Cybersecurity: Password Hacking and Malware security

Start this cybersecurity course with confidence, join the top 20% of students, and rely on Udemy quality checks, playback rate controls, subtitles, and Q&A for support and ratings.

Enable virtualization in BIOS to run VMware and set up Kali Linux or Metasploitable, then verify in Task Manager and create a ready virtual lab.

Install and set up the VMware Workstation Player to boot your virtual lab with Kali Linux, Metasploitable, and Windows 11 VMs. Choose the non-commercial, free version during installation.

Install and configure a Metasploitable 2 vulnerable virtual machine in VMware, set up network adapters, and practice ethical hacking using the Metasploit framework for vulnerability testing.

Learn to install and configure a Windows 11 VM in VMware, including extraction, import, memory setup, and networking for three-VM lab with Windows as victim, Kali as attacker, and Metasploitable.

Verify a three-VM lab in VMware Workstation by booting Kali, Metasploitable, and Windows, recording IPs, and confirming interconnectivity with ping.

Define legal and ethical guidelines for ethical hacking, emphasizing learning tools for lawful use only. Uphold responsibility within legal boundaries to prevent unauthorized access and protect digital security.

Explore ethical hacking basics by learning how hackers crack passwords and identify weaknesses. Dive into steganography and its five types for covert messaging.

Explore popular image steganography tools such as quick Stego, OpenStego, Stego Suite, Image Hide, and Invisible Secrets, and prepare for hands-on practice with data hiding and watermarking in images.

Learn practical image steganography using Quick Stego to hide a text message inside a car image. Save the modified image and retrieve the hidden message on a Windows virtual machine.

Use Open Stego to hide and extract data in images, creating a stego bmp from a cover file and a message file, with optional password protection.

Explore practical image steganography using an online tool to encode and decode hidden messages within images, including selecting files, saving the stego image, and extracting the hidden data.

Explore mobile steganography by discovering smartphone tools you can search for in the app store or Google Play, and learn to share secret messages with friends.

Explore audio steganography with the stego naught tool to embed a secret message in an mp3 or wav file, optionally password-protected, then extract it on the receiver's end.

Understand how hardware and software key loggers record keystrokes and passwords, log data, and transmit it to a hacker, stressing the need for user permission.

Defend against keyloggers by deploying antivirus and anti-keylogger tools, using strong unique passwords, enabling two-factor authentication, keeping software updated, and using a virtual keyboard.

Explore software keyloggers, their stealth operation, and how keystroke logs are collected and emailed to attackers, with ethical reminders and cross-platform examples for desktop and android.

Explore spyware as malicious software that secretly spies on activity, records keystrokes, hides its processes, and transmits sensitive data like email addresses, logins, passwords, and payment details to remote attackers.

Explore installing the Spy Agent spyware on a Windows virtual machine, configuring stealth monitoring, keystroke logging, screenshots, and logs to understand malware behavior and cybersecurity defense implications.

Detect and defend against spyware by securing devices, guarding physical access, using antivirus tools, and avoiding untrusted attachments. Keep software and OS updated, enable a firewall, and use multi-factor authentication.

Explore four password cracking techniques, including non-electronic social engineering, active online attacks (brute force, dictionary attack, man-in-the-middle), passive online eavesdropping, and offline attacks on hashed passwords.

Explore password cracking attacks, including dictionary attacks using word lists, brute force attempts of all character permutations, and rule based attacks exploiting predictable formats.

Understand how hashes are fixed-length strings generated from input data and why hashing is one-way, and examine the Sam table that stores hashed passwords for Windows login.

Demonstrates how attackers perform dictionary attacks using rockyou.txt, a massive wordlist of common words and leaked passwords, including download steps and its 9.9 billion entries as of 2024.

Access rockyou.txt in Kali Linux, decompress rockyou.txt.gz, copy it to the Kali home, and review its wordlist containing common passwords using wc and nano for viewing.

Use the cewl tool to crawl a website to build a word list, setting depth to 2 and minimum word length to 6, and save to cert dict dot txt.

Evaluate password strength by comparing weak, medium, and strong passwords and how length and character complexity influence cracking times, with a minimum eight-character rule and mixed case, numbers, and symbols.

Learn to crack a hash using John the Ripper and a rockyou.txt wordlist, performing a dictionary attack on MD5 and other hashes in an ethical hacking context.

Explore ethical password cracking of password-protected excel, pdf, and word files using an online tool. Learn how weak passwords are recovered; the video references dictionary attacks and John the Ripper.

Learn how rainbow tables precompute billions of password hashes to map plaintext passwords to their hashes, enabling faster cracking of Windows passwords.

Learn how ethical hackers extract NTLM hashes from the SAM database, then crack Windows passwords with rainbow tables and the OPP crack tool in a hands-on VM exercise.

Explore advanced Windows password cracking techniques in a controlled lab, using rainbow tables and ophcrack to crack NTLM passwords and assess password security.

Explore how password hashes can be extracted from a Windows system and cracked using rainbow tables with Ophcrack, illustrating practical security risks and defense considerations.

