Welcome to the FIRST complete guide to Ethical Hacking. A lot of other Ethical Hacking or Security courses will just teach you how to hack or attack target systems. Learning just this aspect of Ethical Hacking The RedTeam Blueprint was designed and developed by Silicon Valley Hackers to actually land you the hacking job or penetration testing.
Read more
Welcome to the FIRST complete guide to Ethical Hacking. A lot of other Ethical Hacking or Security courses will just teach you how to hack or attack target systems. Learning just this aspect of Ethical Hacking The RedTeam Blueprint was designed and developed by Silicon Valley Hackers to actually land you the hacking job or penetration testing.
Welcome to the FIRST complete guide to Ethical Hacking. A lot of other Ethical Hacking or Security courses will just teach you how to hack or attack target systems. Learning just this aspect of Ethical Hacking The RedTeam Blueprint was designed and developed by Silicon Valley Hackers to actually land you the hacking job or penetration testing.
The reason the course was designed in this unique way is due to the real world Ethical Hacking Experience at Silicon Valley Company's by Brandon Dennis. With countless years of hiring Ethical Hackers, building out Security/Ethical Hacking Teams and developing new attack techniques Brandon is uniquely qualified to provide a full top to bottom course on what it REALLY takes to get into the field of Ethical Hacking.
After completing this course you will have not only a solid understanding of Ethical Hacking but also how Teams work at Enterprise Scale, working with Executives and smashing the Interview. This course has 8+ hours of hands on training as well as a realistically usable portfolio you can bring to job interviews.
Information Security is an ever growing field and with new jobs opening everyday but not enough professionals to fill them is creating a massive demand. With the RedTeam Blueprint you will be able to fill this gap. As a RedTeam Nation Student you will have the skills required to not only go into Ethical Hacking but into any field of Information Security available.
We teach not only the ethical hacking skills required but also the other 50%. Below are just some of the subjects you will learn.
Building out a Red Team at Enterprise Silicon Valley Scale
Skills to manage the Red Team as well as internal programs that can chance how the organization works
Networking
Windows Operating System
Linux Operating System
Operating System Internals (Memory, Stack, Heap, Kernels)
Programming (Assembly & Python)
Passive & Active Reconnaissance
Attack and Create Active Directory Infrastructure
Custom Exploitation
Post Exploitation
Breaking Jail Shells
Abusing a Compromise to Lead to large scale attacks
Password Cracking
Build out a sophisticated in home lab
Building a Personal Security Brand
Building a Portfolio
Job Hunting the Silicon Valley Way
Smashing the Job Interview
These are only SOME of the topics covered in this course. Of course you will receive 24 hour support via Q/A of the course as well as access to our Private Student Only Facebook Group with access to the instructors.
Don't wait. Take your career to the next level with the RedTeam Blueprint.
What's inside
Learning objectives
- 300+ hd videos
- 180+ hands on exercises
- 400+ topics
- 30+ hours of content
- How a red team works at a silicon valley company
- Building out your own red team at a large organization
- High level and low level crash course on windows operating system internals
- High level and low level crash course on linux operating system internals
- How the kernel, memory and the cpu work
- Beginner to intermediate networking
- How compiled programs work
- Full guide to python programming
- Full guide to assembly programing and manual shellcode generation
- How penetration tests actually work and their methodologies
- How and what kerberos is
- Building, managing and attacking an enterprise active directory infrastructure
- The ability to scope out a ethical hacking assessment at silicon valley scale
- Building out finding reports and designing them for the right audience
- Being able to speak to executives and leadership at large organizations
- Passive and active reconnaissance tools and techniques
- Real world up to date exploitation techniques
- Post exploitation techniques
- Custom fix of public exploit code
- The ability to creatively deploy persistence and backdoor binaries
- Living of the land and moving laterally across the network
- Password cracking
- Full guide on job hunting in silicon valley
- Show more
- Show less
- 300+ hd videos
- 180+ hands on exercises
- 400+ topics
- 30+ hours of content
- How a red team works at a silicon valley company
- Building out your own red team at a large organization
- High level and low level crash course on windows operating system internals
- High level and low level crash course on linux operating system internals
- How the kernel, memory and the cpu work
- Beginner to intermediate networking
- How compiled programs work
- Full guide to python programming
- Full guide to assembly programing and manual shellcode generation
- How penetration tests actually work and their methodologies
- How and what kerberos is
- Building, managing and attacking an enterprise active directory infrastructure
- The ability to scope out a ethical hacking assessment at silicon valley scale
- Building out finding reports and designing them for the right audience
- Being able to speak to executives and leadership at large organizations
- Passive and active reconnaissance tools and techniques
- Real world up to date exploitation techniques
- Post exploitation techniques
- Custom fix of public exploit code
- The ability to creatively deploy persistence and backdoor binaries
- Living of the land and moving laterally across the network
- Password cracking
- Full guide on job hunting in silicon valley
- Show more
- Show less
Syllabus
Welcome! Who Is This Guy?!
