Complete Penetration Testing and Ethical hacking Bootcamp from Udemy

What's inside

Learning objectives

By the end you will be able to understand all information security terminologies
You will be able to install and use all pentesting tools, even the new ones too
You will be able to hunt bugs and will be able to earn with them by reporting them

You will be able to document the pentesting reports
You will be able to defend your products and network from intrusion by hackers

By the end you will be able to understand all information security terminologies
You will be able to install and use all pentesting tools, even the new ones too
You will be able to hunt bugs and will be able to earn with them by reporting them
You will be able to document the pentesting reports
You will be able to defend your products and network from intrusion by hackers

Syllabus

In this section we will get the basic terms and earnings of a pentester. Also we will download some tools

Before we even jump into the course, let's explore the interface of our learning platform, adjusting the settings and detailed overview of what is about to come

Lets be clear on what is pentesting and what is our area of scope. Penetration testing is a formal procedure to find vulnerabilities in the product and fix them.

We will not only teach a skill we will also teach you that how you can offer your skills to others and get paid for it. Lets explore the options of bug bounties

Lets explore the terms like white hat hacking, black hat hacking, black box testing and white box testing. These terms are the most common terms, so it's a good idea to get friendly with them

Few more important terms are proxy because we will be installing proxy chains to hide our identity. Also we will be using virtual box to take every user on same page

now finally it's time to grab all the tools that we will be needing. Ofcourse this will not be a full list but we can just work with this for a start. If we will need anything else, for sure it will be cross platform and will be informed in advance.

In this section we will configure our own labs, so that it is easy to learn without worrying about legal aspect

Virtual box is a software that allows us to install a complete operating system in just a software, also it can be said that OS in controlled environment. If anything goes wrong then we can simply delete the OS and our original os will be safe

The tools that we will go through will be open source. Although you can install them on any linux but sometimes there is an issue of dependencies. Therefore we will be using a dedicated operating system to make sure that we can focus on learning the rather spending half of the time in just installation.

UPDATE : A new update for the windows users in installation

Now that our Virtual box is installed, we will now take a toor of this new software. We will try to be friendly with all menu items as well as learn the solution of problems such as full screen mode.

As talked earlier, we might require more tools to proceed, so this movie will help you to grab more tools like metasploitable and few windows trial version in order to practice.

Metasploitable is an intentionally vulnerable machine that is specially designed to practice all the attacks without getting too much worried about the legal issues. Let's learn to install it and crack it down

Finding windows XP is not an easy task but microsoft still gives a few trial and free virtual machines, on which we can practice. Of Course, windows XP is a very good playing platform for exploitation

Now that our attacker machine AKA Kali linux is installed, its a good idea that we take a little tour to the operating system. there are a few small settings that we need to do, to make sure that scan keeps on with no hurdles.

There are many tools that are installed in the kali, in this movie we will take a tour of these tools. Also we will learn to update the machine. By updating the machine we can be sure that more tools can be easily updated.

This section is just get friendly with linux. NOT for those who already know linux

Bash shell and navigation in linux

Files and files permission in linux

Case study, directories and files with VIM and NANO

Manipulation of file data

Grep, piping and sudo in linux

In this section we will learn to use various tools to gather critical information about the machine on which we want to do pentesting

Tor or also known as onion browser is known for anonymity. We will learn to install and configure this browser on kali linux. Also we will have a quick look at dark web sites

Proxies are a way to hide your location or basically route the entire traffic via a different server. It helps us to improve the anonymity. We will install proxychains and with this we can make n number of stops between the traffic.

MAC address also know as physical address of your ethernet device or wireless device is your main identity over the internet, apart from IP. We will learn to mask or change the current mac address.

there are many methods to gather information of our client, one of them is DNS enumeration. We also take a look on what is open DNS

Although, zone transfer vulnerability is very rare to see now a days but still we will look at this vulnerability on a dedicated platform.

DIG is another tool that gives more detail information about DNS information. Let's have a look on DIG tool which ships in Kali linux.

DNStracer is the utility which calculates the path of our request to the server and plots it nicely on graphical interface. We will also have a quick look on wireshark.

Dimitry is a built in tool in kali that gather a lots of information about the company like email ID and DNS information but there are many better tools available now.

