English | MP4 | AVC 1280×720 | AAC 48KHz 2ch | 145 lectures (15h 32m) | 8.58 GB
Become an ethical hacker that can hack computer systems like black hat hackers and secure them like security experts.
Welcome this comprehensive course on Ethical Hacking! This course assumes you have NO prior knowledge in hacking and by the end of it you’ll be able to hack systems like black-hat hackers and secure them like security experts!
This course is highly practical but it won’t neglect the theory, so we’ll start with ethical hacking basics and the different fields in penetration testing, installing the needed software (works on Windows, Linux and Mac OS X) and then we’ll dive and start hacking systems straight away. From here onwards you’ll learn everything by example, by analysing and exploiting computer systems such as networks, servers, clients, websites …..etc, so we’ll never have any boring dry theoretical lectures.
The course is divided into a number of sections, each section covers a penetration testing / hacking field, in each of these sections you’ll first learn how the target system works, the weaknesses of this system, and how to practically exploit theses weaknesses and hack into it, not only that but you’ll also learn how to secure this system from the discussed attacks. This course will take you from a beginner to a more advanced level by the time you finish, you will have knowledge about most penetration testing fields.
The course is divided into four main sections:
1. Network Hacking – This section will teach you how to test the security of networks, both wired and wireless. First, you will learn some basic network terminology, how networks work, and how devices communicate with each other. Then it will branch into three sub sections:
- Pre-connection attacks: in this subsection you’ll learn what can you do before even connecting to a network, and even before having internet access; you’ll start by learning how to gather information about the networks around you, discover the devices connected to them, and how to control connections around you (ie: deny/allow devices from connecting to networks) even without knowing the password of the target network.
- Gaining Access: Now that you gathered information about the networks around you, in this subsection you will learn how to crack the key and get the password to your target network weather it uses WEP, WPA or even WPA2.
- Post Connection attacks: Now that you have the key, you can connect to the target network, in this subsection you will learn a number of powerful techniques that allow you to gather comprehensive information about the connected devices, see anything they do on the internet (such as login information, passwords, visited urls, images, videos ….etc), redirect requests, inject evil code in loaded pages and much more! All the attacks here work against both wireless and wired networks. You will also learn how to create a fake WiFi network, attract users to connect to it and use all of the above techniques against the connected clients.
2. Gaining Access – In this section you will learn two main approaches to gain full control or hack computer systems:
- Server Side Attacks: In this subsection you will learn how to gain full access to computer systems without the need for user interaction. You will learn how to gather useful information about a target computer system such as its operating system, open ports, installed services, then you’ll learn how to use this information to discover weaknesses and vulnerabilities and exploit them to gain full control over the target. Finally you will learn how to generate different types of reports for your discoveries.
- Client Side Attacks – If the target system does not contain any weaknesses then the only way to gain access to it is by interacting with the users, in this subsection you’ll learn how to get the target user to install a backdoor on their system without even realising, this is done by hijacking updates or backdoornig downloadeds on the fly. Not only that but you’ll also learn how to create trojans by backdooring normal files (such as an image or a pdf) and use social engineering to deliver this trojan to the target, to do this you’ll learn how to spoof emails so they appear as if they’re sent from the target’s friend, boss or any email account they’re likely to interact with.
3. Post Exploitation – In this section you will learn how to interact with the systems you compromised so far. You’ll learn how to access the file system (read/write/upload/execute), maintain your access, spy on the target and even use the target computer as a pivot to hack other computer systems.
4. Website / Web Application Hacking – In this section you will learn how websites work, how to gather information about a target website (such as website owner, server location, used technologies ….etc) and how to discover and exploit the following dangerous vulnerabilities to hack into websites:
- File Upload.
- Code Execution.
- Local File Inclusion.
- Remote File Inclusion.
- SQL Injection.
- Cross Site Scripting (XSS).
At the end of each section you will learn how to detect, prevent and secure your system and yourself from the discussed attacks.