Welcome!
Follow Me on Twitter: @brandondHTE
Subscribe Youtube: https://bit.ly/358UEJW
Students will understand how the 3 core Offensive and Defensive security teams work at Enterprise companies.
Read more
Syllabus
Welcome!
Follow Me on Twitter: @brandondHTE
Subscribe Youtube: https://bit.ly/358UEJW
You will have a base understanding of what these 3 Core Teams are.
You will have a solid understanding of what a Red Team is, how its used and where it fits into an organization.
You will have a solid understanding of what a Blue Team is, how its used and where it fits into an organization.
You will have a solid understanding of what a Purple Team is, how its used and where it fits into an organization.
Students will learn how to build out an internal Red Team at scale. Along with this a current and industry used Penetration Methodology that will outline the rest of the course.
You will learn a new industry Penetration Testing Methodology used at Silicon Valley Companies.
You will learn what Metrics are, how they are used and how to build them yourself!
You will have a solid understanding of what assessments are in a Red Team and start brain storming on different types.
Now that we have covered what assessments are you will learn how and why Yearly assessments are done.
Now that we have covered what Yearly assessments are you will learn how and why Quarterly assessments are done.
Now that we have covered what Quarterly assessments are you will learn how and why Monthly assessments are done.
Now that we have covered what Monthly assessments are you will learn how and why Constant assessments are done.
With a good understanding of the different types of assessments that are possible and their frequency I now task you with building your own for a Red Team! You will learn in this video how to build out your own.
Working with a budget and being able to build one speaks volumes about you as a professional. This is a key component to truly landing the job.
It's important to understand your specialty in the field of Ethical Hacking. This will help with job hunting as well as the interview process.
The CIA Triangle is commonly used in a large section of I.T. For Security it is paramount to understand why it is in place and what each step means.
Learn how to build a virtualization environment that will be utilized throughout the rest of the course.
Knowing your way around Windows is required for an attacker. A lot of enterprise companies still utilize Windows environments.
You will learn how the current Windows File System works and some intimate details about it.
Knowing where and how Windows logs it's events is a core skill to any Ethical Hacker.
User Account Control or UAC is going to get in your way as an Ethical Hacker. You need to get a good grasp on this topic and how its implemented to understand how to beat it!
Learning to abuse Windows? Permissions is where its at. This is by far the most commonly misconfigured element of Windows environments!
Alternate Data Streams or ADS is a great way to hide data but also can be used in some sneaky and creative ways.
API Calls in Windows can be complicated at first but once you understand what they do and how things get much easier. When looking at Windows based Privilege Escalation exploits you tend to see API Calls used and it makes reading and understanding them far easier!
The SID for Windows is a unique number for users/groups. Being able to quickly identify a user based on it's SID allows you to see a lower level of Windows.
Windows Tokens are one of my favorite concepts. You can abuse these in SO MANY ways. Token Impersonation is a key concept for any Ethical Hacker!
Windows Named Pipes are used by most applications in Windows. They have their own vulnerabilities and understand what they are and how they work can allow someone to be very "creative".
