Subjects:
Cyber Security, Fundamental Cyber Security, Ethical hacking, Pen testing, Vulnerability Assessment and Penetration Testing
Level:
Beginner, Intermediate, Expert, Bachelors/Undergraduate, Adult/Casual learning
Types:
Printable, Professional Development, E-book, PDF Guide
The Complete guide/ COURSE for Certification in Ethical Hacking covering from basics to Penetration Testing
vulnerabilities..,Exploitation, VAPT reporting Scope Analysis, Security Test strategy , Estimation, Remediation, False Positive Analysis & Reporting, CVE
PRE-REQUISITE: No pre-requisite , covers all required basics Like OS & Computer Networks etc... Laptop with
minimum 4GB RAM (8GB recommended)and 300 GB Hard disk for Lab practice (need kali linux, metasploitable linux, ISO windows7 for exploitation modules)
- What is Hacking
- Real Hacker vs. Ethical Hacker
- Principles of Information Security
- Types of Hackers
- Client Server Communication
- Computer, Ports, Examples, HTTP,HTTPS
- Vulnerability, Defect, Severity, Priority
- SDLC- Software Development Life Cycle
- Vulnerability flow ,payloads, File uploads-using kali Linux, ASSET, THREAT, RISK
- IP , IP4 TYPES, IP6, VPN, DHCP, DNS, SMTP, NAT, ARP, proxy
- Phases of Penetration Testing / Pen testing / VAPT, TYPES
- WEB technologies , click jacking vulnerability, Virtualization
- Password Implementation, MFA, Windows Exploitation lab
- Reflected XSS, XSS Stored, File uploads, File Inclusion, Command Execution
- DB queries , w3 schools for Sql , DATABASE hacking Sql injection vulnerability manual and auto –using sqlmap, blind sql, types, preventions for vulnerability learnt from 10-16
- VAPT Tools, real time approach, ZAP, Nikto, BURPSUITE, Brute Force Attack
- IDOR-Insecure direct object reference, Privilege Escalation, Session Hijacking, CSRF-Cross site request forgery
- DOS & DDOS attack
- Computer Networks, OSI ref Model, TCP/IP—MODE, HANDSHAKE, CONNECT SCAN, SYN SCAN, Flags,UDP
- NMAP, DOS, HPING3 DOS
- CRYPTOGRAPHY , Prevention of DOS & DDOS
- VAPT reporting, CVE, OWASP TOP10, PCI-DSS, GPDR