Ethical Hacking Offensive Penetration Testing

Install and configure OpenVAS, a free open source vulnerability scanner, and access its browser-based console to run scans and log in with credentials.

Configure and run an OpenVAS vulnerability assessment scan, create a scan task, define targets and IPs, monitor progress, and generate comprehensive reports with remediation guidance.

Install and run the Veil framework to generate payloads that bypass antivirus, and complete the setup for practical offensive penetration testing.

Exploitation using the beef framework demonstrates testing cross-site scripting and stored payload vulnerabilities in applications, showing how beef hooks and payload delivery can compromise targets.

Explore exploiting a Samba vulnerability with Metasploit, enumerate services with Nmap, test anonymous SMB login, configure a payload in the MSF console, and gain a Meterpreter session.

Explore exploitation with Metasploit by configuring the MSF console, selecting a payload, and triggering an interactive session against an IRCd vulnerability, showcasing practical steps for penetration testing.

Master Metasploit-driven privilege escalation by exploiting a distcc service, including service enumeration, exploit selection, payload delivery, and obtaining a shell on the target.

Install Empire PowerShell on the lab machine, follow the setup steps, and log in to explore exploitation features and post-exploitation workflows.

Explore Empire powershell-exploitation on Windows 10 level 1, setting up a listener, loading payloads, and gaining remote control to study credential access, privilege escalation, and golden ticket techniques.

This lecture demonstrates Empire PowerShell exploitation on Windows 10 level 2, covering payload creation, listener setup, privilege escalation, and post-exploitation credential access for OSCP prep.

Explore Empire PowerShell exploitation on Windows 10, building payloads via macros, establishing a reverse listener, and mastering privilege escalation, credential dumping, hashcat cracking, and golden tickets for OSCP prep.

Explore privilege escalation in Active Directory, from low-privileged shells to domain controller access, including password hashes, golden tickets, and defense strategies.

Explore a Drupal-based target in a hands-on offensive penetration testing scenario, enumerate services, identify a SQL injection vulnerability, gain admin access, and simulate post-exploitation in a vulnerable Drupal application.

Set up a lab environment, perform network scanning with nmap, enumerate ports, decode base64 credentials, and practice privilege escalation to obtain an interactive shell.

Demonstrates exploiting a vulnerable vm: port scanning, service enumeration, password cracking with Hydra, privilege escalation, and capturing flags for OSCP prep.

In this oscp prep lecture, practice exploitation: enumerate services, test anonymous login, analyze a web app, use ballbuster and wordlists to enumerate credentials, and perform privilege escalation to gain shells.

Navigate the sequoia vm to perform network discovery, port and service enumeration, and proxy-assisted exploitation. Gain foothold with default credentials, upload a payload, and extract data for OSCP prep.

Demonstrates an offensive penetration test on a vulnerable VM: scan ports, enumerate services, exploit via payload, gain root access, and enumerate credentials and backups.

Demonstrates a hands-on exploitation workflow on a vulnerable VM, including network scanning, service enumeration, credential discovery, and privilege escalation. Practice payload delivery and local file inclusion to access data.