Learn Ethical Hacking From Scratch

This is a teaser lecture, in it I show you an example of the things you'll be able to do at the end of the course, in this lecture I show you how to hack into a Windows 10 machine and turn on its web cam without asking the user to do anything.

As this is a teaser, I won't be going into details about how this is achieved, but don't worry about that as I will break this down to you through out the course and you will understand exactly how to do it.

This is just one example, by the end of the course you'll learn much more attacks and you'll be able to target all operating systems.

Welcome to the course, this lecture will give you a full outline of the structure of the course, and will give you an over view of what you will learn in each section.

In this lecture you will learn what is meant by a hacker and what is the difference between white hat, grey hat and a black hat hacker. We will talk about why do we teach/learn hacking, benefits of it and job opportunities.

In this course, we will be using a number of operating systems, Kali for hacking and 2 others as target machines, in this section you will learn how to install all of these machines as virtual machines inside your current operating system, this allows us to use all of the machines at the same time, it also completely isolates these machines from your main machine therefore your main machine will not be affected if anything goes wrong.

Everything shown here will work on Windows, Linux and OS X.

This lecture will introduce you to the hacking operating system that we will be using throughout the course; Kali Linux. You will learn what it is, how to download it, and how to enable virtualisation on your system to run it as a virtual machine.

This lecture will teach you how to install Kali Linux as a virtual machine in VMware Workstation Player on Windows.
VMware is the software that we will use to install different operating systems inside our current operating system as virtual machines. This will be very useful as you can use it to test and practice what you learn in this course.

This lecture will teach you how to install Kali Linux as a virtual machine in VMware Fusion on Mac OS.
VMware is the software that we will use to install different operating systems inside our current operating system as virtual machines. This will be very useful as you can use it to test and practice what you learn in this course.

This lecture will teach you how to install Kali Linux as a virtual machine in VMware Workstation Player on Linux.
VMware is the software that we will use to install different operating systems inside our current operating system as virtual machines. This will be very useful as you can use it to test and practice what you learn in this course.

In this lecture we will have a basic look on Kali linux just to get you comfortable with using it.

You will learn how to use its main applications, browse files, connect to the internet ....etc.

In this lecture you will learn how to interact with the linux terminal and run linux commands.

This is an introduction lecture for the network penetration testing section, it will give you an overview of the structure of this section and what you will learn in it

Before jumping to network hacking you need to know some basics about networks, in this lecture you will learn how networks work and how devices communicate with each other.

This video will teach you how to connect a USB device to Kali, as an example I will be connecting a wireless adapter to it so I can interact with wireless networks and try to hack them form Kali.

MAC address (Media Access Control) - is a unique identifier assigned to network interfaces.

In this lecture you'll learn what is is, how its used, and how to change it using Kali Linux.

This lecture will clarify why is it possible to capture any packet around us even if it's not directed to our device, you will learn about two wireless modes: monitor and managed mode, you shall learn what is the difference between them, when do we use each of them and how to correctly enable monitor mode on your wireless card.

This is the first lecture in the "pre connection section", in this lecture you will learn how to use airodump-ng to see all the access points (WiFi Networks) and associated clients that are within your wireless range and gather information about them.

In this lecture you will learn what are the 2 bands used on WiFi networks and how to use airodump-ng to capture data sent over these bands

In this lecture , we shall learn how to launch airodump-ng on a specific AP , and store all packets in a capture file.

Deauthentication attacks allow us to disconnect (disassociate) any client that is connected to any network that is within our wifi range even if the network uses encryption (such as WEP/WPA/WPA2) and even if we do not know the encryption key (the WiFi password).

In this section we shall learn how to break WEP/WPA/WPA2 encryption and determine the network key.

This lecture explains the weaknesses in WEP encryption and how we can use these weaknesses to break it and hack Wi-Fi networks that use it.

In this video we shall learn the basics of cracking WEP encryption and you'll learn how to hack an active Wi-Fi network that uses WEP.

In this lecture we shall learn the theory behind cracking WEP encrypted APs with no or idle clients.