Here we take a look and how a PE and DLL file is structured and some of the components of each. This forms a base for knowledge to be gained in future modules.
Learning the Windows Command Line is a required skill for any hacker. You won't find yourself with a GUI very often and knowing how to move around, manage the machine and do what you need to without it is a hard requirement!
Learn about navigation in the Windows Command Line world!
Learn to work with files and directories in Windows Command Line.
As we learned about Named Pipes now we can use them in actions to see what we can do with them.
The Standard Input Output an Error are used throughout all Operating Systems. They are commonly used the same way in most OS's. This is a useful skill to make working on the Command Line far easier.
You never know when you need to make a configuration setting, add a rouge service or learn more about the system. Know how to manage Windows without the GUI!
We take our first look at Linux and figure out where the GUI went!
Before we dive into Linux its important to understand how the file system in laid out and that EVERYTHING is a FILE!
Since most of your time as an attacker is spent in a Terminal or Command Line its paramount to know how to navigate. This is fairly similar to Windows.
Since everything is a file, that includes directories, we need to know how to work with them!
Very similar to Windows Standard I/O/E we will do a quick recap on the subject in Linux.
How that we understand how to work with files we need to learn how to work with data itself. We go over how to manipulate data to our will!
Same with Windows Permission we must learn the Linux side of the fence. There are a lot of vulnerabilities that rely on configuration issues with permissions. Understanding this will provide you a greater insight on how things work and how they can be abused.
Man pages are the Linux Users quick look up replacement of Google Searching. These can provide very critical bits of information that are specific to a system without looking through countless white papers.
Being able to use and manipulate base64 is useful for not only encoding larger normally unreadable data but for getting binaries/data on and off machines!
Very similar to base64 use cases but has its uses elsewhere in other applications! Its important to understand how to quickly get and resolve hex/base64 data.
We quickly recap how to grab network connections in Linux as we did with Windows. Remember in Linux everything is a file!
Learn about how Linux processes work and the types you will run into.
INodes are an integral part of the Linux File System. They can be used in a lot of useful ways!
Since everything is a file dealing with Open Files is just as important! You will learn how to manage Open Files on Linux.
Abusing Symbolic Links is very fun but you need to know how to use them first!
Linux uses ID's just like Windows uses SID's. You will need to understand these as well when attacking a Linux Machine.
Similar to Windows Pipes Linux has their own! These are very useful for working with data.
We go over the Run Levels of Linux and what each of them mean. They each have their own attack vector.
Logging is a big topic on Linux machines. A lot of organizations will build their own logs and sometimes provide juicy information!
Here you will learn about the Linux Kernel and how it works.
Inside of the Kernel we have different ring levels. Each of these levels provide different privileges. With understanding this it helps work on exploit development and how attacks affect the Kernel.
We take a quick break from low level stuff to see how a CPU itself works.
When looking at the CPU there is a base component called Registers. These will be required in our Assembly section of the course so be sure to watch this!
Flags are similar to registers and are just as required for the Assembly course!
We take our first look at how memory works on computers. This can be a deep topic so rewatch if needed.
We take a stab at tackling the Stack! If you are wanting to learn Buffer Overflows or Exploit Development this is essential.
While Similar to the Stack The Heap helps out a different part of the process!
Here we provide some extra context on memory and the CPU!
In this video we take our knowledge of memory and the CPU and dive into a debugger!
We look at Address Space Layout Randomization or ASLR and how it works in Windows.
We quickly talk about AnitVIrus and some issues facing an Ethical Hacker.
Active Directory is a very common infrastructure at larger organizations. To best attack this type of infrastructure you should know how it works and be able to configure it yourself.
We hit the base configurations for a Windows Server for our needs.
We look at actually installing Active Directory on our specified Windows Server and how to configure it.
Understanding the Active Directory Tree is just as important as configuring Active Directory itself. An attacker will commonly find themselves investigating the Tree for issues.
