Welcome this comprehensive Ethical Hacking course!

This course
assumes you have NO prior knowledge in hacking and by the end of it
you'll be able to hack systems like black-hat hackers and secure them
like security experts!

This course is highly practical but it won't neglect the theory; we'll
start with ethical hacking basics, breakdown the different penetration
testing fields and install the needed software (on Windows, Linux and
Mac OS X), then we'll dive and start hacking straight away. From here
onwards you'll learn everything by example, by analysing and exploiting
different systems such as networks, servers, clients, websites .....etc,
so we'll never have any boring dry theoretical lectures.

The course is divided into a number of sections, each section covers a

penetration testing / hacking field, in each of these sections you'll first
learn how the target system works, the weaknesses of this system, and
how to practically exploit theses weaknesses to hack into this system,
not only that but you'll also learn how to secure systems from the
discussed attacks. By the end of the course you will have a strong
foundation in most hacking or penetration testing fields.

The course is divided into four main sections:

1. Network Hacking - This section will teach you how to test the
security of both wired & wireless networks. First, you will learn
network basics, how they work, and how devices communicate with
each other. Then it will branch into three sub sections:

 Pre-connection attacks: in this subsection you'll learn a number

of attacks that can be executed without connecting to the target
network, and without the need to know the network password; you'll
learn how to gather information about the networks around you,
discover connected devices, and control connections (deny/allow
devices from connecting to networks).

 Gaining Access: Now that you gathered information about the

networks around you, in this subsection you will learn how
to crack the key and get the password to your target network
weather it uses WEP, WPA or even WPA2.

 Post Connection attacks: Now that you have the key, you can
connect to the target network, in this subsection you will learn a
number of powerful techniques that allow you to gather
comprehensive information about the connected devices, see
anything they do on the internet (such as login
information, passwords, visited urls, images, videos ....etc), redirect
requests, inject evil code in loaded pages and much more! All of
 these attacks work against both wireless and wired networks. You
will also learn how to create a fake WiFi network, attract users to
connect to it and use all of the above techniques against the
connected clients.

2. Gaining Access - In this section you will learn two main approaches
to gain full control or hack computer systems:

 Server Side Attacks: In this subsection you will learn how to gain
full access to computer systems without user interaction. You will
learn how to gather useful information about a target computer
system such as its operating system, open ports, installed services,
then use this information to discover weaknesses and
vulnerabilities and exploit them to gain full control over the target.
Finally you will learn how to automatically scan servers for
vulnerabilities and generate different types of reports with your
discoveries.

 Client Side Attacks - If the target system does not contain any
weaknesses then the only way to hack it is by interacting with the
users, in this subsection you'll learn how to get the target user to
install a backdoor on their system without even realising, this is
done by hijacking software updates or backdoornig downloadeds on
the fly. This subsection also teaches you how to use social
engineering to hack into secure systems, so you'll learn how to
gather comprehensive information about system users such as their
social accounts, friends, their mails.....etc, you'll learn how to create
trojans by backdooring normal files (such as an image or a pdf) and
use the gathered information to spoof emails so they appear as if
they're sent from the target's friend, boss or any email account
they're likely to interact with, to social engineer them into running
your torjan.

3. Post Exploitation - In this section you will learn how to interact with
the systems you compromised so far. You’ll learn how to access the file
system (read/write/upload/execute), maintain your access, spy on the
target (capture key strikes, turn on the webcam, take
screenshots....etc) and even use the target computer as a pivot to hack
other systems.

4. Website / Web Application Hacking - In this section you will learn how
websites work, how to gather information about a target website (such
as website owner, server location, used technologies ....etc) and how
to discover and exploit the following dangerous vulnerabilities to hack
into websites:
 File Upload.

 Code Execution.

 Local File Inclusion.

 Remote File Inclusion.

 SQL Injection.

 Cross Site Scripting (XSS).

At the end of each section you will learn how to detect, prevent and
secure systems and yourself from the discussed attacks.

All the techniques in this course are practical and work against real
systems, you'll understand the whole mechanism of each technique
first, then you'll learn how to use it to hack into the target system, so
by the end of the course you'll be able to modify the these techniques
to launch more powerful attacks, and adopt them to suit different
situations and different scenarios.

With this course you'll get 24/7 support, so if you have any questions
you can post them in the Q&A section and we'll respond to you within
15 hours.