Explore how the metasploit framework enables ethical hackers to create payloads and gain remote access using inbuilt Kali Linux exploits and ready-made pentesting tools.

Learn how to craft a Windows payload with the Metasploit framework, enabling a reverse Meterpreter session from a Kali Linux attacker to a Windows victim.

Demonstrates creating and deploying a payload to exploit a Windows victim, establishing a reverse tcp meterpreter session, and using a Kali host to control and query the victim's system.

Explore malware, a form of malicious software that spreads across networks, infects devices, and steals data, and examine why attackers create and distribute it.

Explore the types of malware beyond viruses, including worms, backdoors, logic bombs, ransomware, spyware, gray vein rootkits, spam, bloatware, trojans, and fileless malware.

Explore the virus as the common form of malware and how it spreads by user action, detailing boot sector, macro, program, multipartite, encrypted, polymorphic, metamorphic, stealth, armor, and hoax types.

Understand boot sector viruses that infect the first hard drive sector and load before the OS, making detection difficult; remove them by booting from a clean CD or USB.

Understand how the program virus operates as the simplest and most common virus type. It infects executables and application files, spreading when run and attaching to Word or Excel.

Understand the multipartite virus, a fast-spreading malware that attacks via boot sector and files, spreading through multiple channels and causing reinfection if any part remains undetected.

Explore stealth viruses that hide from antivirus by shifting form: encrypted, polymorphic, and metamorphic types, and how changing code or rewriting themselves evades signature-based detection.

Explore hoax viruses, which trick users via pop-ups or websites into installing a fake antivirus, leading them to infect their own machines by double-clicking malicious files under tech support guidance.

Learn how worm viruses self-replicate and spread across networks without user interaction, exploiting security holes and missing patches to infect millions and cause system slowdowns and crashes.

Explore how backdoor malware enables hackers to bypass security with remote access trojans for persistent system access, often delivered via social engineering.

Explore logic bomb malware, where malicious code runs only under specific conditions. See examples like birthday triggers and post-employment triggers that disrupt systems or delete data.

Explore how ransomware malware encrypts data and demands cryptocurrency ransom, exposing hospitals, government, and business data to extortion with uncertain recovery.

Learn how spyware, a type of malware, spies on users by collecting data and keystrokes, often without permission.

Learn how rootkits grant admin or root privileges to malware, enabling kernel mode control, install or delete programs, open or shut down ports, and stealth that evades antivirus detection.

Explore spam and spam over instant messaging (spim), the abuse of electronic messaging systems across email, text, and social platforms, and the potential malware risk.

Explore Trojan horse malware, a payload and backdoor combined, disguised as legitimate software to trick users into installation, stealing data, creating backdoors, installing more malware, and disrupting performance.

Explore popular Trojan malware kits used to create Trojans, including construction kits and malware creation tools, while emphasizing legal and ethical research use.

Explore the capabilities of remote access trojans and survey popular rat kits, including http rat, black hole rat, NJ rat, Opticspro, ro rat, thief, and sucker.

Explore how fileless malware operates without files, executing via scripts or shellcode to evade signature-based detection. It installs in a temporary directory, runs, and deletes itself, leaving no trace.

Explore how batch file viruses are created using notepad, and review tools like GPX virus maker, the virus maker, deadly virus maker del V, and Sonic bat virus maker.

Learn to create a simple batch virus using notepad, including echo off and shutdown -s commands, saved as shut.bat on a Windows virtual machine for safe study.

Explore how a shutdown virus can be added to startup in Windows, demonstrating persistence with a batch file, while emphasizing ethical guidelines and demo-only use.

Demonstrate how a fork bomb virus creates self-replicating processes through infinite loop, exhausting memory and crashing a computer as iterations grow from two raised to two, four, eight, and beyond.

Explore ethical hacking concepts by demonstrating an infinite folders batch virus on a Windows desktop, showing how to create and stop it, and recover files from the recycle bin.

This lecture demonstrates how the GPS virus maker tool creates viruses and worms, including disguising as a PDF and disabling defenses to compromise a victim.

Explore ethical hacking concepts by examining how to download and run a virus maker in a safe virtual machine, generate a sample batch file, and convert it to an executable.

Identify malware by symptoms like slow systems, frequent crashes and bsods, inaccessible files, strange errors, unusual desktop icons, double extensions, and antivirus failures, with recovery steps discussed later.

Learn how antivirus detects malware through scanning, integrity checks, and an intercept monitor, including signature pattern searches, version comparisons, and system-request monitoring.

Scan for malware, quarantine or delete infections, back up non-executable data, and isolate the PC while booting from an uninfected OS to remove rootkits, then maintain updates and automatic scans.

Explore practical malware detection with tools like Quick Heal Total Security, Windows Defender, and Spybot Search and Destroy, performing full-device and memory scans, quarantine options, and external drive protection.

Celebrate completing this cybersecurity course and joining the top 5% of students as you reach the final milestone and prepare to receive your certificate of completion.