Ethical Hacking & Penetration Testing with Metasploit [6/2025, ENG] torrent

Обучающие видео » Компьютерные видеоуроки и обучающие интерактивные DVD » Компьютерные сети и безопасность

Ethical Hacking & Penetration Testing with Metasploit

Год выпуска: 6/2025
Производитель: Udemy
Сайт производителя: https://www.udemy.com/course/complete-ethical-hacking-and-penetration-testing-course/
Автор: Oak Academy, OAK Academy Team
Продолжительность: 27h 53m
Тип раздаваемого материала: Видеоурок
Язык: Английский
Описание: This course, "Ethical Hacking & Penetration Testing with Metasploit," is designed for everyone from complete beginners with no prior experience through to pro hackers, taking learners from beginner to extremely high level with hands-on examples and covering Metasploit, password cracking, web hacking, phishing, NMAP and Nessus. Offered by Oak Academy, it suits those who want their first job in IT security, want to become a white hat hacker or want to check the security of their own home network, and notes that penetration testing skills make you a more marketable IT tech because understanding how to exploit servers, networks and applications also means better preventing malicious exploitation, with all recommended applications and tools being free. The course focuses on the practical side of penetration testing and ethical hacking while also sharing the theory behind each attack, starting with setting up a lab and installing needed software, and the instructor brings 20 years of field experience to share tips and tricks for winning the battle against cyber adversaries, with learners finishing equipped with actionable techniques to prevent attacks and detect adversaries.

The extensive curriculum begins with setting up the laboratory — Kali Linux from VM and ISO, and victims including Metasploitable Linux, OWASP Broken Web Applications and a Windows system — then moves through penetration test types, security audits, vulnerability scans, black-box to white-box approaches, phases from reconnaissance to reporting and legal issues and testing standards. It covers network scanning with Wireshark, ARP tables and Hping; Nmap for active network scanning including ping, port, SYN, TCP and UDP scans, version and OS detection, input/output management, the Nmap Scripting Engine, bypassing security measures and idle stealth scans; vulnerability scanning with Nessus from download and setup to custom policies, first scans, aggressive scans and reporting; exploitation terminologies, exploit databases, manual exploitation, exploitation frameworks and the Metasploit Framework with MSF console, Meterpreter sessions and basics, and pass-the-hash; and post-exploitation including persistence modules, removing backdoors, next-generation persistence, Meterpreter extensions such as Mimikatz and collecting sensitive data. Further sections cover password cracking for Windows and Linux hashes with Hydra, Cain and Abel and John the Ripper; OSINT and information gathering with search engines, SiteDigger, SearchDiggity, Shodan, web archives, FOCA, The Harvester, Recon-NG and Maltego; web application hacking including Burp Suite interception, ZAP, input and output manipulation, reflected, stored and DOM-based XSS, BeEF, SQL injection, authentication and authorization flaws, online password cracking, path traversal, session management, session fixation and CSRF; and social engineering and phishing with MSF Venom, Veil, TheFatRat, malware embedded in PDFs, Word documents and Firefox add-ons, the Empire Project, Java vulnerability exploitation, the Social Engineering Toolkit, fake emails and vishing.

The course also covers network fundamentals in depth — OSI versus TCP/IP reference models, Wireshark demonstrations of OSI layers, Ethernet, ARP, VLANs and WLANs at layer 2; IP, IPv4 addressing and subnetting, private networks, NAT, IPv6, DHCP, ICMP and traceroute at layer 3; TCP and UDP at layer 4; and DNS, HTTP and HTTPS at layers 5 to 7 — plus network layer and layer-2 attacks including creating networks with GNS3, sniffing and man-in-the-middle attacks with TCPDump and Wireshark, MAC flooding with Macof, ARP spoofing and cache poisoning with Ettercap, DHCP starvation and spoofing, VLAN hopping via switch spoofing and double tagging, reconnaissance on network devices, cracking service passwords, compromising SNMP through community name discovery, write access checks and configuration grabbing with Metasploit, weaknesses of network devices, Cisco router password creation methods, identity management, ACLs and SNMP security. Requirements include a 64-bit Intel i5/i7 fourth-generation or newer 2 GHz+ processor, virtualization enabled in BIOS such as Intel-VTx, 8 GB of RAM with 16 GB recommended, a modern browser and 20 GB or more of disk space; learners also get lifetime access, fast and friendly Q&A support and a Udemy certificate of completion. The course carries an important note that it is created for educational purposes and all information learned should be used only when the attacker is authorized.
[spoiler="Содержание"]
01. Welcome to Ethical Hacking and White Hat Hackers World
1. Do You Have Any Idea About Penetration Testing (02:13)
2. Let's Learn Penetration Test Types (00:28)
3. Security Audits (04:41)
4. Vulnerability Scan (02:45)
5. Basic Terminologies (03:08)
6. Penetration Test Approaches (02:44)
7. Planning a Penetration Test (04:23)
8. Penetration Test Phases (07:00)
9. Legal Issues & Testing Standards (04:18)

