Complete Real-World Ethical Hacking 2022

Explore OSINT for ethical hacking and apply the four-stage OSINT cycle—requirements gathering, data retrieval, analysis, and reporting—to evaluate public data across media, text, and geolocation for offensive security.

Explore search engines for osint, comparing Google, DuckDuckGo, Yandex, and Bing; master dorking with operators title, in title, URL, file type, and cache, and use carrot to cluster results.

Practice searching the dark web using Tor, VPN, and a secured virtual machine, with DuckDuckGo and onion domains to identify safe, encrypted websites.

Explore how an open source search and results clustering engine automatically groups documents by topic, using algorithms like lingo, tse, and k-means, with a configurable workbench and data sources.

Explore the whois protocol for osint researchers, learn to retrieve domain registration details, registrant contacts, and historical data using online tools and reverse whois techniques.

Master practical reverse lookup methods, including reverse IP, reverse whois, and DNS report, then assess server security by examining HTTP headers and DNS security tests.

Learn to set up and run SpiderFoot for automated web information gathering, configure scans with multiple modules, monitor DNS and whois data, and export scan results as JSON.

Learn about ssid, mac address, and beacons that identify and connect to wifi networks. Practice wigle osint to locate networks by location, mac, or network name and export data.

Explore email osint techniques with recon-ng to identify target emails, build permutations, and validate addresses for social engineering and phishing campaigns, using osint frameworks and hunter io module.

Practice Twitter search techniques using advanced operators, hashtags, and account filters to explore topic trends, engagement, and location-based insights with real-world tools.

Maltego enables data mining for osint and forensics, revealing relationships among people, websites, and documents. It covers transforms, transform servers, TDS, and installing the community edition for practical lab use.

Learn to use maltego for website analysis by creating a new project, applying transforms to domain and website entities, attaching files, and adjusting layouts to reveal related sites.

Explore how to document ethical hacking findings by exporting analysis data into formats such as HTML or CSV, and craft customizable reports with target information, social accounts, and customer-focused solutions.

Explore layer two attacks on Cisco switches, including CDP reconnaissance, ARP spoofing, VLAN hopping, STP attacks, and password vulnerabilities; simulate IP reconnaissance and flooding attacks with Yersinia in hands-on lab.

Practice the cam table overflow attack in a lab using the Markov tool, running the pseudo markov command, and observe the mac address table on the switch.

Practice an arp spoofing attack using the arp spoof tool and sniff to position between the ftp server and client, enabling ip forwarding to capture usernames and passwords.

Execute a switch spoofing attack using Yersinia -G, launch from the Fitbit app, send HTTP packets, and observe mode changes to trunking and dynamic auto.

Explore a lab on STP attack techniques using Yersinia to claim root role, become the root bridge, and observe spanning tree status, cost, and forwarding behavior.

Engage in hands-on Cisco password decryption attacks, decrypting password types with keychain and running-config methods, and using Cisco power decrypt to reveal type five passwords with proper escaping.

Examine layer 3 attacks, including DHCP starvation and IP spoofing, and explore routing protocol exploits (RIP, OSPF, HRP) to understand potential man-in-the-middle and DDoS risks.

Learn how log spoofing creates fake syslog entries to mislead forensic investigations, and practice sending spoofed logs from routers using python-based tools in a hands-on lab.

Learn to replicate a log ddos attack using a python script to send many spoofed syslog messages, employing multithreading and loops to simulate packet bursts and test defense capabilities.

Explore dns attacks, including dns spoofing, dns cache poisoning, and dns reflection and amplification, revealing how attackers redirect traffic to fake sites and exploit udp weaknesses in a lab.

Learn firewall penetration testing across five firewall types, from packet filtering to next generation firewalls, and apply traffic analysis, tunneling, and ssl decryption to identify risks.

Explore the Metasploit framework, covering server-side, client-side, and local privilege escalation exploits, its core modules—exploits, payloads, auxiliary, and post—plus tools like MSF console and Armitage.

Explore client-side exploitation and privilege escalation through a hands-on lab using MSF venom in metasploit to create a trojan, upload it, and establish a reverse connection for system access.

Practice post-exploitation sniffing using a sniffer extension to load, start, and dump captures, view stats, and analyze with Wireshark to reveal sensitive information like usernames and passwords.

Practice host-based DNS poisoning by editing the hosts file to map a website to a chosen IP within a lab, and run the lab exploit.