The cyberattacks are a problem for businesses today, as, in their databases, Sensitive information is stored – not only personal data, but also other types of information, such as bank account numbers or passwords. Eliminating this problem is becoming an obsession for companies, which is why there has been an increase in demand for professionals so that they can develop tests that enable identify potential gaps security. Now with the Pentesting and Hacking Tools Course you’ll be able to learn all about ethical hacking and to master password recovery and auditing tools, as well as many others, to ensure the cyber security of large companies.
Penetration Testing and Hacking Tools
Introduction
Objectives
-
Monitor the cyberattacks to companies’ systems, Wi-Fi networks or websites, and all stages of the ethical hacking.
-
To study the different types of security the internet or Wi-Fi, and the attacks to which they may be exposed.
-
Audit passwords and learn how to recover them using tools such as hacking such as John the Ripper.
-
Automating web attacks to attack the site and carry out penetration testing on apps using Zed Attack Proxy.
-
Master other hacking tools such as Wireshark, nmap or hydra, amongst others.
Table of Contents
TEACHING UNIT 1. Introduction and Prerequisite Concepts
1. What is ethical hacking?
2. Legal aspects of ethical hacking
3. Ethical hacker profiles
TEACHING UNIT 2. Stages of Ethical Hacking in Attacks on Systems and Networks
Introduction
1. Types of attacks
2. Ethical hacking tools
3. Vulnerability testing
TEACHING UNIT 3. Stages of Ethical Hacking in Attacks on Wi-Fi Networks
Introduction
1. Types of attacks
2. Ethical hacking tools
3. Types of Wi-Fi security
4. Sniffing
TEACHING UNIT 4. Stages of Ethical Hacking in Web Attacks
Introduction
1. Types of attacks
2. Ethical hacking tools
3. Types of web security
4. Types of security testing in web environments
TEACHING UNIT 5. Kali Linux
1. What is Kali Linux and why is it important in IT security?
2. Installing and configuring Kali Linux on a virtual machine
3. An overview of the Kali Linux user interface and directory structure
4. Basic tools and utilities in Kali Linux
5. Basic Linux commands for administration and file management tasks
TEACHING UNIT 6. Nmap
1. What is Nmap and how does it work?
2. Installing and configuring Nmap on Linux operating systems
3. Exploring Nmap’s command-line options and basic syntax
4. Basic Nmap scans
5. Advanced scans with Nmap
TEACHING UNIT 7. MetaSploit
1. What are exploits?
2. What is Metasploit?
3. Using Metasploit on Linux operating systems
4. Metasploit Payloads
5. Generating reports in Metasploit
TEACHING UNIT 8. Wireshark
1. What is Wireshark and how does it work?
2. Installing and configuring Wireshark
3. Packet capture
4. Packet analysis
5. Uses of Wireshark
TEACHING UNIT 9. John the Ripper
1. What is John the Ripper and how does it work?
2. Installing and configuring John the Ripper
3. Entering and verifying passwords
4. Types of attacks
5. Dictionary management
6. Use of salting
TEACHING UNIT 10. Hashcat
1. What is Hashcat and how does it work?
2. Installing and configuring Hashcat
3. Running Hashcat
4. Mangling
5. Rainbow tables
TEACHING UNIT 11. Hydra
1. What is Hydra and how does it work?
2. Installation and configuration
3. Running Hydra
4. Mangling
5. Use of salting and hashing
TEACHING UNIT 12. Burp Suite
1. What is Burp Suite and how does it work?
2. Installing and configuring Burp Suite
3. Vulnerability scanning and mapping
4. Basic scans
5. Advanced scans: Fuzzing and automated penetration testing
TEACHING UNIT 13. Zed Attack Proxy
1. What is Zed Attack Proxy and how does it work?
2. Installing and configuring ZAP
3. Spider Attack
4. Scans
5. Analysis of alerts
TEACHING UNIT 14. SQLmap
1. What is SQLMap and how does it work?
2. Installing and configuring SQLMap
3. Basic use of SQLMap to detect SQL injection vulnerabilities
4. Advanced options and settings in SQLMap
5. Exploiting SQL injection vulnerabilities using SQLMap
6. Prevention and mitigation of SQL injection attacks
TEACHING UNIT 15. Aircrack-ng
1. What is Aircrack-ng and how does it work?
2. Installing and configuring Aircrack-ng
3. Basic use of Aircrack-ng