02. Create Lab VirtualBOX
1. Download and Install VirtualBOX (02:02)
2. Download and Install Kali Linux -VirtualBox (07:36)
3. Download and Install Kali Linux Image File (02:40)
4. Download and add Metasploitable Image File (02:40)
5. OWASP Image File-2 Download and Add VirtualBOX (04:21)
6. Windows 7 Add VirtualBox (01:47)
7. Create Nat Network and Connections Test with VirtualBox (07:31)

03. Create Lab VmWare
1. VmWare Download and Install (01:49)
2. Kali Linux Install VMWare (05:39)
3. Kali Image File Add VmWare (02:02)
4. Metasploitable Add VmWare (02:15)
5. Owasp Add VmWare (02:12)
6. Win7 add VmWare (01:59)
7. Create Nat Network and Connections Test with VmWare (06:12)

04. Basic Networking
1. Content (01:07)
2. What is “Protocol” (05:36)
3. Reference Models (00:24)
4. OSI Reference Model (13:43)
5. OSI vs TCPIP (02:33)
6. Demonstration using Wireshark (07:59)
7. Standards & Protocols (03:50)
8. Ethernet Principles, Frame & Headers (04:06)
9. ARP ( Address Resolution Protocol ) Mechanism, ARP Tables, ARP Packets (06:10)
10. ARP Hand-On Practices (03:14)
11. VLANs – Virtual Local Area Networks (04:03)
12. WLANs – Wireless Local Area Networks (07:01)
13. Introduction to Network Layer (01:37)
14. Internet Protocol - IP (02:49)
15. IPv4 Adressing System (01:56)
16. IPv4 Packet Header (02:56)
17. IPv4 Subnetting Classful Networks (02:35)
18. IPv4 Subnetting Subnet Mask (02:59)
19. IPv4 Subnetting Understanding (03:09)
20. IPv4 Shortage (01:41)
21. Private Networks (03:59)
22. Private Networks - Demonstration (03:01)
23. NAT – Network Address Translation (04:30)
24. IPv6, Packet Header & Addressing (08:30)
25. DHCP - How the Mechanism Works (09:23)
26. ICMP – Internet Control Message Protocol (02:02)
27. Traceroute (09:51)
28. Introduction to Transport Layer (02:40)
29. TCP – Transmission Control Protocol (06:59)
30. TCP Header (02:27)
31. UDP – User Datagram Protocol (03:56)
32. Introduction to Application Layer (00:55)
33. DNS – Domain Name System (05:56)
34. HTTP ( Hyper Text Transfer Protocol ) (03:09)
35. HTTPS (01:56)

05. Reconnaissance
1. Introduction (05:24)
2. Using Search Engines & Google Hacking to Gather Information (03:36)
3. Search Engine Tool SearchDiggity (03:15)
4. Shodan (02:49)
5. Gathering Information About the People (02:53)
6. Web Archives (01:53)
7. FOCA Fingerprinting Organisations with Collected Archives (06:45)
8. The Harvester & Recon-NG (03:22)
9. Maltego - Visual Link Analysis Tool (07:09)

06. Network Scan & Network Attacks
1. Passive Scan - Definition (02:50)
2. Passive Scan - ARP Tables (06:20)
3. Passive Scan - Wireshark (06:36)
4. Wireshark Following Stream (02:41)
5. Wireshark Summarise Network (06:19)
6. Active Scan (08:30)
7. MitM Listening to the traffic (01:46)
8. Sniffing (01:03)
9. TCPDump (05:23)
10. Router, Switch, Hub (04:45)
11. How to Expand Sniffing Space (05:13)
12. MAC Flood Switching (03:55)
13. MAC Flood Using Macof Tool (07:09)
14. MacFlood - Countermeasures (01:13)
15. ARP Spoof (03:40)
16. ARP Cache Poisoning using Ettercap (10:35)
17. DHCP Starvation & DHCP Spoofing (03:36)
18. DHCP Mechanism (06:15)
19. DHCP Starvation - Scenario (04:00)
20. DHCP Starvation Demonstration with Yersinia (08:33)
21. VLAN Hopping (02:05)
22. VLAN Hopping Switch Spoofing (01:39)
23. VLAN Hopping Double Tagging (03:17)

