Website Hacking & Penetration Testing Tools

Set up a practical hacking lab using virtualization to run multiple virtual machines with different operating systems and networks, test attacks, and practice safely without affecting your host computer.

Install VirtualBox on Windows, macOS, or Linux, then add the extension pack to enable USB devices and support virtual machines, including a Linux guest.

Install Kali Linux 2020.3 as a VirtualBox virtual machine, download the image, import it, adjust RAM and CPUs, and log in as Carly to access tools.

After installing Linux 20-20, set the super user password from the default Carly account using the terminal, switching to root and confirming the new password.

Update Kali Linux by running update and full upgrade to obtain the latest tools and fixes; the process may take longer on first run and depends on internet speed.

Explore Kali Linux basics, guiding learners through the status bar, categorized applications (information gathering, vulnerability analysis, web application analysis), and filesystem navigation with multiple workspaces.

Explore the Linux terminal interface, learn core commands like pwd, ls, and cd, view manuals with man, and use help and autocomplete to navigate the current working directory.

Configure virtual machine networking by choosing bridged networking or NAT; NAT shares the host IP, while bridged mode puts the guest on the same network, checked by ifconfig.

Learn essential network commands for penetration testing, including viewing interface types, IP addresses, MAC addresses, and broadcast addresses. Use ping to test reachability and inspect active connections and routing tables.

Learn how to view, create, and edit files using echo, redirection with >>, touch, nano, and other editors, and prepare to write scripts for exploit development and service control.

Learn to start and stop Kali services, focusing on the Apache2 web server, verify by loading a page, and explore hosting files from the /var/www/html folder.

Identify technologies behind a target website using the Necrophile site reporter, mapping hosting details, domain information, plugins, and analytics like WordPress and Google Analytics, including server-side and client-side implications.

this lecture explains how DNS translates domain names to IP addresses, reveals hosting providers and records, and uses reverse DNS to uncover related domains for defense awareness.

Identify all websites on the same server by using the target's ip address, and understand how compromising one site can grant access to the entire server and other hosted sites.

Learn how subdomains reveal hidden infrastructure and potential vulnerabilities, and use dns dumpster to discover advertised and unpublished subdomains, enabling comprehensive information gathering for pentesting.

Explore a powerful information gathering tool to collect data on websites, people, and other entities by creating graph entities and running transformers to reveal external links.

Identify a bug bounty target and confirm the program scope before information gathering, focusing on in-scope subdomains, rules of engagement, and enumerating web applications.

Explore a realistic penetration testing approach using Hunter.io to gather target emails, map email formats, and link to employee profiles on LinkedIn and Twitter, then assess reach for password spraying.

Use the Harvester to gather target information by querying multiple data sources for a domain, extracting emails, usernames, subdomains, and associated IPs.

Identify subdomains for comprehensive web information gathering and enumeration during web penetration tests using Sublist3r, enabling discovery of multiple sites and potential attack surfaces.

Explore Project Discovery subdomains, a centralized resource for enumerating subdomains across bug bounty programs, with filters for new programs and subdomains, downloadable zip data, and expanded vulnerability testing scope.

Master Google dorking to uncover subdomains, sensitive files, and source code during penetration testing by using targeted search operators and domain filters.

install Metasploitable as a Linux virtual machine to serve as a vulnerable server target for practicing server and web application hacking in a safe lab, using MSF admin credentials.

Explore server side attacks that require no user interaction and target web servers or computers on the same network. Learn how IP addresses and ping reveal system information and vulnerabilities.

Install Zenmap by downloading the package, locate it in the downloads folder, install via the terminal, then search for Zenmap in applications and open it.

Conduct information gathering with Zenmap to identify target operating system, running services, and ports, then assess misconfigurations and known exploits to gain remote access.

Exploit a vulnerable ftp service using a backdoor to gain command execution on the target computer by using the msf metasploit framework, configuring the host and port options.

Discover a vulnerability in a misconfigured service, craft a payload, and use msfconsole to exploit and gain a session on the target server.

Explore web application penetration testing by understanding how a website runs on a server with a web server and database, and distinguish server-side and client-side languages, default username edman.

Learn to locate and analyze files and directories on a web server, understand webroot structure, and identify hidden pages to read configuration and credential information for security assessment.