Notes:
 This course is created for educational purposes only, all the
attacks are launched in my own lab or against systems that I have
permission to test.
 This course is totally a product of Zaid Sabih & zSecurity and no
other organisation is associated with it or a certification exam.
Although, you will receive a Course Completion Certification from
Udemy, apart from that NO OTHER ORGANISATION IS INVOLVED.
What you’ll learn

 135+ ethical hacking & security videos.

 Start from 0 up to a high-intermediate level.

 Learn ethical hacking, its fields & the different types of hackers.

 Install a hacking lab & needed software (on Windows, OS X and

Linux).

 Hack & secure both WiFi & wired networks.

 Understand how websites work, how to discover & exploit web
application vulnerabilities to hack websites.

 Use 30+ hacking tools such as Metasploit, Aircrack-ng,

SQLmap.....etc.

 Discover vulnerabilities & exploit them to hack into servers.

 Hack secure systems using client-side & social engineering.

 Secure systems from all the attacks shown.

 Install & use Kali Linux - a penetration testing operating system.

 Learn linux basics.

 Learn linux commands & how to interact with the terminal.

 Learn Network Hacking / Penetration Testing.

 Network basics & how devices interact inside a network.

 Run attacks on networks without knowing its key.

 Control Wi-Fi connections without knowing the password.

 Create a fake Wi-Fi network with internet connection & spy on

clients.

 Gather detailed information about networks & connected clients

like their OS, ports ...etc.

 Crack WEP/WPA/WPA2 encryptions using a number of methods.

 ARP Spoofing / ARP Poisoning.

 Launch various Man In The Middle attacks.

 Access any account accessed by any client on the network.

 Sniff network traffic & analyse it to extract important info such

as: passwords, cookies, urls, videos, images ..etc.

 Intercept network traffic & modify it on the fly.

 Discover devices connected to the same network.

 Inject Javascript in pages loaded by clients connected to the
same network.

 Redirect DNS requests to any destination (DNS spoofing).

 Secure networks from the discussed attacks.

 Edit router settings for maximum security.

 Discover suspicious activities in networks.

 Encrypt traffic to prevent MITM attacks.

 Discover open ports, installed services and vulnerabilities on

computer systems.

 Hack servers using server side attacks.

 Exploit buffer over flows & code execution vulnerabilities to gain

control over systems.

 Hack systems using client side attacks.

 Hack systems using fake updates.

 Hack systems by backdooring downloads on the fly.

 Create undetectable backdoors.

 Backdoor normal programs.

 Backdoor any file type such as pictures, pdf's ...etc.

 Gather information about people, such as emails, social media

accounts, emails and friends.

 Hack secure systems using social engineering.

 Send emails from ANY email account without knowing the

password for that account.

 Analyse malware.

 Manually detect undetectable malware.

 Read, write download, upload and execute files on compromised

systems.
 Capture keystrokes on a compromised system.

 Use a compromised computer as a pivot to hack other systems.

 Understand how websites & web applications work.

 Understand how browsers communicate with websites.

 Gather sensitive information about websites.

 Discover servers, technologies & services used on target

website.

 Discover emails & sensitive data associated with a specific

website.

 Discover subdomains associated with a website.

 Discover unpublished directories & files associated with a target

website.

 Discover websites hosted on the same server as the target

website.

 Exploit file upload vulnerabilities to gain control over target

website.

 Discover, exploit and fix code execution vulnerabilities.

 Discover, exploit & fix local file inclusion vulnerabilities.

 Discover, exploit & fix SQL injection vulnerabilities.

 Bypass login forms and login as admin using SQL injections.

 Exploit SQL injections to find databases, tables & sensitive data

such as usernames, passwords...etc

 Read / Write files to the server using SQL injections.

 Learn the right way to write SQL queries to prevent SQL

injections.

 Discover reflected XSS vulnerabilities.

 Discover Stored XSS vulnerabilities.

 Hook victims to BeEF using XSS vulnerabilities.

 Fix XSS vulnerabilities & protect yourself from them as a user.

 Discover MITM & ARP Spoofing attacks.

Are there any course requirements or prerequisites?

 Basic IT Skills

 No Linux, programming or hacking knowledge required.

 Computer with a minimum of 4GB ram/memory.

 Operating System: Windows / OS X / Linux.

 For WiFi cracking (10 lectures ONLY) - Wireless adapter that

supports monitor mode (more info provided in the course).

Who this course is for:

 Anybody interested in learning ethical hacking / penetration

testing

 Anybody interested in learning how hackers hack computer

systems

 Anybody interested in learning how to secure systems from

hackers