آموزش هکر اخلاقی خبره v8

This Certified Ethical Hacker v8.0 video training course with James Conrad covers how to legally protect against hacker security breaches, including virtualization, reconnaissance, footprinting, social engineering, scanning, sniffing, cryptography, and more. Recommended skills: Familiarity with Windows of all versions back to Windows XP and Windows Server 2003 Familiarity with Linux is not necessary but recommended (a video early in the course provides basic Kali Linux training that is sufficient for the learner to complete the course) Recommended equipment: Whatever equipment is being used to view the videos (except a smartphone or tablet) is sufficient to create a basic lab environment in which the learner can mirror demonstrations in the videos. This would also require installation of any virtualization software such as Parallels, VMware, Hyper-V, or VirtualBox. High-speed internet is recommended to download Kali Linux and some of the additional tools. Related certifications: None Related job functions: Network Administrator Systems Administrator Systems Engineer Help Desk Most IT professionals are far too busy with daily tasks and projects to commit themselves to a serious study of security. Problem is, hackers are quite serious about your security and how to exploit it. If a security breach occurs at a company, it can cost millions of dollars, the loss of a priceless reputation, private customer information, and the very jobs of the IT professionals who often get blamed for weak security practices. One of the best ways to ensure good security is to know what hackers do to circumvent it. Security concepts and facts alone do not protect your systems. However, knowledge and experience in exactly how hackers exploit weaknesses will help you to potentially avoid embarrassing security breaches in the future. 1. Course Introduction (00:04:24) This brief Nugget provides an overview of the exciting subjects and hacks you will learn about in this course. 2. Introduction to Ethical Hacking (00:20:06) In this Nugget, you will learn the importance of gaining security and hacking knowledge. We will look at notable security compromises, hacks against governments, and large retail organizations. We also will look at a few laws that are designed to provide a penalty for hacking and other illegal electronic use. 3. Terms and Types of Hackers (00:27:02) In this Nugget, you will learn various hacking terms including: hacking, hacker, black hat, cracker, malicious hacker, white hat, ethical hacker, penetration tester (pen tester), gray hat, phreak, script kiddie, vulnerability, exploit, proof of concept, 0day, zero-day, vulnerability scan, black box test, white box test, gray box test, hacktivist, hacktivism, suicide hacker, red team, insider threats, pure insider, insider associate, and insider affiliate. 4. Virtualization (00:26:53) In this Nugget, you will learn the advantages of using virtualization and the basic UI of several virtualization products. Although virtualization is not an exam topic, it is an important IT skill and very useful for hackers. 5. Linux (00:36:42) In this Nugget, we see why Linux and particularly Linux distributions like BackBox are the preferred hacking OS platform. Although topics here are not specifically listed in the exam objectives, the skills are an important part of becoming adept at hacking with Linux. Topics include: starting Linux, using startx to launch a GUI, file management using cp, rm, mv. You will also learn to edit text using cat, vi, vim, and Kate among others. You will learn to change network properties both from the command line and the UI, and to install applications using the apt-get command. 6. Reconnaissance: Overview (00:17:27) In this Nugget, we look at the five stages of a hack, including Reconnaissance, Scanning, Gaining Access, and Covering Tracks. We also look at the purpose of broad techniques that are involved in reconnaissance. You also will learn the difference between active and passive reconnaissance. 7. Reconnaissance: Powerful Resources (00:32:04) In this Nugget, we look at powerful reconnaissance resources. This includes both passive resources such as public records, corporate filings, the EDGAR database, social media such as Facebook, Twitter, forums, support web sites, ICANN, regional internet registries, and whois. We also look at how to use job searches as a social engineering tactic to gain information from an organization. You can also mirror sites using a variety of software products made for the purpose so that you can perform offline attacks against the site. DNS records can provide abundant information and we'll see how to get that data by zone transfer or brute force. You will also see the value in a website robots.txt file. 8. Footprinting and Countermeasures (00:28:32) In this Nugget, we use tools such as Nikto, HTTPrint, Nessus, Google Hacking, and the Google Hacking Database to footprint systems. We also view countermeasures that can help an IT organization to mitigate the chances of being footprinted and hacked. 9. Social Engineering (00:37:29) This Nugget addresses social engineering. We start by defining social engineering and identifying effective psychological factors. Then we discuss several effective social engineering methods, and countermeasures to social engineering. We conclude with a demonstration of how to use a social engineering email/web link and take control of a victim's computer. 10. Scanning Overview (00:38:25) In this Nugget, we look at the Certified Ethical Hacker scanning methodology, scanning terms, firewalking to determine open ports on a firewall, the 3-way handshake and closing sessions that take place during normal TCP communications, firewall behavior for open and closed ports, and war-dialing. 11. Scanning Demos (00:48:55) In this Nugget, we look at alternate scanning tools such as netcat, cryptcat, recub, hping2, hping3, nikto, Rapid7 Expose, and netdiscover. Then we look at an overview of the Nmap tool and the various port states. We follow this with a demonstration of several common scan types and options. Some of these are quite noisy and obvious, but we look at a few ways to make the scans more subtle, and even deflect attention from ourselves in a scan entirely by using a side-channel scan (AKA idle scan). 