmap for practical MAC address spoofing in real-world scans. Generate random or vendor-based MACs, apply specific prefixes, and spoof a target IP to observe scan results.

Learn to use SQLMap, an open source penetration testing tool, to automate detection and exploitation of SQL injection vulnerabilities in web applications, test login forms, and extract sensitive data.

Set up a Kali Linux ethical hacking lab with VirtualBox, install Kali and update the system, then clone the pen test lab from GitHub, install docker, and deploy DVWA.

Learn to discover SQL injection vulnerabilities with sqlmap in a safe environment, starting from the help menu and testing via boolean, blind, error-based, and time-based methods.

Enumerate databases and tables from a vulnerable app with sqlmap, review the help menu for options, and extract dvwa and information_schema data, including guest_book and users, with permission.

Explore tamper scripts for sqlmap that modify and base64 encoded sql payloads to bypass web application firewalls, intrusion detection systems, and intrusion prevention systems.

Demonstrates gaining a SQL shell with SQL map by exploiting SQL injection to interact with a database, list databases and tables, and retrieve usernames and passwords.

Learn to use sqlmap to test for SQL injection on a web app, crawl across pages, enumerate databases, tables, and columns, and dump user data in a non-interactive workflow.

Explore how Hydra automates brute force testing to assess system security by trying many username and password combinations across protocols such as SSH, HTTP, and FTP.

Set up Hydra on Kali Linux, verify installation with Hydra -V, install via apt if missing, explore Hydra -help, and prepare to learn essential commands and flags.

Define targets for hydra by specifying a single target and service, using URL format or a custom port with hyphen S; load targets from a file with hyphen m.

Identify services on open ports using nmap with service version detection to reveal targets like ftp, ssh, http, and mysql, then use Hydra for brute-force attempts.

Learn to use Hydra to brute force ssh logins by mastering key flags for usernames and passwords, creating wordlists, and running practical tests against a Metasploitable target.

Create wordlists with crunch by setting min and max lengths and character sets, save to a file, and use hyphen t to fix known segments, then Hydra for SSH.

Use nmap to identify an ftp service, then brute force ftp logins with hydra to discover valid credentials.

Learn to handle attack outputs with hydro by saving results with -o, selecting formats with -B (text, json, json v1), and viewing them with cat.

Analyze how to test login security with Hydra by brute-forcing credentials on a vulnerable web app, observing http get vs post, session ID, and varying db security levels.

Explore how Kali Linux ethical hackers compare Hydra and Burp Suite for advanced web login brute forcing, handling dynamic user tokens and anti-CSRF protection with payload-driven intruder attacks.

Explore the three main modes of John the Ripper: single mode, wordlist mode, and mask mode, with practical hash-cracking examples.

Learn to use zap proxy in Kali Linux to crawl and scan a website, identify vulnerabilities from the alerts tab, including cross-site scripting, and generate a report.

Explore the social engineer toolkit in Kali Linux, a practical demonstration of a credential harvester phishing page using web templates to capture login data.

Learn how Wi-Fi lets devices connect to the internet via radio signals under IEEE 802.11, and how 2.4 GHz, 5 GHz, and 6 GHz bands affect speed and range.

Trace the evolution of wifi security from RC4 to WPA, WPA2, and WPA3, highlighting 128-bit and 256-bit keys, dynamic keys, CCMP, and simultaneous authentication of equals.

Practical steps to attack a WPA2 wifi network using monitor mode, capture the handshake with airodump-ng, perform a deauthentication attack, and crack the password with aircrack-ng using a wordlist.