Full Ethical Hacking Course

Install Kali Linux in Oracle VirtualBox by downloading the 64-bit OVA and importing the appliance. Explore information gathering, vulnerability analysis, and web application analysis tutorials within the course.

Learn to perform network discovery with Nmap on Windows and Kali Linux, identify internet of things devices, and weaponize vulnerabilities via Metasploit for ethical hacking and post-exploitation.

Learn how ngrok exposes local servers to the internet by automating domain names and forwarding to local IPs and ports, with setup for Apache web server.

Explore deploying Kali Linux on AWS using EC2, configure security groups for SSH and RDP access, and set up a graphical remote desktop to manage the instance.

Explore Kali Linux as an offensive security operating system, uncover its tool categories from information gathering to post exploitation, and learn to design ethical hacking lab environments for enterprise networks.

Install Kali Linux natively on Windows 10 to speed up ethical hacking and penetration testing, using the Microsoft Store and a Windows Linux app, then run Linux commands.

learn to use nmap for network discovery, banner grabbing, port scanning, and service version detection to map ports, devices, and operating systems, with scripting and evasion techniques.

Explore how to detect network devices from a Windows environment using built-in commands like ipconfig, arp, and net view /all, and identify devices via IP addresses and subnets.

Learn to uncover devices on your home network using Linux, Nmap scan, and ARP scan to map IP ranges, identify hosts and services, and spot backdoors.

Learn how web application firewalls protect web servers by filtering inputs, and detect and fingerprint WAFs using Nmap scripts such as http waf detect and http waf fingerprint.

Master recon-ng to accelerate reconnaissance by gathering credentials, user data, subdomains, and robots.txt and sitemap.xml details using marketplace modules in an interactive shell.

Explore recon-ng 2021 to aggregate open-source intelligence, load modules, and perform domain and subdomain discovery with tools like Shodan and GitHub for faster information gathering.

Explore reconnaissance and information gathering with Maltego in Kali Linux, using a visual graph and transforms to map domains, emails, IPs, subdomains, and server technology, accelerating asset discovery.

Explore android studio setup, install the android sdk, and create and run android virtual devices and emulators to test apk files, simulate device configurations, and support ethical hacking.

Run android apps on your PC using Android Studio, the Android Virtual Device Manager, and adb to install and test apk files like WhatsApp.

Explore the Android Debug Bridge tutorial to communicate with Android devices using adb commands, shell access, and tools like Netcat, Activity Manager, Package Manager, Device Policy Manager, and screen cap.

Learn to use a NodeJS-powered Android management suite to remotely access and manage hundreds of Android devices, build and deploy APKs, and control device settings from a centralized admin interface.

Learn to create an Android Meterpreter reverse tcp payload, host an apk, use social engineering to install it, and remotely dump SMS from a target phone.

Generate an Android APK payload with msfvenom, host it on an Apache server, and set up a metasploit listener to obtain a Meterpreter shell on the target device.

demonstrates hiding an Android app with the Metasploit framework, generating an APK, delivering it via a web server, and using a reverse Meterpreter to conceal the app from users.

Reverse engineer a mobile app by converting the APK to a jar and inspecting the source to uncover input validation issues and sql injection risks, including exposed credentials.

Master reverse engineering of mobile apps by converting APKs to readable formats, inspecting code with decompilers, and uncovering insecure data storage in shared preferences and sqlite databases.

Learn how input validation issues in a mobile app can expose sensitive data by manipulating inputs to access internal storage, SD card, and hidden files via adb shell.

Learn mobile application security through hands-on penetration testing, exploring insecure data storage, hard coding issues, and input validation vulnerabilities using ADB and a vulnerable app.

Explore mobile application penetration testing with a focus on input validation vulnerabilities and sql injection in the DVR app, using adb logcat insights and server-side database considerations.

Explore mobile security testing by invoking app components externally using ADB, examining access control flaws and how to view API credentials in a vulnerable Android app.

Install scrcpy on Linux, connect your Android device via USB, and use ADB to verify devices, then mirror and control the Android screen from your Linux box.

Track a mobile device using gps via the lemon colonics management platform. Install the apk, grant location permissions, and monitor movements with server updates.

Install the Ghost framework on Linux, set executable permissions on install.sh, and run the installer to enable Android Debug Bridge-based command and control.

Learn to reset Android lock screen without a password using Android Studio, ADB, and SQLite3 to disable the lock and recover access.

Explore metasploit framework basics: architecture, modules, exploits, payloads, and post exploitation; understand vulnerability, exploit, and meterpreter payloads to gain access and perform privilege escalation.

Explore post-exploitation with the Metasploit framework, including privilege escalation, persistence, and system discovery using Windows commands, net tools, Mimikatz, and hash dumping.

Explore post-exploitation keystroke logging with Metasploit on Windows 10, including migrating into a user process to start keylogging and dump keystrokes and credentials.

Learn to monitor a remote user's activity in real time using Metasploit's post-exploitation features, including screen sharing after migrating to the user process.

Explore Nmap and Zenmap to map an enterprise network, discover devices and running services, assess exposure, and practice vulnerability exploitation with Metasploit and Java RMI.

Explore how to bypass login screens using sql injection payloads and word lists, while practicing web application penetration testing and understanding OWASP top ten concepts.

Explore how to use the Metasploit framework and local exploit suggester to escalate from a limited user to root on a Linux server, leveraging shellshock and post exploitation techniques.

Explore how the Empire framework delivers a Windows payload, builds a botnet command and control channel via an Http listener, and enables post-exploitation with agents and screen capture.

