Network Hacking Continued - Intermediate to Advanced
4.7 (1,790 ratings)
Course Ratings are calculated from individual students’ ratings and a variety of other signals, like age of rating and reliability, to ensure that they reflect course quality fairly and accurately.
28,323 students enrolled

Network Hacking Continued - Intermediate to Advanced

Learn advanced techniques to hack into WiFi & wired networks & write own python scripts to implement custom MITM attacks
4.6 (1,797 ratings)
Course Ratings are calculated from individual students’ ratings and a variety of other signals, like age of rating and reliability, to ensure that they reflect course quality fairly and accurately.
28,360 students enrolled
Last updated 6/2020
English
English [Auto], Indonesian [Auto], 4 more
  • Italian [Auto]
  • Polish [Auto]
  • Romanian [Auto]
  • Thai [Auto]
Current price: $132.99 Original price: $189.99 Discount: 30% off
5 hours left at this price!
30-Day Money-Back Guarantee
This course includes
  • 10 hours on-demand video
  • 1 article
  • 20 downloadable resources
  • Full lifetime access
  • Access on mobile and TV
  • Certificate of Completion
Training 5 or more people?

Get your team access to 4,000+ top Udemy courses anytime, anywhere.

Try Udemy for Business
What you'll learn
  • 80+ detailed videos on ADVANCED network hacking
  • 2 methods to hack WPA2 enterprise networks
  • 3 methods to hack captive portals (hotels & airport networks)
  • Steal WPA/WPA2 password using evil twin attack.
  • Crack WPA/WPA2 faster using GPU.
  • Write custom scripts to implement your attack ideas.
  • Bypass router-side security & run ARP spoofing attack without raising alarms.
  • Unlock WPS on some routers even if its locked
  • Disconnect multiple or all clients from their networks without knowing the key
  • Bypass MAC filtering (both black & white lists).
  • Discover & connect to hidden networks
  • Crack more secure WEP implementation when SKA is used.
  • Exploit WPS on more secure routers to get the WPA/WPA2 key.
  • Understand how WPA/WPA2 enterprise work.
  • Understand how a fake access points work
  • Manually create fake access points
  • Generate SSL certificates & use it to support HTTPS on apache2.
  • Create a fake captive portal that acts exactly like a normal captive portal.
  • Use huge wordlists to crack WPA/WPA2 without taking up disk space.
  • Save WPA / WPA2 cracking progress.
  • Bypass HTTPS & capture data manually.
  • Analyse data flows and build own attacks.
  • Run attacks against HTTPS websites.
  • Inject Javascript / HTML code in HTTPS pages.
  • Create trojans - combine any file (image/pdf) with an evil file.
  • Replace files downloaded on the network with trojans.
  • Write script to replace downloads with trojans on the fly.
Requirements
  • Computer with a minimum of 4GB ram/memory
  • Operating System: Windows / OS X / Linux
  • Finished the networks section of my general ethical hacking course OR
  • Finished my network hacking course.
  • For the wifi cracking ONLY - Wireless adapter that supports monitor mode (more info provided in the course).
Description

Welcome to this advanced network hacking course, this course is designed to build up on what you already know about network hacking, therefore I recommend finishing the network hacking section of my general ethical hacking course or finishing my network hacking course before starting this one.

Just like all of my other courses, this course is highly practical, but it will not neglect the theory, since this is an advanced course we will be breaking each attack into its smaller components and understand how each of these components work, therefore by the end of the course you will be able to mix these attacks and adopt them to suit different situations and different scenarios, you will also be able to write your own man in the middle scripts to implement your own attacks.

Because this course builds on what you learn in the courses mentioned above, the main sections here have similar titles to the main sections in these courses, but the topics covered here are more advanced.


This course is divided into three main sections:

  1. Pre-Connection Attacks - in this section you will learn how to extend the pre-connection attacks you already know, for example you will learn how to run these attacks against networks and clients that use 5Ghz and extend the deauthentication attack to target multiple clients and multiple networks at the same time.