Along with the Tree itself there are leaves or OU's. Theses contain all of the data and objects. You will have a good grasp on how and why things are setup the way they are.
We take a look at managing users and groups. This includes delegation of permissions and setting up help desk users.
We take our first look at extending the AD Infrastructure with another machine. This is a key step in configuration of a home lab.
Group Policies is what makes AD so useful. This is commonly the place that is abused from an attacker perspective.
We see how cached credentials can be dangerous.
We take our first look at Kerberos and see how it works and where it fits into a Red Team's attack vectors.
We talk about the first section of Kerberos and how Realms are handled by the service.
The next step of Kerberos is the Authentication Server. Understanding this is required for Kerberos.
We take a final look at Kerberos with the TGS. This is what is commonly abused by Ethical Hackers in the real world.
We take a look encryption and see how it works and how its used.
We take a look Symmetric Encryption and see how it works and how its used.
We take a look Asymmetric Encryption and see how it works and how its used.
We learn about RSA Encryption and where its use cases are.
We learn about AES Encryption and where its use cases are.
We take a quick look at what Hashing is and how it is used.
We see how MD5 works and where its vulnerable as well as its uses cases.
Learning SHA is important. This is a commonly used algorithm for a large amount fo protocols and services!
Encoding is used everywhere! We take a look at what it is and how it works!
Base64 encoding is commonly used in Web Applications. It also has a few uses for Ethical Hackers as well!
Like Base64 this has its used to Ethical Hackers as well. Hex encoding is normally used internally to applications.
While exclusively used with Web Browsers URL Encoding is critical to understand when attacking any type of web application.
Traffic lights
Save this course
Save
Reviews summary
Ethical hacking for career readiness
Guides building a home AD lab.
Explains how Red Teams operate at scale.
Covers OS internals, networking, exploitation.
Designed to prepare students for a career.
Activities
Review Networking Fundamentals
Show steps
Solidify your understanding of networking concepts before diving into ethical hacking, as network knowledge is crucial for reconnaissance and exploitation.
Browse courses on
Networking Fundamentals
Show steps
-
Review the OSI model and TCP/IP stack.
-
Practice subnetting and CIDR notation.
-
Familiarize yourself with common network protocols like HTTP, DNS, and SMTP.
Brush Up on Linux Command Line
Show steps
Improve your proficiency with the Linux command line, as it's essential for penetration testing and system administration tasks.
Browse courses on
Linux Command Line
Show steps
-
Practice navigating the file system using commands like `cd`, `ls`, and `pwd`.
-
Learn how to manipulate files and directories using commands like `cp`, `mv`, `rm`, and `mkdir`.
-
Familiarize yourself with text processing tools like `grep`, `sed`, and `awk`.
Read 'Hacking: The Art of Exploitation'
Show steps
Gain a deeper understanding of exploitation techniques by studying this classic hacking book.
View
Hacking: The Art of Exploitation, 2nd Edition
on Amazon
Show steps
-
Read the chapters on buffer overflows and shellcode.
-
Experiment with the provided code examples in a virtual environment.
-
Try to apply the learned concepts to real-world vulnerabilities.
Four other activities
Expand to see all activities and additional details
Show all seven activities
Practice with Metasploit
Show steps
Enhance your practical skills by using Metasploit to exploit vulnerable machines in a controlled environment.
Show steps
-
Set up a vulnerable virtual machine using Metasploitable3.
-
Use Metasploit to scan the target machine for vulnerabilities.
-
Exploit identified vulnerabilities and gain access to the system.
Build a Penetration Testing Lab
Show steps
Solidify your knowledge by building a home lab to practice ethical hacking techniques in a safe and controlled environment.
Show steps
-
Choose a virtualization platform like VirtualBox or VMware.
-
Install Kali Linux as the attacker machine.
-
Set up vulnerable virtual machines like Metasploitable and OWASP Juice Shop.
-
Configure the network to allow communication between the machines.
Write a Blog Post on a Recent Vulnerability
Show steps
Deepen your understanding of vulnerabilities by researching and writing about a recent security flaw.