07. Nmap
1. What is Nmap (03:45)
2. Nmap First Scan (03:15)
3. What is Subnet (04:16)
4. Interpretation of Nmap Results (02:04)
5. Scanning Specific IPs or Specific Targets With Nmap (01:58)
6. Nmap IP List Creation (04:07)
7. Nmap Random Scan and Exclude Ips (04:17)
8. Print the Nmap Results to the File (06:23)
9. What is Port Nmap Port Scan (03:34)
10. Scanning Top 20, Top 100 Ports With Nmap (04:44)
11. Scanning Specific Ports With Nmap (06:01)
12. Nmap Syn Scanning (03:21)
13. Nmap TCP Scan (02:46)
14. Namp UDP Scan (04:12)
15. Nmap ACK Scan (01:54)
16. Nmap Fin-Xmas-Null Scan (03:26)
17. Nmap Fast Scan (01:13)
18. Nmap Open Ports Scan (01:24)
19. Nmap No PORT Scan (02:15)
20. Nmap PING and noPING Scan (03:20)
21. Nmap Verbose Command (02:15)
22. Nmap With Service and Version Detection (03:53)
23. Nmap Operating System Detection (02:30)
24. Nmap Timing Templates (03:36)
25. Bypass of IPS & IDS Systems With Nmap (10:57)
26. Nmap Script Engine (NSE) (10:59)
27. Nmap Script Engine Example - 1 (02:53)
28. Nmap Script Engine Example - 2 (00:58)
29. Writing an NSE Script (09:52)

08. Vulnerability Scan
1. Introduction to Vulnerability Scan (09:19)
2. Introduction to Nessus (01:57)
3. Downloading Nessus (01:46)
4. Installing Nessus (03:44)
5. Creating Policy (05:39)
6. Scanning (07:06)
7. Reporting (02:20)
8. Lab Exercise - 2 (02:47)
9. An Aggressive Scan with Nessus Start (04:23)
10. An Aggressive Scan with Nessus Results (07:17)
11. An Aggressive Scan with Nessus Results with Windows Targets (02:45)

09. Exploitation
1. Exploitation Terminologies (06:13)
2. Exploit Databases (01:56)
3. Manual Exploitation (05:39)
4. Exploitation Frameworks (03:37)
5. Evolution of Metasploit (04:18)
6. Metasploit Filesystem and Libraries (04:12)
7. The Architecture of MSF (01:43)
8. Auxiliary Modules (05:09)
9. Payload Modules (06:04)
10. Exploit Modules (04:03)
11. Encoder Modules (02:51)
12. Post Modules (03:34)
13. Metasploit Editions (04:02)
14. Metasploit Community (03:09)
15. Metasploit Interfaces (05:32)
16. Armitage (03:58)
17. MSFconsole (05:21)
18. MSFConsole Basic Commands 1 (07:01)
19. MSFConsole Basic Commands 2 (09:17)
20. Using Databases in MSF (06:39)
21. More on Exploits in MSF (03:14)
22. What is Enumeration (02:03)
23. Nmap Integration and Port Scanning (08:14)
24. SMB and Samba Enumeration (10:37)
25. MySQL Enumeration (03:51)
26. FTP Enumeration (05:26)
27. SSH Enumeration (03:17)
28. HTTP Enumeration (07:55)
29. SNMP Enumeration (04:25)
30. SMTP Enumeration (04:26)
31. Using Shodan with MSF (06:06)
32. Integrating Nessus into MSF (04:35)