  2. Gaining Access - In this section you will learn a number of advanced techniques to gain access to various network configurations and various network encryptions. First you will learn how to overcome some security features that would prevent you from even trying any attacks, you will learn how to discover and target hidden networks and bypass mac filtering whether it is implemented using a black-list or a white-list. As you go through all of the lectures in this section, you will learn how to manually configure and create a fake access point, you will understand exactly how it works and the services it relies on, therefore by the end of this section you will be able to create custom fake access points to suit your needs, so you will be able to create fake captive portals, steal WPA/WPA2 passwords or use it to spy on clients that connect to it. This section is divided into a number of subsections each covering a specific topic:

    1. Captive Portals - captive portals are open networks that require users to login after connecting to it, they are usually used in hotels and airports. In this subsection you will learn three methods to hack captive portals.

    2. WEP Cracking - Even though this is an old and weak encryption, this is still used in some networks and you can not call yourself a hacker if you can not crack it, by now you should know how to rack WEP if OPEN authentication is used, in this section you will learn how to gain access to WEP networks that use Shared Key Authentication (SKA) as all of the methods that you learned so far will NOT work against SKA.

    3. WPA & WPA2 cracking - In this section you will learn more advanced techniques to gain access to WPA & WPA2 networks, this section is divided into even smaller subsections:

      1. Exploiting WPS - in this subsection you will learn how to debug reaver's output and exploit the WPS feature on more routers using reaver's advanced options, you will also learn how to unlock some routers if they lock after a number of failed attempts.

      2. Advanced Wordlist Attacks - in this subsection you will learn how to run more advanced wordlist attacks, this will increase your chances of cracking the key; you will learn how to use huge wordlists without wasting storage, save the cracking progress so that you can pause and resume and crack the key much faster using the GPU instead of the CPU.

      3. Evil Twin Attack - Finally if none of the above methods work, the last resort is to use social engineering to get the key, in this subsection you will learn how to get the password for a target WPA/WPA2 network using social engineering, without guessing and without using a wordlist.

    4. WPA & WPA2 Enterprise - These networks are usually used in companies and colleges, these are secure networks that use WPA or WPA2 but also require users to login with a username and password after connecting, in this subsection you will understand how they work and how to hack them.

  3. Post-Connection Attacks - In this section you will learn a number of advanced attacks that you can run after connecting to a network, all of the attacks in this subsection work against WiFi and ethernet networks, you will learn how to manually bypass HTTPS and capture sensitive data, you will be able to use this method regardless of how you became the man in the middle so you will be able to use it with any scenario or situation when interesting data is flowing through your computer, you will also learn how to inject javascript/HTML in HTTPS websitesbypass router-side security and run ARP poisoning attacks without raising any alarms. You will also learn how to manually analyse data flows and build your own MITM attack ideas, not only that but I will also teach you how to write your own scripts to execute your own MITM attacks. By the end of this section you will learn the right methodology of building your own attack, you'll learn how to analyse network flows, run a simple test, translate that into a working script that implements your attack, and finally test that script against a remote computer.

Finally at the end of the course you will learn how to protect yourself and your systems from these attacks.

All the attacks in this course are practical attacks that work against real computers, in each technique you will understand the theory behind it and how it works, then you'll learn how to use that technique in a real life scenario, so by the end of the course you'll be able to modify these techniques or combine them to come up with more powerful attacks and adopt them to different scenarios and different operating systems.

With this course you'll get 24/7 support, so if you have any questions you can post them in the Q&A section and we'll respond to you within 15 hours.


Notes:

  • This course is created for educational purposes only and all the attacks are launched in my own lab or against devices that I have permission to test.

  • This course is totally a product of Zaid Sabih & zSecurity, no other organization is associated with it or a certification exam. Although, you will receive a Course Completion Certification from Udemy, apart from that NO OTHER ORGANIZATION IS INVOLVED.

Who this course is for:
  • People who want to take their network hacking skills to the next level.
  • People who want to have a better understanding of the subject and enhance their skills.
  • People who want to be able to run attacks manually & write their own MITM scripts.
Course content
Expand all 83 lectures 10:00:49
+ Introduction
2 lectures 12:05

This is a teaser lecture, the goal here is to show you what you'll be able to do by the end of the course.