Show steps
-
Choose a recent vulnerability from a reputable source like CVE Details.
-
Research the vulnerability and understand its impact.
-
Write a blog post explaining the vulnerability, its exploitation, and mitigation strategies.
Read 'The Web Application Hacker's Handbook'
Show steps
Expand your knowledge of web application security by studying this comprehensive handbook.
View
The Web Application Hacker's Handbook
on Amazon
Show steps
-
Read the chapters on common web vulnerabilities like SQL injection and cross-site scripting (XSS).
-
Practice exploiting these vulnerabilities in a lab environment like OWASP Juice Shop.
-
Learn about mitigation strategies to prevent these vulnerabilities.
Review Networking Fundamentals
Show steps
Solidify your understanding of networking concepts before diving into ethical hacking, as network knowledge is crucial for reconnaissance and exploitation.
Browse courses on
Networking Fundamentals
Show steps
- Review the OSI model and TCP/IP stack.
- Practice subnetting and CIDR notation.
- Familiarize yourself with common network protocols like HTTP, DNS, and SMTP.
Brush Up on Linux Command Line
Show steps
Improve your proficiency with the Linux command line, as it's essential for penetration testing and system administration tasks.
Browse courses on
Linux Command Line
Show steps
- Practice navigating the file system using commands like `cd`, `ls`, and `pwd`.
- Learn how to manipulate files and directories using commands like `cp`, `mv`, `rm`, and `mkdir`.
- Familiarize yourself with text processing tools like `grep`, `sed`, and `awk`.
Read 'Hacking: The Art of Exploitation'
Show steps
Gain a deeper understanding of exploitation techniques by studying this classic hacking book.
View
Hacking: The Art of Exploitation, 2nd Edition
on Amazon
Show steps
- Read the chapters on buffer overflows and shellcode.
- Experiment with the provided code examples in a virtual environment.
- Try to apply the learned concepts to real-world vulnerabilities.
Practice with Metasploit
Show steps
Enhance your practical skills by using Metasploit to exploit vulnerable machines in a controlled environment.
Show steps
- Set up a vulnerable virtual machine using Metasploitable3.
- Use Metasploit to scan the target machine for vulnerabilities.
- Exploit identified vulnerabilities and gain access to the system.
Build a Penetration Testing Lab
Show steps
Solidify your knowledge by building a home lab to practice ethical hacking techniques in a safe and controlled environment.
Show steps
- Choose a virtualization platform like VirtualBox or VMware.
- Install Kali Linux as the attacker machine.
- Set up vulnerable virtual machines like Metasploitable and OWASP Juice Shop.
- Configure the network to allow communication between the machines.
Write a Blog Post on a Recent Vulnerability
Show steps
Deepen your understanding of vulnerabilities by researching and writing about a recent security flaw.
Show steps
- Choose a recent vulnerability from a reputable source like CVE Details.
- Research the vulnerability and understand its impact.
- Write a blog post explaining the vulnerability, its exploitation, and mitigation strategies.
Read 'The Web Application Hacker's Handbook'
Show steps
Expand your knowledge of web application security by studying this comprehensive handbook.
View
The Web Application Hacker's Handbook
on Amazon
Show steps
- Read the chapters on common web vulnerabilities like SQL injection and cross-site scripting (XSS).
- Practice exploiting these vulnerabilities in a lab environment like OWASP Juice Shop.
- Learn about mitigation strategies to prevent these vulnerabilities.
Career center
Red Team Member
Penetration Tester
Exploit Developer
Vulnerability Assessor
Security Consultant
Cybersecurity Engineer
Incident Responder
Information Security Analyst
Security Architect
Cloud Security Engineer
Application Security Engineer
Reverse Engineer
Security Operations Center Analyst
Digital Forensics Analyst
Security Awareness Trainer
Reading list
Share
Similar courses
OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.
Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.
Find this site helpful? Tell a friend about us.
We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.
Your purchases help us maintain our catalog and keep our servers humming without ads.
Thank you for supporting OpenCourser.