Learn how to reactivate the default user zero on Windows 10, set its password, and run commands and processes as that user using net user and runas for penetration testing.

Learn to migrate a Meterpreter shell into a separate Windows process to gain persistence and evade detection during post-exploitation.

Conduct a hands-on penetration test using Kali Linux, Nmap, Nikto, and Metasploit to identify services, exploit a PHP CGI vulnerability, and obtain a Meterpreter shell on a vulnerable virtual machine.

Demonstrate address resolution protocol poisoning to perform a man-in-the-middle attack, sniff packets, capture login credentials, and explore defenses to secure enterprise networks.

Explore ethical hacking techniques using metasploit to assess Windows security, exploit vulnerabilities like Ms17 010, and practice password reset and privilege access on Windows 10.

Explore how file sharing enables exposure to smb brute-force attacks on Windows and Linux, and learn to audit sessions, secure passwords, and disable sharing to protect devices.

Learn to create a fully undetectable payload that bypasses antivirus using Colinux and MSF venom, generating a Windows reverse shell with Meterpreter on a Kali Linux host.

Master post-incident forensics to recover deleted files on Windows using Metasploit and drive enumeration to locate, download, and restore data.

Explores bypassing command prompt and PowerShell restrictions on Windows, using local group policy tweaks, ftp workarounds, executable renaming, and hash value rules to run PowerShell.

Explore SQL injection techniques, bypass login with crafted payloads using Burp Suite, and understand how web server architecture and database interactions enable data extraction.

Learn how cross-site scripting injects malicious JavaScript into browsers by exploiting unsanitised input; explore types: start, reflected, and DOM, plus payloads like alerts, cookies, and iframes.

Learn how cross-site request forgery exploits a logged-in user's session by tricking them via a fake site, leveraging cookies, forms, and external requests.

Explore JSON web tokens used for authentication, covering header, payload, and signature; learn how token structure, signing, and browser storage impact access control and token manipulation in web apps.

Explores exploiting database servers such as MySQL and Microsoft SQL, highlighting weak authentication, dormant accounts, and cloud deployments with improper access controls, using Metasploit for scanning and enumeration.

Explore the web vulnerabilities discussed in the lecture, including injection, broken authentication, and cross-site scripting, and learn how juice shop demonstrates sql injection and login bypass via a score-based challenge.

Explore web application security with OWASP ZAP on Mutillidae; automate vulnerability discovery for injection, cross-site scripting, and path traversal, review alerts, and learn payloads for rapid hardening.

Map a vulnerable web app through a normal user journey—registration, login, add to basket, checkout—and identify misconfigurations, databases, and SQL injection risks in a penetration testing scenario.

Explore web application penetration testing in a vulnerable Juice Shop by inspecting network data, APIs, and session storage to view other users' details and shopping carts.

Explore OWASP JavaScript concepts for mapping web apps by inspecting JavaScript and network activity, analyzing minified code, redirections, and data access points along the customer journey.

Navigate the web developer toolkit, including inspector, console, debugger, and network, to inspect a vulnerable juice shop app, perform SQL injection, and reveal emails and masked credit card data.

Discover how to use the OWASP ZAP proxy to automatically scan Mutillidae, identify the OWASP top ten web vulnerabilities, view attacker payloads, and generate HTML or XML reports for stakeholders.

Explore ethical hacking techniques to assess database security with metasploit, using nmap for discovery and enumerating mysql, postgresql, and mongodb databases for usernames and passwords.

Demonstrate sqlmap driven security testing on a vulnerable e-commerce site using Kali Linux and Burp Suite to map databases, tables, and sensitive data like passwords and credit cards.

Learn to identify devices on a wifi network using Nmap, assess SMB sharing on ports 139 and 445, and test access with Metasploit and port knocking.

Explore how json web tokens can be manipulated and combined with sql injection to hijack and delete user accounts in a controlled lab environment.

Learn how sql injection targets a web application's database using sqlmap and burp suite to enumerate databases and tables, reveal usernames, emails, and passwords, and decode base64-encoded credentials.

Set up wireless on Kali Linux with two adapters in VirtualBox, enable promiscuous or monitoring mode, and use Aircrack and Fern Wi-Fi cracker for wireless scanning and attacks.

Explore network sniffing with Bettercap to reveal IP addresses, gateways, and device vendors, using arp spoofing and net dot sniff for traffic analysis.

Learn to install and configure the WiFi pineapple nano, a modular wireless access point, using two adapters to scan for flaws and rogue devices and deploy add-on modules.

Harness the WiFi Pineapple Nano for wireless auditing and penetration testing. Explore modules, SSID pools, and evil portal techniques to assess and demonstrate network security.

Learn to set wifi interfaces to monitor mode, capture the WPA handshake, and crack passwords using Aircrack and rockyou wordlists, while noting that hacking is illegal.

Master Google hacking techniques to perform precise searches for ethical hacking and penetration testing resources using operators like quotes, or, and, site:, cache, filetype, inurl, and related queries.

Learn how to use the Social Engineering Toolkit to clone login pages, harvest credentials, and simulate websites like Facebook, Google, and Twitter to understand credential harvesting and phishing techniques.

Demonstrate how the browser exploitation framework uses social engineering and popup login prompts to harvest usernames and passwords, then authenticate to platforms with captured credentials.

Explore the dark web via Tor, using dark web search engines and hidden services, assess hacking marketplaces, and compare dark web and normal web while emphasizing safe browser security.

Explore how phishing websites deceive users by leveraging cross-site request forgery to perform actions on an authenticated account, using the webgoat lab to practice ethical hacking techniques.