To do this we will inject packets in the traffic, but before we can do that we need to authenticate our wifi card with the target AP so that it does not ignore our requests as AP's only accept packets from associated devices, therefore we shall learn how to fake authenticate our wifi card with the target AP so that it starts accepting packets from us.

This method can be used to crack idle or clientless AP's .

In this method , after successfully associating with the target AP , we will wait for an ARP packet , we will then capture this packet and inject it into the traffic , this will force the AP to generate a new ARP packet with a new IV , we capture this new packet and inject into the traffic again , this process is repeated until the number of IV's captured is sufficient enough to crack the key.

This is an introduction to WPA/WPA2 cracking , we shall learn the main difference between WPA2 and WEP and why WPA2 is more difficult to crack.

In this lecture we shall learn how to exploit the WPS feature to crack WPA and WPA2 encrypted AP's without a wordlist attack and without the need to any connected clients.

In this lecture we shall learn how to capture the handshake from the target AP.

To crack WPA/WPA2 we need to use a wordlist, you can download ready wordlists from the internet or create your own as shown in this lecture.

In this lecture we will use the wordlist created in the previous lecture to crack the WPA2 key using aircrack-ng.

In this lecture you will learn how to secure your network and protect it from the above attacks. 

In this lecture you will learn how to access your router's admin panel and configure it correctly to protect it from the above attacks and make it nearly impossible to hack.

This is an introduction to the post-connection attacks section, it will give you an outline of what we shall learn in this section and go over some important notes.

In this lecture you will learn how to set up a virtual Windows machine to try and hack into it to practice penetration testing.

Information gathering is one of the most important steps in penetration testing. In this lecture we will learn how to use netdiscover to discover devices connected to the same network as us, we will be able to find their IP and MAC address.

In this lecture we shall learn how to use zenmap (the GUI for nmap) to discover all connected devices and gather detailed information about these devices, such as their operating system, open ports and even services using these ports.

In this lecture you'll learn how to use Zenmap to gather even more information such as exact programs running on each open port, the operating system and more!

In this video we shall learn about one of the most dangerous and effective attacks that you can launch on a network; (ARP Spoofing) , we shall learn the theory behind ARP poisoning, how does it work and how it can be used to redirect the flow of packets and place us in the middle of the connection.

In this lecture we will learn how to use arpspoof to do a basic ARP poisoning attack and redirect the flow of packets in the network. 

This video shows you how to properly install bettercap on Kali Linux, and gives you a basic overview on how to start it and interact with it.

In this lecture you will learn how to configure and use modules in bettercap.

As an example you'll learn how to ARP poison a target client using the arp spoof module.

In this lecture you'll learn how to configure and use the sniff module in bettercap to spy on devices connected to the same network, so you'll learn how to see all urls they load, images, usernames, passwords and more!

In this lecture you'll learn how to create your own MITM scripts, also known as bettercap caplets, in this example you'll learn how to create a caplet to automatically spoof clients on your network to place you in the middle of the connection and start a sniffer to spy on these clients and see all the data they send/receive including usernames and passwords.

In this lecture you'll learn how to use the caplet you configured in the previous lecture to bypass HTTPS, this'll allow you to capture passwords entered on HTTPS enabled web pages such as Linkedin and Stackoverflow.

Really big websites such as Facebook and Twitter use Strict Transport Security (HSTS),  modern browsers come with a list of websites that use HSTS and therefore when we use the method shown in previous lectures the browser will either refuse to load HSTS websites OR load them over HTTPS.

In this lecture you'll learn how to use a custom version of the hstshijack caplet to partially bypass HSTS, this will allow you to capture data sent to and from websites that use HSTS such as Facebook.

This lecture zooms in to cover the little tiny details to help you understand how to bypass HSTS if the target uses Firefox.

This lecture zooms in to cover the little tiny details to help you understand how to bypass HSTS if the target uses Chrome browser.

In this lecture we shall learn how to control DNS requests, this allows us to redirect requests to any other location, this can be very useful as it can be used to redirect computers to fake websites, fake updates, fake logins ...etc. 

