Become a member

Online Access to 1000+ Courses!

Advanced Ethical Hacking Course

Author : Ric Messier

6.5hrs (101 Lessons) 2013-05-23

This Course can only be played using a subscription. You can play only first 3 chapters for free. Click Here to avail a subscription
This Advanced Ethical Hacking course from VTC will provide direction on tools and techniques for performing ethical hacking (also known as penetration testing). Author Ric Messier will cover Nessus, Nexpose, Nmap, and Metasploit, as well as manual testing techniques. He will also demonstrate Web Application Testing and various tools that will assist in that effort. To begin learning today, simply click on the movie links.

Transcription not available

Course: Advanced Ethical Hacking
Author: Ric Messier
SKU: 34432
ISBN: 978-1-61866-105-0
Work Files: No
Captions: No
Subject: Networking & Security
The first 3 chapters of courses are available to play for FREE (first chapter only for QuickStart! and MasterClass! courses). Just click on the movie link to play a lesson.

Wireless Hacking and Security
Author : Bobby Rogers

9 / 104 2013-05-17

Pricing & availability

Lifetime online access to this course

US$ 39.00

Download for offline access

US$ 79.95

Subscribe to 1000+ courses

Starting at $30/month

Course outline

Introduction

Welcome (01:10)

What This Course Will Cover (02:17)

System Requirements (03:20)

Prerequisites (02:54)

Dradis: Results Tracking

Acquiring Dradis (04:24)

Installing Dradis (02:32)

Using Dradis (04:02)

Adding Notes (02:50)

Categorizing Information (04:10)

Nmap

Review of Scan Types (04:36)

Advanced Scanning (05:14)

Scripting Engine (05:03)

Investigating Scan Types with Wireshark (05:33)

Importing Results to Dradis (03:18)

Nessus

Acquiring Nessus (02:23)

Setting Up Nessus (04:02)

Configuring Nessus (04:30)

Scan Details: Network (04:13)

Scan Details: Credentials / Plugins / Options (04:25)

Scan Details: Web Applications (05:54)

Starting a Scan (03:45)

Reviewing Results (04:49)

False Positives (03:27)

Setting Up Jobs (02:49)

Nexpose

Acquiring Nexpose (03:02)

Setting Up Nexpose (02:13)

Configuring Nexpose (04:22)

Adding Hosts to Nexpose (03:29)

Reviewing Results & Manual Checks (03:30)

Manual Testing

Netcat (04:23)

Protocol Checking (07:52)

SSL_Client (04:48)

SSLScan (04:37)

Nikto (05:00)

Snmpwalk (04:00)

Metasploit

Acquiring Metasploit (02:32)

Setting Up Metasploit (02:01)

Metasploit Web Interface (03:26)

Configuring Workspaces (02:44)

Running Nmap from Metasploit (03:34)

Importing Nessus Results (02:43)

Scanning with Metasploit (03:51)

Looking at Vulnerabilities (02:48)

Searching for Vulnerabilities (02:09)

Running Exploits (02:33)

Post Exploitation Data Gathering (04:08)

Pivoting & Tunneling (03:19)

Writing an MSF Plugin (06:11)

Writing Fuzzers (06:18)

Social Engineering Toolkit (02:06)

Spear Phishing (05:53)

Simple Web Application Testing

Browser Plugins with Chrome (04:21)

Browser Plugins with Firefox (03:49)

Tamperdata (04:36)

Performing Injections with Tamperdata (02:43)

Cookie Data with Tamperdata (05:55)

SQL Inject Me (03:26)

XSS Me (03:25)

Firebug (04:30)

Hackbar (04:00)

Wappalyzer (03:47)

Passiverecon (04:05)

Groundspeed (03:54)

Webgoat

Acquiring Webgoat (02:50)

Practicing Web Application Attacks (02:33)

Basics of Webgoat (03:04)

Working Through Lessons (04:27)

Burpsuite

Acquiring Burpsuite (01:32)

Installing Burpsuite (01:57)

Running Burpsuite & Configuring Your Browser (02:49)

Spidering (03:16)

Passive Scanning (03:10)

Active Scanning (03:20)

Investigating Results (06:32)

Password Attacks (05:20)

Fuzzing Attacks (06:40)

Doing Sequencing (04:34)

Using the Intruder (05:55)

Other Web Tools

Acquiring W3Af (02:17)

Installing W3Af (02:11)

Running W3Af (02:48)

Configuring W3Af (04:28)

Acquiring & Configuring Zed Attack Proxy (ZAP) (02:49)

Quick Start with ZAP (02:50)

Scanning with ZAP (03:06)

Spidering with ZAP (02:39)

Fuzzing With ZAP (03:30)

Injection Attacks

Web Architecture (03:15)

Basics of SQL Injection (04:46)

Manual Testing (03:48)

SQLMap (06:04)

Command Injection (03:24)

Cross Site Scripting (03:49)

Social Engineering Attacks

Spear Phishing (03:53)

Cross Site Request Forgery (04:12)

Rogue Servers (04:15)

Spoofed Certificates (06:05)

Conclusion

Course Wrap Up (02:19)

Next Steps (03:32)

Credits

About the Author (02:36)