Finding email is one of the important part as it can be later used for social engineering. Also we will look at generating reports.

Now that we have talked about a lot of tools, here is the time give you a very small and easy assignment. Also let's have a look on recon-ng

A section that will help you to generate report and more tools to discuss

Some little tweaks are necessary to make our lab good and ready for future exploitation labs. In order to work it is necessary to get ping reply from other virtual machines.

Nmap is like the best tool for network mapping and a must known for every pentester. Let's open our wireshark which comes as a default in kali linux and capture some traffic

In the last movie there was an assignment and in this movie we will solve this assignment. Let's learn to do port scanning in vulnerable machine.

Ok now we have a knowledge of vulnerability, so it's time to take advantage of that vulnerability and exploit the machine.

Just like other scanning tool, nikto is one more scanning tools available in kali linux. Nikto gives us a bunch of information that we will explore in this movie

OpenVas Installation and configuration

Submitting a report is the final task is the pentesting, there are a lot of tools that generate report and submit it to client. Every company follows their own report format.

Let's do a formal pentesting with a machine in this section and we will also explore new tools

NDA stands for Non Disclosure Agreement, which is an official document stating that you are authorised to perform penetration testing. Also make sure that if you are not allowed to use particular tool, that is also mentioned in the document

After signing NDA, first step is to gather information about client like domain info, emails, servers used and scanning of open port and related services.

Now that we have an idea about vulnerabilities, we can now process to exploit those vulnerabilities. We will learn to run the exploits using msfconsole, which we will take in detail later in this course

It is not compulsory that you always get success in exploiting the first vulnerability. Sometimes vulnerability is there but we are not able to get success, in that case search for another one to present prof of concept

One new thing that we will learn in this movie is to use wireshark to sniff traffic. If the application is not encrypting the traffic then we can even grap username and password.

Nmap also allows you to use some basic inbuilt or custom designed scripts too. In this movie we will learn to use one of these scritps for pentesting

This section is totally dedicated towards Web Application pentesting and vulnerabilities like SQL injection and XSS

Web application pentesting is the most hot topic out there because there are many websites and application are out there, having many potential vulnerability and of course getting hacked everyday. More chances of Bug bounties are here

There are many test beds that can be installed for learning purpose but we will start from easy ones like DVWA aka Damn Vulnerable Web Application

There are a few important tools and addons that Kali is missing, we will learn to install them and learn a little about their interface

Our first vulnerability in the test bed is going to be the serious one. Recently this vulnerability was in google cloud based service and was paid with 3000 dollars when reported.

XSS or cross site scripting is most common with the increasing domination of javascript. Also the impact of XSS is now more aggressive.

There is a great one page learning resource for learning about all kind of XSS. This is a trusted resouce and we recommend this resource to all

Google has it's own program to reward responsible disclosure of vulnerabilities in their products just like facebook, paypal and several others.

CSRF attack can allow unwanted actions from the user and user may even change their password without knowing about it. Let's take a close look at CSRF

Yes, there is a great resource to learn more about SQL Injection in detail and that too for free. Watch the video and get started with it. Resource is free and will be free

This section is dedicated for the automation tools of web pentesting

Web application Pentesting automation with Vega

SQL map is a python based tools that perform SQL Injection and checks for many injection vulnerability. Best part is tools is completely open source and can be edited for custom usage with little knowledge of python

Open Web Application Security Project did launched a tool known as Zed Attack proxy, although the name use proxy but it is much more than that.

Present internet scenario says that you will get a lot of pentesting for CMS based site and most popular CMS is Wordpress. We will learn to perform an automated pentesting on such CMS

usually, we don't recommend paid tools in any of our course, keeping in mind that most of you are starting from scratch but it's always good to show all the options and let you decide, what is best and what is not

A simple challenge that will help you to learn and crack bug bounties

Installation of this test bed is going be biggest challenge of the entire series. If you will solve all these challenges (solutions are already in the test bed, watch next movie for hints) then for sure, your first BUG BOUNTY is not going to be far

Here is a quick tip to get started and learn about How to solve the above challenge. Make sure you take a little time to solve this challenge

Introduction to metasploit framework

Metasploit is the biggest framework for exploitation in the entire pentesting industry, completely designed in ruby. In this movie we will explore the architecture of the metasploit.

msfconsole is the major and most famous way to interact with metasploit framework. Let's explore msfconsole, along with types on exploits.