You'll see one of the scripts that you'll learn how to build in action, this script will replace any file downloaded by a target with a trojan that will open the file the target request and run evil code in the background allowing us to gain access to the target computer and fully control it.

As this is a teaser lecture, it won't cover how this is done, you'll learn how to do this as you go through the course, right now just sit back, enjoy the lecture, and you'll learn how to do this by the end of the course.

Preview 06:41

This lecture will introduce you to the main topics covered in the course.

Course Overview
05:24
+ Back To Basics/Pre-Connection Attacks
6 lectures 32:49

This lecture will give you an overview of what you'll learn in this section.

Pre-connection Attacks Overview
01:54

This lecture teaches how to manually change the mac address of any network interface, this can be useful to bypass security measurements, hide your identity and more.

Spoofing Mac Address Manually
03:24

In this lecture you will learn how to use airodump-ng to sniff data from networks and clients that use run on 5GHz.

Targeting 5 GHz Networks
06:43

This lecture will teach you how to disconnect any device from any WiFi network even if the network uses encryption like WPA or WPA2.

Deauthenticating a Client From Protected WiFi Networks
06:54

In this lecture you will learn how to disconnect a number of devices simultaneously from their network even if their network uses a password.

Deauthenticating Multiple Clients From Protected WiFi Networks
07:50

In this lecture you will learn how to run a deauthentication attack and disconnect all clients in a network, without connecting to the network and even if the network uses encryptions such as WPA/WPA2.

Deauthenticating All Clients From Protected WiFi Network
06:04
+ Gaining Access
6 lectures 37:20

This lecture will give you an overview of what you'll learn in this section.

Gaining Access Overview
02:29

This lecture will teach you how to discover hidden networks around you and find their name/ESSID.

Discovering Hidden Networks
08:11

This lecture shows you how to connect to hidden network once you figure out the name.

Connecting To Hidden Networks
05:14

This lecture will teach you what MAC filtering is, how it works, and how to bypass it whether it is implemented using a black list or using a white list.

Bypassing Mac Filtering (Blacklists & Whitelists)
09:04

The traditional methods of cracking will NOT work if the target network uses SKA authentication .

This lecture will teach you how to crack WEP networks that use SKA.

Cracking SKA WEP Networks
09:05

This lecture will teach you how to prevent the above attacks and protect networks from them.

Securing Systems From The Above Attacks
03:17
+ Gaining Access - Captive Portals
13 lectures 01:43:50

This lecture will teach you how to use monitor mode to steal login info entered by users to bypass captive portals.

Preview 09:59

This lecture will cover another method to bypass captive portals, in this method you will learn how to steal the login info by ARP-spoofing clients in the network.

Sniffing Captive Portal Login Information Using ARP Spoofing
08:55

In this lecture and the next few lectures you will learn how to manually create a fake access point, and configure it to work as a captive portal, so we can steal login info entered by users that connect to it.

Creating a Fake Captive Portal - Introduction
04:18

This lecture will teach you how to clone any web page from the internet, as an example we will be cloning a login page used by my target captive portal.


Creating Login Page - Cloning a Login Page
07:17

This lecture will teach you how to fix the resources used by the cloned web page so that it looks and works like the real one.

Creating Login Page - Fixing Relative Links
06:53

In this lecture we will be modifying the source code used in the cloned page to make sure that it contains a form tag, this will make sure that the info will get posted using HTTP POST which makes it easy for it to sniff this info.

Creating Login Page - Adding Form Tag
07:44

In this lecture we will finish working on the cloned page by adding a submit button to the form to make sure that the data will get submitted via HTTP POST when the user enter their details.

Creating Login Page - Adding Submit Button
06:44

This lecture will teach you how to prepare your computer to launch a fake access point.

Preparing Computer To Run Fake Captive Portal
07:57

In this lecture you will learn how to configure and start all the components needed to launch a fake access point, this includes a DHCP server, a DNS server, and host apd.

Starting The Fake Captive Portal
11:57

This lecture will teach you how to setup redirect rules to redirect all users to the cloned login page as soon as they connect to the fake captive portal.