All the techniques in this course are practical and work against real systems, you’ll understand the whole mechanism of each technique first, then you’ll learn how to use it to hack into the target system, so by the end of the course you’ll be able to modify the these techniques to launch more powerful attacks, and adopt them to different situations and different scenarios.
What you’ll learn
- Start from scratch up to a high-intermediate level
- Learn what is ethical hacking, its fields and the different types of hackers
- Install hacking lab & needed software (works on Windows, OS X and Linux)
- Hack & secure both WiFi & wired networks
- Discover vulnerabilities & exploit them hack into servers
- Hack secure systems using client-side and social engineering attacks
- Use 30+ hacking tools such as Metasploit, Aircrack-ng, SQLmap…..etc
- Understand how websites work, how to discover and exploit web application vulnerabilities to gain full control over websites
- Secure systems from all the attacks shown
- Install Kali Linux – a penetration testing operating system
- Install windows & vulnerable operating systems as virtual machines for testing
- Learn linux basics
- Learn linux commands and how to interact with the terminal
- Learn Network Penetration Testing
- Network basics & how devices interact inside a network
- A number of practical attacks that can be used without knowing the key to the target network
- Control connections of clients around you without knowing the password.
- Create a fake Wi-Fi network with internet connection & spy on clients
- Gather detailed information about clients and networks like their OS, opened ports …etc.
- Crack WEP/WPA/WPA2 encryptions using a number of methods.
- ARP Spoofing/ARP Poisoning
- Launch Various Man In The Middle attacks.
- Gain access to any account accessed by any client in your network.
- Sniff packets from clients and analyse them to extract important info such as: passwords, cookies, urls, videos, images ..etc.
- Discover open ports, installed services and vulnerabilities on computer systems
- Gain control over computer systems using server side attacks
- Exploit buffer over flows and code execution vulnerabilities to gain control over systems
- Gain control over computer systems using client side attacks
- Gain control over computer systems using fake updates
- Gain control over computer systems by backdooring downloads on the fly
- Create undetectable backdoors
- Backdoor normal programs
- Backdoor any file type such as pictures, pdf’s …etc.
- Gather information about people, such as emails, social media accounts, emails and friends
- Use social engineering to gain full control over target systems
- Send emails from ANY email account without knowing the password for that account
- Read, write download, upload and execute files on compromised systems
- Capture keystrokes on a compromised system
- Use a compromised computer as a pivot to gain access to other computers on the same network
- Understand how websites & web applications work
- Understand how browsers communicate with websites
- Gather sensitive information about websites
- Discover servers, technologies and services used on target website
- Discover emails and sensitive data associated with a specific website
- Find all subdomains associated with a website
- Discover unpublished directories and files associated with a target website
- Find all websites hosted on the same server as the target website
- Exploit file upload vulnerabilities & gain full control over the target website
- Discover, exploit and fix code execution vulnerabilities
- Discover, exploit & fix local file inclusion vulnerabilities
- Discover, fix, and exploit SQL injection vulnerabilities
- Bypass login forms and login as admin using SQL injections
- Writing SQL queries to find databases, tables and sensitive data such as usernames and passwords using SQL injections
