Ultimate Ethical Hacking and Penetration Testing (UEH)

Explore hacker types: the white hat who defends by finding vulnerabilities, the black hat who exploits them to damage organizations, and the gray hat who shifts roles by situation.

Identify how misconfigurations and poor coding create vulnerabilities, and how hackers craft exploits to abuse them. Learn how payloads enable attackers to gain access, illustrated with a bank robbery analogy.

Execute authorized red team attacks to test systems while blue teams defend by patching vulnerabilities and deploying security measures like intrusion detection systems.

Learn how misconfigurations in services and binaries enable privilege escalation from a normal user to an administrator by exploiting permissions and group access.

denial of service overwhelms a web server by sending a huge number of packets from many computers, causing slowdowns or crashes and making the site unavailable to users.

Explain how improper input handling leads to buffer overflow, overwriting memory in stack and other regions, enabling attackers to control the instruction pointer and run their code.

Malware by behavior includes viruses infecting a single computer, worms spreading across networks to form botnets, and ransomware encrypts files and demands payment with no guaranteed decryption.

Explore essential linux basics through hands-on terminal navigation, file operations, and command-line tools, including cd, pwd, ls, cat, less, pipe, redirection, and simple file management tasks.

Explore Linux command line basics by mastering standard input, output, and error streams, redirection, and piping with cat, less, head, tail, cut, sort, uniq, wc, and grep.

Learn how linux file permissions assign read, write, and execute rights to user, group, and others; use chmod values like 7-6-4 to set defaults for new files and folders.

Explore special permissions in Linux, including setuid, setgid, and sticky bits, and how they let executables run with another user or group, with privilege escalation risks.

Navigate the Linux file structure, from essential binaries and libraries to device drivers and user home directories. Understand how snap packages, boot files, and configuration files organize the system.

Learn to manage Linux users by adding users and groups, setting passwords, switching users with su, using sudo, and removing users to maintain system integrity.

Explain the /etc/passwd syntax and the meaning of each field, including usernames, group, home, and shell, with passwords stored encrypted in /etc/shadow.

Explore the shadow file concepts by examining root and service accounts, password hashes, and Unix epoch timing. Learn how password aging, expiration, and notifications govern login, and why passwords matter.

Explore how environment variables shape command execution by defining and exporting values like PATH and IP, and how the shell searches directories to run binaries.

Learn to manage software on a Linux distribution by updating repositories, upgrading packages, resolving dependencies, and installing or removing apps using apt, dpkg, and deb packages.

Schedule tasks with cron jobs by minute, hour, day of month, month, and day of week. Create and edit cron entries for precise times, including every minute.

Learn Linux service management by using the service command to start, stop, and check status, and enable or disable services at startup on your computer.

Apply zipping and unzipping to compress and decompress files, and create tarballs with tar commands. Explore tarball contents, extract archives, and compare compression techniques for practical data packaging.

Explore decimal, binary, and hexadecimal number systems, learn how to count with digits 0-9 and A-F, and understand base conversions and representations.

Learn to convert a decimal number to binary using repeated division by 2, tracking quotients and remainders. Append the remainders and reverse them to form the binary representation.

Learn to convert binary to decimal by aligning bits from right to left, multiplying each bit by powers of two, and summing the results to obtain the decimal value.

Learn the exact hex to binary conversion, converting each byte into four-bit groups and translating hex digits like 13 to binary to produce the final binary format.

Group binary digits into four-bit nibbles from right to left. Convert each nibble to decimal and hex, then append the results to form the final hex value, such as 7b.

Convert decimals to hexadecimal by dividing by 16, recording remainders, and reversing them; for example, 54 decimal becomes 37 in hexadecimal.

Explore how to convert hexadecimal to decimal by multiplying hex digits by the powers of 16, with examples that yield 32, 44, and 300.

Explore bitwise operations by applying and, or, xor, and not to binary representations, using examples like 11 and 9, illustrating truth tables and practical register syntax for manipulation.

Explore what a computer network is—a group of devices that follow communication protocols to share resources and transfer data, using Ethernet or Wi-Fi.

Learn how an IP address serves as a unique identifier for devices on a network, differentiate IPv4 and IPv6, and explore classes, private ranges, and octet conversions.