10. Post Exploitation
1. Metasploit as Exploitation Tool (01:52)
2. PHP CGI Argument Injection (php_cgi_arg_injection) (04:42)
3. MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption (06:11)
4. Java JMX Server Insecure Configuration Java Code Execution (java_jmx_server) (04:56)
5. SunOracle GlassFish Server Authenticated Code Execution (glassfish_deployer) (07:52)
6. Jenkins-CI Script-Console Java Execution (jenkins_script_console) (08:47)
7. WinRM Script Exec Remote Code Execution (winrm_script_exec) (09:50)
8. HTTP Writable Path PUTDELETE File Access (http_put) (05:00)
9. Exploiting Poorly Configured MySQL Service (03:08)
10. Axis2 SAP Business Objects Authenticated Code Execution via SOAP (07:17)
11. Using Allports Payload (07:42)
12. Using Resource Files (10:08)
13. Meterpreter (03:00)
14. Basic Meterpreter Commands 1 (05:27)
15. Basic Meterpreter Commands 2 (04:33)
16. Basic Meterpreter Commands 3 (05:17)
17. Post-Exploitation (03:28)
18. What is “Persistence” (01:28)
19. Meterpreter’s Persistence module (08:55)
20. Removing the Backdoor (05:00)
21. Running Meterpreter’s Persistence Module on Windows 8 (02:57)
22. Next Generation Persistence Step 1 (04:40)
23. Next Generation Persistence Step 2 (04:32)
24. Meterpreter for Post - Exploitation (01:37)
25. Meterpreter Core Commands (01:46)
26. Meterpreter Core Extension - Session Command (02:31)
27. Meterpreter Core Extension - Migrate Command (03:34)
28. Meterpreter Core Extension - Channel Command (02:43)
29. Meterpreter Stdapi Extension (01:05)
30. Meterpreter Stdapi Extension - File System Commands (05:19)
31. Meterpreter Stdapi Extension - System Commands (04:13)
32. Meterpreter Stdapi Extension - User Interface & Webcam Commands (04:08)
33. Meterpreter Incognito Extension (03:27)
34. Meterpreter Mimikatz Extension (03:53)
35. Metasploit Post-Exploitation Modules (02:02)
36. Gathering Modules (01:21)
37. Managing Modules (06:51)
38. Enabling Remote Desktop (05:22)
39. Searching for Critical Information (05:48)
40. Packet Sniffing (06:48)
41. Pivoting (10:02)
42. Port Forwarding (08:47)
43. Meterpreter Scripts (04:42)
44. Meterpreter Python Powershell Extension (11:18)
45. Maintaining Access (01:58)
46. Interacting with the Registry (06:37)
47. Keylogging (07:04)
48. Antivirus Evasion and Cleaning (02:46)
49. MSFvenom (07:06)
50. MSFVenom (04:13)
51. MSFVenom Using Encoders Using Custom Executable Template (05:31)
52. Using Custom Payload Generators (08:33)
53. Cleaning Events and Security Management Logs (03:35)
54. Deceiving File System Using Timestomp (06:06)

11. Creating Malicious Files
1. Creating Malware and Terminologies (03:37)
2. MSFvenom Part 1 (14:09)
3. MSFvenom Part 2 (02:25)
4. Veil Installation (02:36)
5. Veil in Action (05:12)
6. TheFatRat Installation (04:19)
7. TheFatRat in Action (11:08)
8. TheFatRat Overcoming a Problem (00:46)
9. Embedding Malware in PDF (04:04)
10. Embedding Malware in WORD (09:21)
11. Embedding Malware in Firefox Add-on (07:02)
12. Empire Installation (04:07)
13. Empire in Action Part 1 (08:13)
14. Empire in Action Part 2 (04:24)
15. Exploiting Java Vulnerabilities (02:24)
16. Social Engineering Toolkit (06:34)
17. Sending Fake Emails - Phishing (01:11)
18. Vishing - Voice Phishing (03:03)

12. Password Cracking
1. Pass the Hash Hack Even There is No Vulnerability (04:00)
2. Pass the Hash Preparation (03:50)
3. Pass the Hash Gathering Some Hashes (02:15)
4. Pass the Hash Try Other Assets (10:25)
5. Collecting Sensitive Data in Post-Exploitation Phase (06:52)
6. Collecting Sensitive Data - Some Real World Examples (01:40)
7. Introduction to Password Cracking (03:06)
8. Password Hashes of Windows Systems (03:30)
9. Password Hashes of Linux Systems (02:33)
10. Classification of Password Cracking (02:12)
11. Password Cracking Tools (00:08)
12. Hydra to Crack a Web App's Password (10:02)
13. Introduction to Cain and Abel (01:01)
14. Cain for Offline Cracking - Step 1 Importing Hash Files (02:39)
15. Cain for Offline Cracking - Step 2 Gathering Hash Dumps (04:40)
16. Cain for Offline Cracking - Step 3 Importing Hash Dumps into Cain (04:31)
17. Cain for Offline Cracking - Step 4 A Dictionary Attack (04:19)
18. Cain for Offline Cracking - Step 5 A Brute Force Attack (03:32)
19. John the Ripper (07:28)

