The Complete Ethical Hacker Certification Exam Prep Course

Explore lab legalities in ethical hacking, detailing downgrade rights to test older Windows versions legally, with emphasis on ethics, licensing, and attorney review.

Configure a complete ethical hacking lab in VMware Workstation by importing XP attacker and vulnerable web app VMs, organizing files, and booting from ISO images.

Define a penetration test as an attacker's probe of a system to find security weaknesses and gain access. Contrast with vulnerability assessments and include white or black box approaches.

Explore the vulnerability lifecycle from discovery to patch, detailing vulnerability management steps—identify, classify, remediate, mitigate—and patch deployment delays driving exploit risk.

Explore botnets and bots, their covert control via remote communication channels like IRC, and how a decentralized command and control model enables large-scale DDoS, harvesting confidential information.

Defense in depth coordinates multiple security countermeasures to protect information assets across policies, physical security, perimeter controls, and host and application protections, minimizing breach impact.

Compare black box, white box, and gray box penetration tests, contrasting uninformed approaches with full-knowledge assessments. Distinguish internal versus external tests and unannounced tests to understand realistic attack simulations.

Compare the hacker and the penetration tester across ethics, scope, authorization, and logging, and note that the os tmm model guides reporting and vulnerability handling.

Blend tool proficiency with strong technique by mastering underlying technology, adapting and improvising beyond automation. Learn to perform manual steps, research exploits, and tailor approaches when tools fall short.

Examine various penetration testing methodologies, including the OS TMM model, NIST guidelines, FFIEC, and ISSAF; emphasize consistency, environment-specific selection, and comparing results over time.

Highlight physical access as a key information-gathering path and show how dumpster diving and employee details fuel social engineering, underscoring physical security as the foundation of network protection.

Compare passive and active reconnaissance by contrasting Google-based online information gathering with direct probing of a target system, noting stealth versus current data and detection risks.

Collect data about a network to reveal vulnerabilities through reconnaissance. Map the network and draft a blueprint to plan intrusion, including alternate paths and staff research.

Explore Google hacks to locate exposed web servers, remote desktops, and PDF files using specific URL patterns like TSA web and parent directory.

An instructor demonstrates how Pastebin and Google surface nefarious data, from credit cards and social security numbers to login credentials and private keys, highlighting ethical hacking risks.

Learn to use CentralOps to perform service scans, traceroutes, and WHOIS lookups, then analyze DNS records and port banners to map a network footprint.

Master Linux user account management and password security, including root versus standard users and password hash concepts, plus configuring network interfaces with ifconfig, IP addresses, and gateways.

Learn to compile programs in Linux, explore shell shock and poodle vulnerabilities, and analyze padding oracle downgrades in SSL/TLS that enable remote exploits.

Explore the evolution of encryption from Caesar cipher to modern algorithms, and how plain text becomes ciphertext with keys. Learn about confidentiality, integrity, non repudiation, and digital signatures in cryptography.

Explain symmetric and public-key encryption, non repudiation, and integrity, compare block and stream ciphers, review DES, triple DES, and AES, and highlight long passphrases and LastPass for security.

Explore spyware concepts, including surveillance and advertising spyware, and examine how corporate tools like Blue Coat intercept and inspect ssl connections with trusted certificates.

Explore data loss prevention (DLP) strategies to detect and block exfiltration of sensitive data, design a seven-phase DLP program, and understand corporate espionage and surveillance risks.

Explore malware countermeasures, including intrusion detection systems, personal firewalls, port monitoring, and file integrity tools like Tripwire and registry checks for rapid threat detection.

Use malware countermeasures like Microsoft’s removal tool with quick, full, and customized scans. Detect rootkits and manipulated files, and learn software restriction policies, patch management, hardware-based detectors, and user education.

Learn why password hashes cannot be reversed, and how precomputation rainbow tables and plaintext guesses reveal passwords by hashing candidate passwords and matching results.

Explore how Windows password cracking uses dictionary, brute-force, and brute-hybrid attacks, including handling password hashes, rainbow tables, and password policy constraints.

Explore offline password cracking, where copied hashes are cracked with John the Ripper and rainbow tables, and see how 12-bit salt value expands the search space for password storage.

Explore how Windows stores credentials in memory for single sign-on, including plain text passwords, and why this vulnerability persists despite encryption, demonstrated with Mimikatz.

Define rootkits as os-level replacements that grant attackers ring zero access. Show how they hide processes, disable security tools, and evade antivirus to sustain undetected backdoor access.

Explore rootkit countermeasures, detection techniques, and safe remediation methods, including hashing, live-boot scanning, and OS reinstallation, plus the fundamentals and pitfalls of tokens and smart cards for multifactor authentication.