Explain what a Mac address is, its 48-bit hardware identifier, and how the first 24 bits identify the manufacturer; demonstrate viewing it with ipconfig /all on Windows.

Explore network devices like hubs, switches, routers, bridges, and repeaters, and learn how they manage data, MAC and IP addressing, and routing to enable secure penetration testing.

Examine bus, ring, and star network topologies, detailing how data travels, cost, and key failure risks. Compare single-cable buses, ring routing, and centralized star switches with backup links and contention.

Identify and contrast personal data networks, local radio networks, metropolitan area networks, and wide area networks, explaining how each spans varying distances from a single person to a global scale.

Explore the OSI (open systems interconnection) and TCP/IP models, their seven-layer architecture, encapsulation, and how headers, switches, routers, and protocols like TCP/UDP drive data from source to destination.

Explore how a source initiates a TCP connection with a three-way handshake using synchronize flags, and how acknowledgments confirm readiness before data transfer, followed by orderly termination with finish signals.

Explore TCP and UDP basics, comparing connection-oriented TCP handshakes and termination with UDP’s connectionless delivery, checksum-based integrity, and the reliability–speed trade-offs in streaming and gaming.

Understand how ports access specific services on a computer using 16-bit port numbers and well-known ports such as ftp and dns to identify available network services.

Explore how arp maps ip addresses to mac addresses on a local network, using broadcasts. Learn how arp spoofing alters this dynamic mapping.

Discover how dns maps domain names to ip addresses via root and top-level servers, caches, and records (a, cname, mx), plus zone transfers and security risks.

Discover snmp, a protocol that lets management software gather cpu and status data from many devices via agents, using port 161/162, community strings, and the mib tree.

Learn how the dynamic host configuration protocol automates IP address assignment with discovery, offer, request, and ack, including server roles, subnet masks, and gateways.

This lecture explains ftp, the file transfer protocol used to share files between computers, how to set up an ftp server, and why disabling anonymous access is essential for security.

Explain the hypertext transfer protocol, or http, used to fetch web resources through a request‑response model, including the handshake on a port and plaintext versus secure data transfer.

Explain how Telnet transmits login credentials in plain text, exposing data to attackers, and discuss security measures for implementing safer remote login protocols.

Explore how ssh provides encrypted remote login over port 22, using Pertti to log into remote systems, and how administrators may change default ports for security.

Explore how VLANs create logical network isolation to separate departments, prevent inter‑VLAN communication, and configure access ports on switches to segment computers by VLAN.

Explore how ping tests connectivity between a source and destination using ICMP packets, showing IP resolution, time, and packet loss; traceroute maps the path and hops between them.

Explore how subnet masks define networks and host ranges, segment private networks into subnets using CIDR notation, and manage private IPs, networks, and broadcasts.

Master Wireshark to capture and examine packets, view packet details and hex dumps, and use filters to isolate traffic by IP and protocol, revealing plain text credentials in HTTP-like exchanges.

Explore cryptography basics—from plaintext to ciphertext for privacy and integrity—using hashing and mathematical models, and glimpse Alan Turing and the Enigma cipher in The Imitation Game.

Explore core cryptography terminology, including plaintext, ciphertext, encryption and decryption, and how symmetric and asymmetric keys protect messages, with cryptanalysis and certificates for secure SSL connections.

Explore ASCII, ANSI, and Unicode encodings and how typed keys map to numeric codes that represent characters. Understand UTF-16 and multi-byte schemes and their impact on web and application input.

Explore base64 encoding in the ultimate ethical hacking and penetration testing course, covering its 64-character set, grouping of three bytes into four characters, and padding with equals signs.

Explore substitution ciphers, including Caesar and Vigenere, and learn how keys shift alphabet indices using modular arithmetic to generate ciphertext and reveal vulnerabilities to brute force attacks.

Rearrange plaintext with transposition ciphers using a columnar matrix and a key length. Write the plaintext into the matrix and read columns in alphabetical key order to form ciphertext.

Demonstrate the RSA algorithm: generate public and private keys from two primes, encrypt with the public key, and decrypt with the private key using e and d.

Solve a simple rsa ctf by factoring the large number to obtain p and q, then derive the private key and decrypt the ciphertext, converting hex to ascii.

Explore the dcode.fr website’s encoding and decoding tools—ascii, base64, morse, and numerology—to practice encryption, decryption, and interpreting ciphertext and plaintext.