12. Enumeration (00:47:32) In this Nugget, we examine enumeration and how it specifically identifies many properties of a target system. We also looked at how enumeration fits into the System Hacking Cycle. The System Network Monitoring Protocol (SNMP) is a powerful service for administrators, but is equally useful for hackers who want a full and accurate enumeration of a target system. This section is full of many tool demos to view SNMP information. We look at banner grabbing, how it is useful, and how to use NetCat to perform it. We conclude with Shodan, and how it is a powerful tool to use on the public internet. 13. Cracking Windows Passwords (00:37:26) In this Nugget, we examine how Windows passwords are hashed and stored. We look at how to extract the hash from a Windows machine and then use the hashes in an offline attack. Cracking passwords can take place in non-technical ways such as shoulder surfing and guessing, or in technical ways such as dictionary, brute force, or hybrid attacks using software. We use many tools including Pwdump7, samdump2, Cain and Abel, ophcrack, John the Ripper, and more. 14. Password Principles and Cracking Linux Passwords (00:27:36) In this Nugget, we look at the Heartbleed bug that appears in OpenSSL, and also how to scan systems for this vulnerability. We also look at various password principles such as where and how passwords may be obtained, even without cracking attempts. We also look at how to strengthen password policy to make password cracking more difficult. We conclude with cracking the Linux Shadow file using John the Ripper. 15. System Hacking: ADS and Steganography (00:23:31) In this Nugget, we address alternate data streams (ADS) in the NTFS file system and how this can be used to conceal one file inside of another. Similarly, we see that steganography can be used to conceal files or data inside of another file, most often a multimedia or image file. We use steghide and QuickStego for these demonstrations. 16. System Hacking: Keyloggers and Metasploit (00:25:07) In this Nugget, we look at hardware and software keyloggers and have an introduction to the mother of all hacking tools: Metasploit! 17. Malware (00:36:22) In this Nugget, we look at malware such as: viruses, worms, rootkits, trojans, and spyware. We also address the BlackShades remote access tool (RAT). We look at how malware spreads and how to prevent malware on your systems. 18. Hack-O-Rama: Armitage, RAT and Netcat (00:39:16) In this Nugget, you will learn how to configure a very powerful remote access tool. You will use this tool and covertly install it on a victim computer. You will then see how completely under your control the victim is. You will see the flexibility of the Netcat tool and how it can be used to listen for connections in both directions. 19. Hack-O-Rama: Rootkits and Trojans (00:25:01) In this Nugget, you will see how a rootkit is configured, transmitted, and executed on a victim computer. You will also see how to use program to bind the rootkit with an otherwise useful program and infect an unknowing victim's computer with a rootkit. 20. Sniffing Overview (00:25:04) In this Nugget, we look at how to update and/or upgrade Kali Linux, perform raw file carving of deleted files, explore the reasons why sniffing is valuable, how different network devices affect a sniffing attempt, how to sniff on switched networks, and how to prevent sniffing on your networks. In the next Nugget, we will look at actual sniffs in action. 21. Sniffing Demos (00:21:57) In this Nugget, we take knowledge from the previous nugget, Sniffing Overview, and use tools to actually perform sniffing. These tools include: Arpspoof, macof, driftnet, urlsnarf, ettercap, and xplico. 22. Denial of Service (00:34:03) In this Nugget, we look at what Denial of Service (DoS) and Distributed Denial of Service (DDoS) is, reasons that DoS occurs, tools that are used, and how to prevent becoming the victim of a DoS. 23. Hijacking (00:29:48) In this Nugget, we look at hijacking existing sessions users establish to websites. You will learn the essential functions of hijacking and some of the most common tools. You will also learn how to use the sslstrip tool to hijack a secure https session logon in order to collect credentials. 24. Hacking Web Sites and Web Apps: Overview (00:26:42) In this Nugget, we start with a discussion of where we are in the CEH exam objectives as we move forward to the end of the course. We then examine web architecture, techniques used in web hacks, and techniques used in web application hacking. SQL injection and cross-site scripting (XSS) are an integral part of this. 25. Hacking Web Sites and Web Apps: Demos (00:30:20) In this Nugget, we continue the discussion of hacking web sites and web apps. We use a number of tools, such as the OWASP Bad Web Applications Project, WebGoat, Mutillidae, Bodgeit, Tamper Data, Burp Suite, SQL Inject Me, FoxyProxy, and SQLMap. 26. Cryptography (00:39:52) In this Nugget, we look at cryptography. We'll cover how it works, the difference between symmetric and asymmetric algorithms, certification authorities in a Public Key Infrastructure (PKI), public and private key pairs, how to encrypt documents with the Encrypting File System (EFS), BitLocker, and how to bind a certificate to HTTPS web sites. 27. IDS (00:18:04) In this Nugget, we look at Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS), an overview of IDS, IDS vendors, and Snort. (In the next Nugget, we install Snort). We look at Snort basics, how to configure Snort rules, and detecting and avoiding IDS. 28. Snort and Honeypots (00:21:09) In this Nugget, we look at how to install and configure the Snort application and rule sets. Several files are available to subscribers to assist in successfully configuring Snort on Windows. We also look at the purpose and functionality of honeypots. Finally, we install a honeypot and observe the activity on it. 29. Wireless Overview (00:28:29) In this Nugget, we look at an overview of wireless technology and security measures, including hidden Security Set Identifiers (SSID), MAC filtering, Wi-Fi Protected Access (WPA) and WPA2, and important legal ramifications of wireless security. 30. Wireless Demos (00:14:27) In this Nugget, we build upon the wireless overview we saw in the last Nugget. In particular, you will learn how to crack WPA2 passwords and attack Wi-Fi Protected Setup using Reaver to obtain SSIDs and passwords that might otherwise be impossible to obtain.