Redirecting Requests To Captive Portal Login Page
12:19

In this lecture you will learn how to generate an SSL certificate, the generated certificate can be used in any scenario or with any application that might require a SSL certificate.

Generating Fake SSL Certificate
05:54

In this lecture we will use the SSL certificate we generated in the previous lecture to add HTTPS/SSL support to your web server, as a bonus this will allow us to support HTTPS/SSL on our fake access point.

Enabling SSL/HTTPS On Webserver
07:50

Finally in this lecture you will learn how to sniff & analyse data from the fake access point we created, the same method can be used to sniff data from any open network even if it was not a fake access point.

Sniffing & Analysing Login Credentials
06:03
+ Gaining Access - WPA & WPA2 Cracking - Exploiting WPS
5 lectures 32:33

This lecture will introduce you to the main objectives of this subsection.

Preview 01:34

This lecture will teach you how to bypass the "Failed to associate" warning that you might get when using reaver.

Bypassing "Failed to associate" Issue
07:39

In this lecture you will learn how to debug reaver's output, as an example you will learn how to bypass the 0x3 and 0x2 error messages thrown by some routers.

Bypassing 0x3 and 0x4 Errors
07:39

In this lecture we will have a look on WPS lock, what is it and discuss some ideas on how to bypass it.

WPS Lock - What Is It & How To Bypass It
07:01

In this lecture you will learn how to force some routers to automatically unlock their WPS.

Unlocking WPS
08:40
+ Gaining Access - WPA & WPA2 Cracking - Advanced Wordlist Attack
6 lectures 46:59

This lecture will give you an overview of what you'll learn in this section.

Preview 01:39

In this lecture you will learn how to save your cracking progress with aircrack-ng, this will allow you to pause the cracking process, and start from where you left the next time instead of the default behaviour where you would start from 0.

Saving Cracking Progress
09:44

In this lecture you will learn how to pipe crunch's output to aircrack-ng on the fly, this allows you to use huge wordlists to crack WPA and WPA2 without taking up disk space.

Using Huge Wordlists Without Wasting Storage
07:35

In this lecture we will combine the 2 methods we learned in the previous lectures, this will allow us to:

1. Use huge wordlists to crack WPA and WPA2 without taking up disk space.

2. Store the cracking progress so we can pause and resume anytime we want.

Saving Cracking Progress When Using Huge Wordlists Without Wasting Storage
10:04

In this lecture you will learn how to crack WPA/WPA2 much faster using the GPU instead of the CPU.

This is part 1 where you will learn how to install the needed software and prepare the handshake.

Cracking WPA/WPA2 Much Faster Using GPU - Part 1
07:19

In this lecture you will learn how to crack WPA/WPA2 much faster using the GPU instead of the CPU.

This is part 2 - here you will learn how to start the cracking process and get the password.

Cracking WPA/WPA2 Much Faster Using GPU - Part 2
10:38
+ Gaining Access - WPA & WPA2 Cracking - Evil Twin Attack
4 lectures 36:29

In an evil attack we create a network that is identical to the target network, disconnect clients from their original network and steal the password when they connect to the identical fake network (the evil twin).

In this lecture we will discuss the idea of an evil twin attack, and how it can be used to get the WPA/WPA2 key.

Preview 07:21

You will learn how to install a tool called Fluxion in this lecture, since we already covered all the steps to generate a fake access point manually, in this lecture and the next one you will learn how to use Fluxion to automatically run an evil twin attack.

Installing Needed Software
07:39

In this lecture you will learn how to use Fluxion to run an evil twin attack automatically and steal the WPA/WPA2.

Stealing WPA & WPA2 Key Using Evil Twin Attack Without Guessing
09:38

In this lecture you will learn the right way to debug and fix issues that you might face with automation tools like Fluxion, as an example you will learn how to fix a common issue with the login interface displayed to users.

Debugging & Fixing Login Interface Issues
11:51
+ Gaining Access - WPA & WPA2 Cracking - WPA/WPA2 Enterprise
5 lectures 31:59

In this lecture we will have a look on a WPA Enterprise, what is it and how it works.

WPA enterprise is another form of authentication, all of the methods you learned so far only work against networks that use PSK authentication, in this lecture and next few lectures you will learn how to get the WPA/WPA2 key if the target network uses WPA Enterprise.