Explore html basics, the hypertext markup language for formatting web pages, and learn core concepts like opening/closing tags, head and body, titles, headings, links, images, lists, and forms.

Explore css basics by learning how cascading style sheets color text and set fonts, using inline, internal, and external styles, with id and class selectors.

Explore the fundamentals of JavaScript, from variables and data types to loops, operators, and functions, and learn how to manipulate the DOM, handle events, and use the console and cookies.

Learn how urls specify protocol, server address, port, domain or ip, and path to access resources like images or videos via a web browser, with ftp and anonymous access examples.

Learn how http requests work, including get and post methods, and how headers and parameters shape interactions with web servers. Compare http/1.0 and http/1.1 and their connection behaviors.

Explore how web servers respond to client requests using status codes from 200 to 399, handle redirects, indicate resource availability, and use cookies to track user activity.

Illustrates how a proxy sits between your browser and the web server, routing, intercepting, and editing requests, and demonstrates load balancing with privacy risks of free proxies.

Explore how URL encoding converts spaces and special characters to percent codes, using ASCII and mapping tables to encode and decode web requests securely.

Explain how robots.txt uses user-agent rules to hide parts of a site from search engines like Google, Yahoo, and Bing, by disallowing crawling from the root of a domain.

Learn how cookies and sessions identify users and track activity by storing unique values and timestamps in requests. Explore first-party and third-party cookies and how sessions are created and destroyed.

Explain the same origin policy as a browser security mechanism that restricts scripts and requests to the same protocol, domain, and port, preventing cross-site actions.

Install python on Windows by downloading from the official site, add to the system path, and use the command prompt or the integrated learning environment to run simple programs.

Learn how to set up Visual Studio Code for Python development, configure font size and themes, install extensions, explore tools, and debug with breakpoints.

Discover how Python variables store values in memory and use assignment. Identify integers, floating points, and strings, check types with type, and print results for circle area.

Explore the operators and operations in programming, including addition, subtraction, multiplication, division, and remainder, with boolean variables and comparison operators, plus comments and loops.

Explore string basics through indexing and slicing: access characters with zero-based indices, use negative indices for from-end, extract ranges, reverse strings, and apply case changes, counting occurrences, and finding indices.

Learn how to capture user input in Python using the input function, convert it to int or float, and build interactive programs by joining and printing strings with prompts.

Explore how lists use square brackets to store multiple items, access elements by index, and perform operations like length, reverse, insert, and concatenation, including copy versus reference behavior.

Explore how tuples are immutable and read-only content, requiring conversion to a list to perform updates, then converting back to a tuple. Emphasize using lists for most operations.

Master Python loops and control flow, covering for loops with range, while loops, and conditional logic (if, elif, else) through practical examples of ranges, indentation, and printing results.

Learn how dictionaries store data as key-value pairs. Add, access, and iterate keys and values, and use items for pairs, formatting, and removal via pop.

Learn how to use file descriptors to open, read, write, and close files, control positions with seek, and handle text and binary data in file I/O.

Learn how to write and call Python functions to compute values like a rectangle area, using def, parameters, return, and proper scope.

Explore object oriented programming by using classes as blueprints to define objects with properties and methods. Understand constructors, self, and instance variables to instantiate and manipulate data in code.

Learn how to use pip to install, upgrade, search, and uninstall Python packages. Import modules like requests and manage installed packages on your system.

Understand how sockets enable server-client communication by binding to localhost and a port, listening for connections, and exchanging encoded messages with Python's socket module.

Learn to debug by using breakpoints and a debugger to pause execution, inspect variables, and step through code one instruction at a time to locate and fix errors.

Import and use Python modules to access functions across scripts, such as addition and subtraction, via direct import, from module import, or import *.

Explore Python exception handling using try, except, else, and finally, including division by zero, catching errors, printing error details, and ensuring resource cleanup.

Learn how git and version control protect project files when servers crash by maintaining local copies, tracking changes, staging areas, commits, pushes, and pulls across teams.

Learn how to set up a Git repository, configure your user, initialize Git, and clone a project, then track changes with add, commit, and push to a remote.

Explore using cherry tree for structured note-taking and git workflows, including creating repositories, committing changes, and pushing notes to a remote like GitHub, with markdown support and export options.