- Read / Write files to the server using SQL injections
- Learn the right way to write SQL queries to prevent SQL injections
- Discover reflected XSS vulnerabilities
- Discover Stored XSS vulnerabilities
- Hook victims to BeEF using XSS vulnerabilities
- Fix XSS vulnerabilities & protect yourself from them as a user
Table of Contents
Course Introduction
1 Teaser – Hacking Windows 11 & Accessing the Webcam
2 Course Introduction & Overview
3 What Is Hacking & Why Learn It
Setting up a Hacking Lab
4 Update Notice
5 Lab Overview
6 Initial Prepration
7 Installing Kali Linux as a VM on Windows
8 Installing Kali Linux as a VM on Apple Mac OS (Intel & Silicon Chips)
9 Installing Kali Linux as a VM on Linux
Linux Basics
10 Kali Basics
11 The Terminal & Linux Commands
Network Hacking
12 Introduction to Network Hacking Penetration Testing
13 Networks Basics
14 Connecting a Wireless Adapter To Kali
15 What is MAC Address & How To Change It
16 Wireless Modes (Managed & Monitor)
Network Hacking – Pre Connection Attacks
17 Packet Sniffing Basics
18 WiFi Bands – 2.4Ghz & 5Ghz Frequencies
19 Targeted Packet Sniffing
20 Deauthentication Attack (Disconnecting Devices From Networks)
Network Hacking – Gaining Access – WEP Cracking
21 Gaining Access Introduction
22 Theory Behind Cracking WEP Encryption
23 WEP Cracking Basics
24 Fake Authentication Attack
25 ARP Request Replay Attack
Network Hacking – Gaining Access – WPA WPA2 Cracking
26 Introduction to WPA and WPA2 Cracking
27 Hacking WPA & WPA2 Without a Wordlist
28 Capturing The Handshake
29 Creating a Wordlist
30 Cracking WPA & WPA2 Using a Wordlist Attack
Network Hacking – Gaining Access – Security
31 Securing Your Network From Hackers
32 Configuring Wireless Settings for Maximum Security
Network Hacking – Post Connection Attacks
33 Introduction to Post-Connection Attacks
Network Hacking – Post-Connection Attacks – Information Gathering
34 Installing Windows As a Virtual Machine
35 Installing Windows as a Virtual Machine on Apple Silicon
36 Discovering Devices Connected to the Same Network
37 Gathering Sensitive Info About Connected Devices (Device Name, Ports, etc.)
38 Gathering More Sensitive Info (Running Services, Operating System, etc.)
Network Hacking – Post Connection Attacks – MITM Attacks
39 What is ARP Poisoning
40 Intercepting Network Traffic
41 Bettercap Basics
42 ARP Spoofing Using Bettercap
43 Spying on Network Devices (Capturing Passwords, Visited Websites…etc)
44 Creating Custom Spoofing Script
45 Bypassing HTTPS
46 Bypassing HSTS
47 Bypassing HSTS Recap – Firefox
48 Bypassing HSTS Recap – Chrome
49 DNS Spoofing – Controlling DNS Requests on The Network
50 Injecting Javascript Code
51 Doing All of The Above Using a Graphical Interface
52 Wireshark – Basic Overview & How To Use It With MITM Attacks
53 Wireshark – Sniffing & Analysing Data
54 Wireshark – Using Filters, Tracing & Dissecting Packets
55 Wireshark – Capturing Passwords & Anything Sent By Any Device In The Network
56 Creating a Fake Access Point (Honeypot) – Theory
57 Creating a Fake Access Point (Honeypot) – Practical
Network Hacking – Detection & Security
58 Detecting ARP Poisoning Attacks
59 Detecting suspicious Activities In The Network
60 Preventing MITM Attacks – Method 1
61 Preventing MITM Attacks – Method 2
Gaining Access To Computers
62 Gaining Access To Computers Introduction
Gaining Access – Server Side Attacks
63 Installing Metasploitable As a Virtual Machine
64 Introduction to Server-Side Attacks
65 Basic Information Gathering & Exploitation
66 Hacking a Remote Server Using a Basic Metasploit Exploit
67 Exploiting a Code Execution Vulnerability to Hack Remote Server
68 Nexpose – Installing Nexpose
69 Nexpose – Scanning a Target Server For Vulnerabilities
70 Nexpose – Analysing Scan Results & Generating Reports
71 Server-Side Attacks Conclusion