Setting up msf database is easy and makes search operation a lot faster. Also if the database is not set, then we cannot run armitage in next movie

Armitage is a graphical version of msfconsole but don't be mistaken, it is very powerful, automted and easy to easy. Let's look at the interface of Armitage.

SET or Social Engineering Toolkit is a framework that helps you to use your social skills to launch some client side attacks. Let's take a look on client side attacks

Lets get into the world of wireless pentesting with aircrack-ng

Wireless pentesting is fairly new domain in pentesting and has been overlooked for a long time. Before we even get started with it, let's learn the new terminologies

We expect that you got a new alfa card for this section, so it's a good idea that we take a look on the possibilities with this card and its capabilities.

Cracking WEP is not a big deal now, anyone can do it with right tools and cracking is for sure. Also there are a few attacks that can be made on WPA and WPA2, let's have a look on them

Airmon-ng and airodump-ng is one of the tool that comes as a package in aircrack-ng suite of tools. In this movie we will learn to use them along with capturing traffic from wireless using wireshark

Evil twin is the method in which we create a malicious SoftAP aka an Access point completely from software. Also we will learn about DeAuth attack in wireless

A farewell to all students with more resource to learn at your own

Thanks for taking this course. We really enjoyed in putting up this course for you. We would really appreciate if you could take few more minutes of your valuable time in rating the course too.
Thanks in advance!

UPDATE - section for most common password attacks

Basics of Password attacks and Crunch password generators

Cracking linux password with john

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Develops a deep understanding of all the Information Security terminology

Demonstrates how to use and install pentesting tools, including new ones

Teaches how to hunt and report on bugs, and potentially earn money reporting them

Delivers a foundation to document penetration testing reports

Helps students learn to defend their products and networks from hackers

The course is primarily designed for individuals with a basic understanding of Information Security and networking concepts

Reviews summary

Penetration testing and ethical hacking

According to students, this course on Penetration Testing and Ethical hacking is a top-rated bootcamp. Students say that the course is very good and that they are happy to be here.

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Complete Penetration Testing and Ethical hacking Bootcamp with these activities:

Review Basic Networking Concepts

Show steps

Ensures that students have a strong understanding of basic networking concepts, which are essential for penetration testing.

Browse courses on Networking

Show steps

Review your notes from a previous networking course
Read a few articles on basic networking concepts
Take a practice quiz on basic networking concepts

Review the OSI Model

Show steps

Refreshes students' knowledge of the OSI Model, which is a key concept in understanding how networks operate.

Browse courses on OSI Model

Show steps

Draw a diagram of the OSI Model
Describe the function of each layer of the OSI Model
Identify the different types of network protocols that operate at each layer of the OSI Model

Network with Other Security Professionals

Show steps

Helps students build relationships with other security professionals, which can be helpful for finding a job or learning about new opportunities.

Browse courses on Networking

Show steps

Attend security conferences and meetups
Join online security communities
Reach out to security professionals on LinkedIn

Six other activities

Expand to see all activities and additional details

Show all nine activities

Read The Art of Exploitation

Show steps

Introduces the concepts of exploitation and provides a solid foundation for understanding how to find and exploit vulnerabilities.

View Hacking: The Art of Exploitation, 2nd Edition on Amazon

Show steps

Read the first five chapters of the book
Take notes on the different types of vulnerabilities and exploits
Try to exploit a few simple vulnerabilities on your own

Watch a Tutorial on Cross-Site Scripting (XSS)

Show steps

Provides a quick and easy way to learn about XSS, which is another common type of web application vulnerability.

Browse courses on XSS

Show steps

Find a tutorial on XSS
Watch the tutorial and take notes
Try to exploit an XSS vulnerability on your own

Attend a Bug Bounty Workshop

Show steps

Provides an opportunity to learn about bug bounties and how to find and report vulnerabilities.

Show steps

Find a bug bounty workshop
Attend the workshop and take notes
Try to find and report a vulnerability

Practice SQL Injection Attacks

Show steps

Provides hands-on experience with SQL injection attacks, which are one of the most common types of web application vulnerabilities.