Preview 05:24

In this lecture we will discuss 2 methods to get the key for WPA Enterprise networks.

2 Methods To Hack WPA & WPA2 Enterprise
06:47

In this lecture you will learn how to steal login credentials used to login to WPA & WPA2 Enterprise networks.

Stealing Login Credentials
08:11

Finally in this lecture you will learn how to crack the hash that you stole in the previous lecture.

Cracking Login Credentials
06:38

This lecture will teach you how to secure systems from all of the gaining access attacks shown in this course.

Securing Systems From The Above Attacks
04:59
+ Post Connection Attacks
7 lectures 55:46

This lecture will give you an overview of what you'll learn in this section.

Preview 04:22

This lecture will give you a basic overview on Ettercap, what it is and how to interact with its interactive command prompt.


Ettercap - Basic Overview
07:09

In this lecture you will learn how to use Ettercap to become the man in the middle using an arp spoofing attack, you will also learn how to sniff sensitive data such as passwords from poisoned computers.

Ettercap - ARP Spoofing & Sniffing Sensitive Data Such As Usernames & Passwords
09:51

This lecture will teach you how to use SSLstrip manually to bypass HTTPS, this manual method is very useful because it can be used to bypass HTTPS whenever you are the man in the middle, regardless of how you became the man in the middle.

Setting Up SSLstrip Manually To Bypass HTTPS & Sniff Data From HTTPS Websites
12:44

In this lecture you will learn how to use Ettercap plugins.

Ettercap has a number of useful plugins that allow us to do various things, as an example, in this lecture you will learn how to use a plugin to automatically poison clients that connect to the network.

Automatically ARP Poisoning New Clients
06:53

In this lecture you will learn how to use a more complex Ettercap plugin, this plugin will allow you to run a DNS spoofing attack allowing you to redirect DNS requests to any IP you want.

DNS Spoofing Using Ettercap
05:30

In this lecture you will learn how to bypass router-side security by only poisoning and sniffing data in one way using Ettercap.

Bypassing Router-Side Security & Poisoning Target Without Triggering Alarms
09:17
+ Post Connection Attacks - Analysing Data Flows & Running Custom Attacks
10 lectures 01:07:41

This course will introduce you to MITMproxy and teach you how to install it on Kali Linux.

Introduction to MITMproxy
03:47

This lecture will teach you MITMproxy basics, its modes, how to start it in explicit mode and how to configure the browser to use it.

Using MITMproxy In Explicit Mode
07:12

In this lecture you will learn how to filter and highlight flows in MITMproxy using regex.

Analysing (Filtering & Highlighting) Flows
05:13

This lecture will teach you how to intercept data flows in MITMproxy based on regex expressions.

Intercepting Network Flows
04:51

In this lecture you will learn how to manually edit the response body in flows, as an example you will learn how to inject javascript code and get it to be executed on the target browser.

Modifying Responses & Injecting Javascript Manually
08:45

In this lecture you will learn how to use MITMproxy in its transparent mode when you're the MITM, as an example you will learn how to use MITMproxy with an ARP spoofing attack.

Intercepting & Modifying Responses In Transparent Mode
07:31

In this lecture you will learn how to use everything you learned so far in a real life scenario, you will learn how to inject javascript code in the response sent to a remote computer connected to the same network, instead of injecting a simple javascript we will inject BeEF's hook code to hook the remote computer to BeEF.

Editing Responses & Injecting BeEF's Code On The Fly
09:16

This lecture will teach you how to use another tool that comes with MITMproxy, you will learn how to use MITMdump to replace flows based on regex rules automatically.

Editing Responses Automatically Based On Regex
09:13

This is a bonus lecture taken from my ethical hacking course, this lecture shows BeEF's basics and how to use it to steal credentials from a remote computer using a fake login prompt.

[Bonus] - Stealing Login Info Using Fake Login Prompt
07:12

This is a bonus lecture taken from social engineering course, it shows how to use BeEF to show the target a fake update message and hack their system after they install the update.

[Bonus] - Hacking Windows 10 Using A Fake Update
04:41