Course Outline for Cyber Security & Ethical Hacking

Course Outline for Cyber Security & Ethical Hacking

This 3 day intensive training program offers profound knowledge on the core topics of cybersecurity such as Kali Linux, Application security, and Network security.

In this course, you will start as a beginner with no previous knowledge about penetration testing or hacking and by the end of it you'll be at an intermediate level being able to hack into networks and connected devices like black-hat hackers and secure them like security experts.

This course is focused on the practical side of penetration testing as well as the theory behind it. Before jumping into security and penetration, you will first learn how to set up a lab and install needed software (works on Windows, Mac OS X and Linux), then the course is structured in a way that will take you through the basics of linux, remoting into linux, computer systems, networks and how devices communicate with each other, then you will learn how to exploit this method of communication to carry out a number of powerful attacks.

The whole point of learning the attacks is so that you understand how hacking works and how to identify security loopholes. Armed with proper knowledge, security can be designed more efficiently and effectively.

All the attacks in this course are practical attacks that work against any wireless enabled device, ie: it does not matter if the device is a phone , tablet, laptop ...etc. These attacks also work against all operating systems (Windows, OSX, Linux IOS, Android ...ect.). in each technique you will understand the theory behind it and how it works, then you'll learn how to use that technique in a real life scenario, so by the end of the course you'll be able to modify these techniques or combine them to come up with more powerful attacks and design prevention techniques to secure the networks.

Demand for experts in cybersecurity has skyrocketed. By completing this course, participants can develop the skills required to understand and manage cyber risk and implement the right security controls.

Disclaimer

This course is designed for educational purposes without any intent or demonstration or content that violates any national or ethical laws.

Training Outcome

Every learner has different learning patterns and absorption rates. As such, it is virtually impossible to gauge an exact learning outcome of each participant. However, it may be safely assumed that by the end of this course, each learner shall be able to:

• Use Kali Linux
• Perform Penetration Testing
• Perform Reverse Engineering for Forensics
• Take necessary measures to prevent cyber attacks
• Secure networks
• Control connections of clients around you without knowing the password.
• Crack WEP/WPA/WPA2 using a number of methods.
• Hack any computer on the same network.
• Intercept data and spy on all on the network
• Gather detailed information about clients and networks like their OS, opened ports ...etc.
• A number of practical attacks that can be used without knowing the key to the target network
• ARP Spoofing/ARP Poisoning
• Launch Various Man In The Middle attacks.
• Sniff packets from clients and analyse them to extract important info such as: passwords, cookies, urls, videos, images ..etc.
• Detect ARP poisoning and protect your self and your network against it.
• You will be able to use more than 20 penetration testing tools such as ettercap, wireshark, aircrack-ng suit ...etc.
• Combine individual attacks to launch even more powerful attacks.

Prerequisites

It is expected that the pupil shall have the following at hand when participating in the course:

• Ability to comprehend the English Language (basic)
• Personal computer with full admin access
• Access to High Speed Internet
• Access to Linux based operating system (at least 2 units)
• Basic understanding of OS
• Basic understanding and experience using the internet
• Basic understanding of filing systems
• High School Mathematics

Course Outline

1. Introduction to Cyber Security
   1. Types of networks
   2. Types of Attacks
   3. Dissection
2. Terminologies
   1. Network Protocol
   2. IP Address
   3. Subnet
   4. NAT
   5. DHCP server
   6. Ports
   7. DNS
   8. OSI Model
   9. Services
   10. Hidden Wiki
   11. Proxy Server
   12. Proxy Bouncing
3. Common Steps
   1. Gmail login untold Secret
   2. Windows Login Bypass
   3. Customize Windows options
4. Web Architecture
   1. Server setup
   2. Web Component and Server
5. Kali Linux
   1. Lab Overview & Needed Software
   2. Initial Preparation
   3. Installing Kali Linux as a VM on Windows
   4. Using Servers
   5. Kali Linux Overview
   6. SSH
   7. The Linux Terminal & Basic Commands
6. Information Gathering
   1. Finding Vulnerable Ports
   2. Advanced Search Engine
   3. Finding hidden web pages and files
   4. Active and Passive Scan
   5. Discovering Connected Clients using netdiscover
   6. Gathering More Information Using Zenmap
   7. Gathering Even More Information Using Zenmap
   8. ARP Poisoning Theory
   9. ARP Poisoning Using arpspoof
   10. Bettercap Basics
   11. ARP Poisoning Using Bettercap
   12. Spying on Network Devices (Capturing Passwords, Visited Websites...etc)
   13. Creating Custom Spoofing Script
   14. Understanding HTTPS & How to Bypass it
   15. Bypassing HTTPS
   16. DNS Spoofing - Redirecting Requests From One Website To Another
   17. Injecting Javascript Code
   18. Running all the Above Using a Graphical Interface
   19. Wireshark - Basic Overview & How To Use It With MITM Attacks
   20. Wireshark - Sniffing & Analysing Data
   21. Wireshark - Using Filters, Tracing & Dissecting Packets
   22. Wireshark - Capturing Passwords & Anything Sent By Any Device In The Network
   23. Creating a Fake Access Point - Theory
   24. Creating a Fake AP Using Mana-Toolkit
7. Social Engineering
   1. Fake mail
   2. Phishing page
   3. Cellphone tracking
   4. Creating Malware
   5. SET
8. Penetration Testing
   1. SQL injections
   2. Burp Suite
   3. XSS
   4. File upload Vulnerability
   5. Command Line Execution
   6. Havij
9. Reverse Engineering
   1. Software Hacking
   2. Virus illustration
   3. Firewall Bypassing
10. Network Hacking
    1. MITM attack
    2. Wireshark
    3. WiFi hacking
    4. Metasploit Framework
    5. Packet Sniffing Basics Using Airodump-ng
    6. WiFi Bands - 2.4Ghz & 5Ghz Frequencies
    7. Targeted Packet Sniffing Using Airodump-ng
    8. Deauthentication Attack (Disconnecting Any Device From The Network)
11. Accessing and Attacking
    1. Theory Behind Cracking WEP Encryption
    2. Associating With Target Network Using Fake Authentication Attack
    3. ARP Request Reply Attack
    4. Korek Chopchop Attack
    5. Fragmentation Attack
12. Accessing more secured Networks
    1. Introduction to WPA / WPA2 Cracking
    2. Exploiting the WPS Feature
    3. How to Capture a Handshake
    4. Creating a Wordlist / Dictionary
    5. Cracking the Key Using a Wordlist Attack
    6. Cracking the Key Quicker using a Rainbow Table
    7. Cracking WPA/WPA2 Much Faster Using GPU
13. Prevention & Security
    1. Securing Your Network From The Above Attacks
    2. How to Configure Wireless Security Settings To Secure Your Network
    3. Detecting ARP Poisoning Attacks
    4. Detecting Suspicious Activities using Wireshark