Use a terminal based tool to brute-force search for files and directories on a target website with a wordlist. Learn to adjust recursion and authentication settings and output results.

Discover how to locate sensitive data and files on a website, including login pages and configuration files. Identify usernames and passwords to illustrate information gathering and database access.

Learn how sql injections allow a web application to access its database, exposing usernames, passwords, and credit card data, and why these attacks are dangerous.

Demonstrate sql injections on login forms. Explore how input in text boxes and parameters can alter queries, trigger database errors, and reveal authentication vulnerabilities.

Explores exploiting login forms through sql injection to bypass authentication, using input manipulation like or 1=1 and comments to log in as admin.

Demonstrate sql injection techniques on login and user info pages, testing get and post parameters, using quotes and end operators, order by, and url encoding to confirm vulnerability.

Learn how to enumerate tables in a target database using information_schema, filtering by schema to reveal accounts, blogs, and other tables mentioned in the Lipstein database.

Identify table columns and extract usernames and passwords from the accounts table using information_schema queries and union select techniques. Understand how admin privileges arise from exposed credentials.

This lecture demonstrates reading server files through injection vulnerabilities and testing file write and upload capabilities, while examining how webroot permissions affect exploitation and risk.

Demonstrate automated attacks with a tool called a school map that automates sql injection testing, identifies injectable parameters, and enumerates databases, tables, and columns to reveal data.

Explain cross site scripting by injecting JavaScript into a page, with client-side execution, and describe three types: stored, reflected, and downburst excesses.

Discover reflected xss vulnerabilities by injecting parameters and text box inputs in non persistent exploits. See a demo site and observe JavaScript execution when the payload runs.

Demonstrates stored XSS by injecting JavaScript into a page's stored data, causing code to run for every visitor and making it more dangerous than reflected XSS.

Demonstrates exploiting XSS to gain full access to target devices by injecting JavaScript that hooks visitors to beef, enabling remote commands, alerts, screenshots, and keylogging.

Explore OWASP ZAP, a free open-source intercepting proxy for testing web applications, offering automated and manual scans, active and passive testing, headless mode, and a rich add-ons marketplace.

Install OWASP ZAP on Windows and Linux by downloading the latest installer, accepting the license, and completing the setup, then verify the executable permission and launch the application.

Explore six user interface elements of the website testing tool, including the menubar, toolbar, preview, workspace window, information window, and the current scan's area, with guidance on sessions and persistence.

Explore the ZAP marketplace to discover, install, and manage web security tools and add-ons. Learn how to update, access installed extensions, and leverage community scripts for penetration testing.

Configure and apply scan policies in the scan policy manager to tailor active scans by adjusting threshold and attack strength, and import or export policies for target sites.

Learn how to configure zap for web application penetration testing, including installing the dynamic ssl certificate, setting up proxies, and tuning active and passive scans, spidering, and report options.

Explore ZAP attack modes: safe, protected, standard, and attack, and learn what actions are permitted in each mode within defined scope and context.

Explore automated and manual web application testing with a traditional spider and a JavaScript-capable spider, and identify vulnerabilities such as cross-site scripting and missing tokens.

Spider the site using passive scanning and manual exploration for web application penetration testing, then compare traditional and magic spiders for deep, rule-based crawling.

Learn to fuzz a target URL using the ZAP fuzzer, configure fuzzing categories and payloads, and test for injection and cross-site scripting vulnerabilities across web applications.

Explore breakpoints and the requestor (manual request) in Zeb to intercept, modify, and replay web requests, testing security and revealing hidden fees.

Master authentication and session management in web testing, including manual, form-based, and script-based methods, and explore cookie-based session control on a dummy login site.

Explore OWASP ZAP add-ons for anti-CSRF testing and token manipulation, including CSRF payload generation, token entropy evaluation, regular expression testing, and automated form-based attacks to assess web app defenses.

Learn heads up display mode for website testing, using a hexapod display, iFrame injection, spidering, and active scan to identify vulnerabilities and alerts.

Access the zebra api via keys to spider and perform active scans, configure options, and review views, actions, and results exported in json or html.

Explore forced browsing to uncover hidden files and directories in web applications using ZAP, including configuring options and the first browse file, and comparing with spidering in bug bounty contexts.

Generate vulnerability reports from scans using zap, review findings for target sites, and export in multiple formats (actimel, json, sml) to analyze risks and false positives.