Browse courses on SQL Injection

Show steps

Set up a vulnerable web application
Use a SQL injection tool to find and exploit vulnerabilities
Learn how to prevent SQL injection attacks

Contribute to an Open Source Security Project

Show steps

Provides an opportunity to gain hands-on experience with security tools and technologies while contributing to the security community.

Browse courses on Open Source

Show steps

Find an open source security project to contribute to
Read the project documentation and contribute code
Submit a pull request and get your code reviewed

Write a Report on a Penetration Test

Show steps

Allows students to demonstrate their understanding of penetration testing by writing a report on a real-world penetration test.

Browse courses on Penetration Testing

Show steps

Choose a target for your penetration test
Perform the penetration test
Write a report on your findings

Career center

Learners who complete Complete Penetration Testing and Ethical hacking Bootcamp will develop knowledge and skills that may be useful to these careers:

Information Security Analyst

Information Security Analysts are the ones who plan and carry out security measures to protect an organization's computer networks and systems. They monitor and assess the security of an organization's information systems and make sure that they are taking the necessary steps to prevent unauthorized access, use, disclosure, disruption, modification, or destruction of information.

See salaries and explore the career path for Information Security Analyst

Penetration Tester

Penetration Testers are responsible for evaluating the security of computer systems, networks, and applications. They use a variety of tools and techniques to find vulnerabilities and weaknesses that could be exploited by attackers.

See salaries and explore the career path for Penetration Tester

Security Consultant

Security Consultants provide advice and guidance to organizations on how to improve their security posture. They help organizations to identify and mitigate risks, and to develop and implement security policies and procedures.

See salaries and explore the career path for Security Consultant

Ethical Hacker

Ethical Hackers are also called white-hat hackers. They are computer security experts who use their skills to identify and fix vulnerabilities in computer systems and networks.

See salaries and explore the career path for Ethical Hacker

Bug Bounty Hunter

Bug Bounty Hunters are individuals who find and report security vulnerabilities in software and hardware. They are often rewarded for their work by the companies that own the affected products.

See salaries and explore the career path for Bug Bounty Hunter

Network Security Engineer

Network Security Engineers design, implement, and maintain network security systems. They work to protect networks from unauthorized access, use, disclosure, disruption, modification, or destruction.

See salaries and explore the career path for Network Security Engineer

Cybersecurity Analyst

Cybersecurity Analysts monitor and analyze security events and data to identify and respond to threats. They work to protect organizations from cyberattacks and data breaches.

See salaries and explore the career path for Cybersecurity Analyst

Incident Responder

Incident Responders are responsible for responding to security incidents. They work to contain the damage caused by an incident and to restore normal operations as quickly as possible.

See salaries and explore the career path for Incident Responder

Malware Analyst

Malware Analysts are responsible for analyzing malware to identify its capabilities and how it works. They work to develop defenses against malware and to help organizations to recover from malware attacks.

See salaries and explore the career path for Malware Analyst

Forensic Investigator

Forensic Investigators are responsible for collecting and analyzing digital evidence. They work to identify and prosecute criminals who use computers to commit crimes.

See salaries and explore the career path for Forensic Investigator

Chief Information Security Officer (CISO)

Chief Information Security Officers (CISOs) are responsible for overseeing the security of an organization's information systems and networks. They develop and implement security policies and procedures, and they work to ensure that the organization is taking the necessary steps to protect its information assets.

See salaries and explore the career path for Chief Information Security Officer (CISO)

Security Architect

Security Architects design and implement security solutions for organizations. They work to protect organizations from cyberattacks and data breaches.

See salaries and explore the career path for Security Architect

Software Engineer

Software Engineers design, develop, and maintain software applications. They work to ensure that software applications are secure and reliable.

See salaries and explore the career path for Software Engineer

Systems Administrator

Systems Administrators are responsible for managing and maintaining computer systems and networks. They work to ensure that systems are running smoothly and securely.

See salaries and explore the career path for Systems Administrator

IT Auditor

IT Auditors are responsible for auditing an organization's IT systems and controls. They work to ensure that the organization is taking the necessary steps to protect its information assets.

See salaries and explore the career path for IT Auditor