13. Web Hacking
1. Current Issues of Web Security (08:52)
2. Principles of Testing (05:29)
3. Types of Security Testing (09:43)
4. Guidelines for Application Security (05:57)
5. Laws and Ethic (02:52)
6. Requirements and Overview of Lab (03:54)
8. Installing VMware Workstation Player (07:32)
9. Installing Kali Linux on VMware Workstation Player (07:38)
10. Installing Vulnerable Virtual Machine BeeBox (08:04)
11. Connectivity and Snapshots (07:18)
12. Modern Technology Stack (03:05)
13. Client-Server Architecture (03:55)
14. Running a Web Application (02:17)
15. Core Technologies Web Browsers (09:47)
16. Core Technologies URL (03:06)
17. Core Technologies HTML (04:37)
18. Core Technologies CSS (02:18)
19. Core Technologies DOM (04:08)
20. Core Technologies JavaScript (03:27)
21. Core Technologies HTTP (16:43)
22. Core Technologies HTTPS and Digital Certificates (06:33)
23. Core Technologies Session State and Cookies (03:34)
24. Attack Surfaces (02:33)
25. Introduction to Burp Downloading, Installing and Running (07:53)
26. Introduction to Burp Capturing HTTP Traffic and Setting FoxyProxy (09:37)
27. Introduction to Burp Capturing HTTPS Traffic (03:11)
28. Intro to Reconnaissance (03:31)
29. Extract Domain Registration Information Whois (04:20)
30. Identifying Hosts or Subdomains Using DNS Fierce & Theharvester (06:08)
31. Detect Applications on The Same Service (01:10)
32. Ports and Services on The Web Server (08:44)
33. Review TechnologyArchitecture Information (04:37)
34. Extracting Directory Structure Crawling (08:17)
35. Minimum Information Principle (02:56)
36. Using Search Engines Google Hacking (06:10)
37. Definition (02:37)
38. Creating a Password List Crunch (07:32)
39. Differece Between HTTP and HTTPS Traffic Wireshark (03:43)
40. Attacking Insecure Login Mechanisms (09:12)
41. Attacking Insecure Logout Mechanisms (04:50)
42. Attacking Improper Password Recovery Mechanisms (05:50)
43. Attacking Insecure CAPTCHA Implementations (08:40)
44. Path Traversal Directory (06:44)
45. Path Traversal File (05:41)
46. Introduction to File Inclusion Vulnerabilities (06:23)
47. Local File Inclusion Vulnerabilities (06:11)
48. Remote File Inclusion Vulnerabilities (05:51)
49. Http Only Cookies (07:15)
50. Secure Cookies (03:48)
51. Session ID Related Issues (01:58)
52. Session Fixation (05:37)
53. Introduction Cross-Site Request Forgery (07:08)
54. Stealing and Bypassing AntiCSRF Tokens (07:59)
55. Definition (03:02)
56. Reflected Cross-Site Scripting Attacks (09:42)
57. Reflected Cross-Site Scripting over JSON (06:24)
58. Stored Cross-Site Scripting Attacks (09:56)
59. DOM Based Cross-Site Scripting Attacks (10:04)
60. Inband SQL Injection over a Search Form (14:24)
61. Inband SQL Injection over a Select Form (08:22)
62. Error-Based SQL Injection over a Login Form (06:47)
63. SQL Injection over Insert Statement (07:07)
64. Boolean Based Blind SQL Injection (06:53)
65. Time Based Blind SQL Injection (05:34)
66. Detecting and Exploiting SQL Injection with SQLmap (11:30)
67. Detecting and Exploiting Error Based SQL Injection with SQLmap (05:10)
68. Detecting and Exploiting Boolean and Time Based Blind SQL Injection with SQLmap (08:02)
69. Command Injection Introduction (05:35)
70. Automate Command Injection Attacks Commix (05:43)
71. XMLXPATH Injection (14:07)
72. SMTP Mail Header Injection (06:51)
73. PHP Code Injection (06:00)
74. Heartbleed Attack (06:29)
75. Attacking HTML5 Insecure Local Storage (04:58)
76. Druppal SQL Injection Drupageddon (CVE-2014-3704) (07:49)
77. SQLite Manager File Inclusion (CVE-2007-1232) (04:52)
78. SQLite Manager PHP Remote Code Injection (02:55)
79. SQLite Manager XSS (CVE-2012-5105) (06:44)
80. Bypassing Cross Origin Resource Sharing (09:04)
81. XML External Entity Attack (08:02)
82. Attacking Unrestricted File Upload Mechanisms (07:05)
83. Server-Side Request Forgery (06:35)
[/spoiler]
Файлы примеров: не предусмотрены
Формат видео: MP4
Видео: AVC, 1280x720, 16:9, 30fps, 950kbps
Аудио: AAC, 44.1Hz, 62.8kbps, stereo
[spoiler="Скриншоты"]







[/spoiler]