
Master penetration testing by applying real-world attack techniques, focusing on realistic attack vectors and multiple vulnerability paths. Communicate risks to executives with clear, actionable recommendations to improve business resilience.
Craft a client-facing penetration test report with an executive summary, risk ranking, and a strategic roadmap to mitigate vulnerabilities and guide actionable recommendations.
Explore Windows-based tools for ethical hacking, including nmap, Wireshark, and PuTTY, and learn to build test labs with virtual machines using VirtualBox, VMware, and Hyper-V.
Use passive information gathering with the Google hacking database and Shodan to identify open ports, banners, ssl certificates, and metadata, plus Street View and public records for intel.
CeWL spiders a client website to collect words for building password dictionaries, revealing email addresses and metadata while warning about the traffic generated.
Learn to set up and use OpenVAS on Kali Linux to scan networks and websites for vulnerabilities, view and interpret scan reports, and apply defender-focused remediation guidance.
Enumerate smb shares and environments using samba and snb techniques across ports 135, 139, and 445. Explore user and share information with nbt scan, net share, smb client, and scripts.
Explains configuring a metasploit exploit with a java interpreter payload and a reverse tcp connection. Demonstrates managing sessions, interacting with the target, and retrieving system info and password hashes.
Explore how Burp Suite's web proxy intercepts and manipulates web form inputs to test security, inspect requests, and map sites with spider, scanner, intruder, and other tools.
examine how penetration testers test against antivirus, compare payload encoders, and analyze VirusTotal results to understand what detections look like and how to bypass them.
Differentiate between shells and reverse shells and explore two-way communication between victim and attacking machine using netcat to open a shell and pass commands.
Demonstrate a buffer overflow attack by sending junk bytes past a canary, crafting a nop sled, and hijacking execution with a calculated jump to injected code using debuggable Python script.
Explore Windows post exploitation techniques using command line and wmic to enumerate users, network interfaces, partitions, services, hotfixes, and potential pivot paths across subnets.
Explore Windows command-line techniques to enumerate network configurations, dump dhcp and system information, manipulate dns settings, and assess firewall and task statuses in ethical hacking contexts.
Mimikatz demonstrates extracting credentials and hashes from memory, listing SAM and credential stores, using pass-the-hash to obtain shells, and elevating privileges to access sensitive data.
Learn to maintain access on a target by persisting with new administrator accounts, scheduled tasks, and registry or cron entries across Windows and Linux.
This course aims to teach student's how to become an ethical hacker/penetration tester from a networking perspective from scratch, therefore prior knowledge of the fundamentals of networking and basic Linux commands would be beneficial but not essential. The course covers the entire process of network based ethical hacking from a professional penetration testers point of view.
The introductory areas cover the ethics and jurisdictional points surrounding penetration testing a client network. The next sections include integral passive and active information gathering functions when conducting a client engagement.
The course then looks into the various exploitation techniques a hacker would use and accompanies detailed demonstrations of how to find and exploit such issues. Once exploited, the course then looks at post exploitation methods. This includes ways in which an attacker can further exploit the client to gain access to other areas of the network as well as maintain access once exploited.
Finally the course focuses on additional techniques an ethical hacker would take once they have already gained control of a client network and therefore use perspectives such as networking tools similar to Wireshark or TCPDump. In addition other entry points would include hardware tools that can be used for exploitation such as WiFi related hacking, which is only covered from a theoretical point of view within this course.
This course is perfect for anyone who is looking for a primer for more expensive ethical hacking certifications such as OSCP, CEH, and the technical element of CISSP.