1. Introduction FREE CHAPTER

• Course Introduction & Overview
• Teaser - Hacking a Windows 10 Computer & Accessing Their Webcam
• What Is Hacking & Why Learn It?

2. Setting up The Lab

• Lab Overview & Needed Software
• Installing Kali 2018 as a Virtual Machine
• Installing Metasploitable as a Virtual Machine
• Installing Windows as a Virtual Machine
• Creating & Using Snapshots

3. Linux Basics

• Basic Overview of Kali Linux
• The Terminal & Linux Commands
• Updating Sources & Installing Programs

4. Network Penetration Testing

• Network Penetration Testing Introduction
• Networks Basics
• Connecting a Wireless Adapter to Kali
• What is MAC Address & How to Change It?
• Wireless Modes (Managed & Monitor)
• Enabling Monitor Mode Manually (2nd method)
• Enabling Monitor Mode Using airmon-ng (3rd method)

5. Network Penetration Testing - Pre Connection Attacks

• Packet Sniffing Basics Using Airodump-ng
• Targeted Packet Sniffing Using Airodump-ng
• Deauthentication Attack (Disconnecting Any Device from the Network)
• Creating a Fake Access Point (Honeypot) – Theory
• Creating a Fake Access Point (Honeypot) – Practical

6. Network Penetration Testing - Gaining Access (WEP/WPA/WPA2 Cracking)

• Gaining Access Introduction
• WEP Cracking - Theory behind Cracking WEP Encryption
• WEP Cracking - Basic Case
• WEP Cracking - Fake Authentication
• WEP Cracking - ARP Request Replay Attack
• WPA Cracking – Introduction
• WPA Cracking - Exploiting WPS Feature
• WPA Cracking - Theory behind WPA/WPA2 Cracking
• WPA Cracking - How to Capture the Handshake
• WPA Cracking - Creating a Wordlist
• WPA Cracking - Using a Wordlist Attack
• How to Configure Wireless Security Settings to Secure Your Network

7. Network Penetration Testing - Post Connection Attacks

• Introduction
• Information Gathering - Discovering Connected Clients using netdiscover
• Gathering More Information Using Autoscan
• Gathering Even More Information Using Zenmap
• MITM - ARP Poisoning Theory
• MITM - ARP Spoofing using arpspoof
• MITM - ARP Spoofing Using MITMf
• MITM - Bypassing HTTPS
• MITM - Session Hijacking
• MITM - DNS Spoofing
• MITM - Capturing Screen of Target & Injecting a Keylogger
• MITM - Injecting JavaScript/HTML Code
• MITM - Using MITMf against Real Networks
• Wireshark - Basic Overview & How to Use It with MITM Attacks
• Wireshark - Sniffing Data & Analysing HTTP Traffic
• Wireshark - Capturing Passwords & Cookies Entered By Any Device in the Network

8. Network Penetration Testing - Detection & Security

• Detecting ARP Poisoning Attacks
• Detecting suspicious Activities Using Wireshark

9. Gaining Access to Computer Devices

• Gaining Access Introduction

10. Gaining Access - Server Side Attacks

• Introduction
• Basic Information Gathering & Exploitation
• Using a Basic Metasploit Exploit
• Exploiting a Code Execution Vulnerability
• MSFC - Installing MSFC (Metasploit Community)
• MSFC - Scanning Target(s) For Vulnerabilities
• MSFC - Analysing Scan results & Exploiting Target System
• Nexpose - Installing Nexpose
• Nexpose - How to Configure & Launch a Scan
• Nexpose - Analysing Scan Results & Generating Reports

11. Gaining Access - Client Side Attacks

• Introduction
• Installing Veil 3
• Veil Overview & Payloads Basics
• Generating an Undetectable Backdoor Using Veil 3
• Listening For Incoming Connections
• Using a Basic Delivery Method to Test the Backdoor & Hack Windows 10
• Backdoor Delivery Method 1 - Using a Fake Update
• Backdoor Delivery Method 2 - Backdooring Downloads on the Fly
• How to Protect Yourself from the Discussed Delivery Methods

12. Gaining Access - Client Side Attacks - Social Engineering

• Introduction
• Maltego Basics
• Discovering Websites, Links & Social Networking Accounts Associated With Target
• Discovering Twitter Friends & Associated Accounts
• Discovering Emails of the Target's Friends
• Analysing the Gathered Info & Building an Attack Strategy
• Backdooring Any File Type (images, pdf's ...etc)
• Compiling & Changing Trojan's Icon
• Spoofing .exe Extension to Any Extension (jpg, pdf ...etc)
• Spoofing Emails - Send Emails as Any Email Account You Want
• BeEF Overview & Basic Hook Method
• BeEF - hooking targets using MITMf
• BeEF - Running Basic Commands On Target
• BeEF - Stealing Credentials/Passwords Using a Fake Login Prompt
• BeEF - Gaining Full Control over Windows Target
• Detecting Trojans Manually
• Detecting Trojans Using a Sandbox

13. Gaining Access - Using the Above Attacks outside the Local Network

• Overview of the Setup
• Ex1 - Generating a Backdoor That Works Outside the Network
• Configuring the Router to Forward Connections to Kali
• Ex2 - Using BeEF outside the Network

14. Post Exploitation

• Introduction
• Meterpreter Basics
• File System Commands
• Maintaining Access - Basic Methods
• Maintaining Access - Using a Reliable & Undetectable Method
• Spying - Capturing Key Strikes & Taking Screen Shots
• Pivoting - Theory (What is Pivoting?)
• Pivoting - Exploiting Devices on the Same Network as the Target Computer

15. Website Penetration Testing

• Introduction - What Is A Website?
• How to Hack a Website?

16. Website Pentesting - Information Gathering

• Gathering Basic Information Using Who is Lookup
• Discovering Technologies Used On the Website
• Gathering Comprehensive DNS Information
• Discovering Websites on the Same Server
• Discovering Subdomains
• Discovering Sensitive Files
• Analysing Discovered Files

17. Website Pentesting - File Upload, Code Execution & File Inclusion Vulnerabilities

• Discovering & Exploiting File Upload Vulnerabilities
• Discovering & Exploiting Code Execution Vulnerabilities
• Discovering & Exploiting Local File Inclusion Vulnerabilities
• Remote File Inclusion Vulnerabilities - Configuring PHP Settings
• Remote File Inclusion Vulnerabilities - Discovery & Exploitation
• Preventing the Above Vulnerabilities

18. Website Pentesting - SQL Injection Vulnerabilities

• What is SQL?
• Dangers of SQL Injection Vulnerabilities
• Discovering SQL injections In POST
• Bypassing Logins Using SQL injection Vulnerability
• Discovering SQL injections in GET
• Reading Database Information
• Finding Database Tables
• Extracting Sensitive Data Such As Passwords
• Reading & Writing Files on the Server Using SQL Injection Vulnerability
• Discovering SQL Injections & Extracting Data Using SQLmap
• The Right Way to Prevent SQL Injection

19. Website Pentesting - Cross Site Scripting Vulnerabilities

• Introduction - What is XSS or Cross Site Scripting?
• Discovering Reflected XSS
• Discovering Stored XSS
• Exploiting XSS - Hooking Vulnerable Page Visitors to BeEF
• Preventing XSS Vulnerabilities

20. Website Pentesting - Discovering Vulnerabilities Automatically Using OWASP ZAP

• Scanning Target Website for Vulnerabilities
• Analysing Scan Results