In this lecture you will learn how to inject Javascript code into the target browser, this is vey dangerous as it allows us to run a large number of attacks using javascript codes (more on this later), in this lecture we'll focus on injecting a simple javascript code.

This video teaches you how to run all of the attacks shown above using a graphical user interface that is easy and intuitive to use.

Wireshark is a network protocol analyser, in this lecture we will have a basic overview on it, you will learn why is it useful and how to use it with MITM attacks or use it to analyse a capture file that contains data that you already sniffed.

I this lecture you will learn how to use Wireshark to sniff & analyse data (traffic) sent/received by any client in your network.

In this lecture we will continue using Wireshark, you will learn how to analyse the captured data, trace packets and read details of each.

In this lecture you'll learn how to filter sniffed data and extract useful information such as usernames and passwords.

Fake access points can be handy in many scenarios , one example is creating an open AP , this will attract a lot of clients , many of which will automatically connect to it. Then we can sniff all the traffic created by the clients that connect to it , and since its open , the traffic will not be encrypted !

This lecture will explain the theory behind creating a fake AP and what do we need to make it work.

In this lecture you will learn how to create a fake AP using a tool called Mana-Toolkit.

In this lecture we shall learn two methods to detect ARP poisoning attacks.

In this lecture we shall learn how to use Wireshark to detect ARP Poisoning attacks and other suspicious activities in the network, we will also learn how to protect devices from ARP Poisoning attacks.

This video teaches you an easy and free method to protect yourself from the MITM attacks shown earlier.

This video goes one step further and shows you how to take your security to the next level by teaching you how to encrypt all the data that you send and receive to fully protect yourself from MITM attacks.

This is an introduction to the gaining access section in which you'll learn a number of methods to gain access to any computer device regardless of its type.

In this lecture you will learn how to install a vulnerable operating system (Metasploitable) as a virtual machine so we can use it to practice penetration testing in future lectures.

Server side attacks allow you to gain access to a target computer without user interaction, in this section you will learn a number of methods to launch server side attacks and gain full control over your target without user interaction.

In this lecture we will have a look on a basic example of hacking a target computer, we will use Zenmap to gather information and discover the vulnerability, then you'll learn how to research and exploit a mis-configured service to hack the target.

Metasploit is a huge penetration testing framework, in this lecture you will learn  how to use it to exploit a vulnerable target and gain full control over it.

In this lecture we will use a more complex vulnerability to gain full access to a vulnerable device using Metasploit.

Nexpose is a vulnerability management framework, it allows us to discover, assess and act on discovered vulnerabilities, it also tells us a lot of info about the discovered vulnerabilities, weather they are exploitable and helps us write a report at the end of the assessment.

This lecture will teach you how to launch a scan using Nexpose, you will learn how to setup your target(s) and configure scan to suit your goals.

In this lecture we will analyse the scan results obtained from the previous video and see how to generate various types of reports.

In this lecture we'll formalise everything we done so far and go over the general server-side attacks methodology.

This section will teach you a number of methods to gain control over target computer using client side attacks.

Client side attacks require user interaction, this means the target user has to do something for our attack to work, for example install an update or download a file.

In this lecture you will learn how to download and install Veil Framework.

This lecture will give you an overview on Veil Framework and its basic commands.

You will also learn what is a payload and the different types of payloads that can be generated with Veil. 

In this lecture you will learn how to create a backdoor that is not detectable by antivirus programs, this is very important in client side attacks as we will be using this backdoor in future videos to try and gain control over the target system.

In this lecture you will learn how to listen for connections coming from the backdoor we generated in the previous lecture.

Finally we will test the backdoor that we generated on a Windows machine and make sure that it works as expected.

In this lecture you will learn how to backdoor executables downloaded by any computer in your network on the fly, so when the target user runs the downloaded program, the program that they expect will run, but at the same time our backdoor will run in the background.

Note: you need to be the man in the middle for this method to work.

This lecture will teach you how to protect yourself from the backdoor delivery methods explained in the previous videos.