Gaining Access – Client Side Attacks
72 Introduction to Client-Side Attacks
73 Backdoors and Payloads Basics
74 Creating Your Own Backdoor
75 Listening for Backdoor Connections
76 Hacking Windows 11 Using Your Own Backdoor
77 How to Bypass Anti-Virus Programs
Gaining Access – Client Side Attacks – Social Engineering
78 Introduction to Social Engineering
79 Maltego Basics
80 Discovering Websites, Links & Social Accounts Associated With Target
81 Discovering Twitter Friends & Associated Accounts
82 Discovering Emails Of The Target’s Friends
83 Analysing The Gathered Info & Building An Attack Strategy
84 Intro to Trojans – Backdooring Any File Type (images, PDF’s, etc.)
85 Compiling & Changing Trojan’s Icon
86 Spoofing .exe Extension To Any Extension (jpg, pdf, etc.)
87 Spoofing Emails – Setting Up an SMTP Server
88 Email Spoofing – Sending Emails as Any Email Account
89 Email Spoofing – Spoofing Sender Name
90 Email Spoofing – Method 2
91 BeEF Overview & Basic Hook Method
92 BeEF – Hooking Targets Using Bettercap
93 BeEF – Running Basic Commands On Target
94 BeEF – Stealing Passwords Using A Fake Login Prompt
95 BeEF – Hacking Windows 10 Using a Fake Update Prompt
96 Detecting Trojans Manually
97 Detecting Trojans Using a Sandbox
Gaining Access – Hacking Outside The Local Network
98 Overview of the Setup
99 Ex1 – Generating a Backdoor That Works Outside The Network
100 Configuring The Router To Forward Connections To Kali
101 Ex2 – Using BeEF Outside The Network
Post Exploitation
102 Introduction to Post Exploitation
103 Meterpreter Basics
104 Accessing the System Commands
105 Maintaining Access (Persistence)
106 Spying – Capturing Key Strikes & Taking Screenshots
107 Pivoting – Theory (What is Pivoting)
108 Pivoting – Using a Hacked System to Hack Into Other Systems
Website Hacking
109 Introduction – What Is A Website
110 How To Hack a Website
Website Hacking – Information Gathering
111 Gathering Basic Information Using Whois Lookup
112 Discovering Technologies Used On The Website
113 Gathering Comprehensive DNS Information
114 Discovering Websites On The Same Server
115 Discovering Subdomains
116 Discovering Sensitive Files
117 Analysing Discovered Files
Website Hacking – File Upload, Code Execution & File Inclusion Vulns
118 Discovering & Exploiting File Upload Vulnerabilities To Hack Websites
119 Discovering & Exploiting Code Execution Vulnerabilities To Hack Websites
120 Discovering & Exploiting Local File Inclusion Vulnerabilities
121 Remote File Inclusion Vulnerabilities – Configuring PHP Settings
122 Remote File Inclusion Vulnerabilities – Discovery & Exploitation
123 Preventing The Above Vulnerabilities
Website Hacking – SQL Injection Vulnerabilities
124 What is SQL
125 Dangers of SQL Injection Vulnerabilities
126 Discovering SQL injections In POST
127 Bypassing Login Pages Using SQL Injection
128 Discovering SQL Injections in GET
129 Reading Database Information
130 Discovering Database Tables
131 Extracting Sensitive Data From The Database (Such As Passwords, User info…etc)
132 Reading & Writing Files On The Server Using SQL Injection Vulnerability
133 Discovering SQL Injections & Extracting Data Using SQLmap
134 The Right Way To Prevent SQL Injection Vulnerabilities
Website Hacking – Cross Site Scripting (XSS) Vulnerabilities
135 Introduction to Cross Site Scripting
136 Discovering Reflected XSS
137 Discovering Stored XSS
138 Exploiting XSS – Hooking Vulnerable Page Visitors To BeEF
139 Preventing XSS Vulnerabilities
Website Hacking – Discovering Vulnerabilities Automatically
140 Automatically Scanning Target Website For Vulnerabilities
141 Analysing Scan Results
142 Website Hacking Penetration Testing Conclusion
143 Writing a Pentest Report
144 Ways to Secure Websites & Apps
Bonus Section
145 Bonus Lecture – What’s nex
Resolve the captcha to access the links!