Ethical Hacking Training

Description:

In this ethical hacking online training module, you will learn the basic concepts of Information security and Ethical Hacking.

Chapter 1.1: Information Security Overview

• Important Terminology
• Components of Information Security
• Functionality, Usability, and Security

Chapter 1.2: Information Security Attack and Threats vendors

• Objectives of the Information Security Attacks
• Kinds of Information Security Threat
• Kinds of Attacks on the System
• Best Information Security Attack Vendors
• Information warfare

Chapter 1.3: Hacking

• Define Hacking
• Hacker Classes
• Hacker Phases
  • Reconnaissance
  • Scanning
  • Gaining and Maintaining Access
  • Clearing Tracks

Chapter 1.4: Ethical Hacking Concepts

• Define Ethical Hacking
• Importance of Ethical Hacking
• Extent and Restrictions of Ethical Hacking
• Expertise of an Ethical Hacker

Chapter 1.5: Controls of Information Security

• Information Assurance
• Information Security Management Program
• Enterprise Information Security Architecture
• Network Security Zoning
•  Policies of Information security
  • Kinds of Security Policies
  • Security Policies examples
  • Creating and Implementing Security Policies
  • Private policies at office

Chapter 1.6: Physical Security

• Kinds of Physical Security Control
• Physical Security Control

Chapter 1.7: Risk

• Risk Management
• Important Roles and Functions in Risk Management

Chapter 1.8: Threat Modeling
Chapter 1.9: Incident Management

Description:

This ethical hacking virtual classroom training module discusses the concepts like the intent of footprinting, google hacking database, footprinting through job sites, footprinting through web services, and footprinting tools.

Chapter 2.1:  FootPrinting Concepts

• Define FootPrinting
• Intent of FootPrinting

Chapter 2.2: FootPrinting through the Search Engines

• FootPrinting using search engines and modern Google Hacking Techniques
• Collecting Information through Google Advanced Search and Image Search
• Google Hacking Database
• VPN and VoIP FootPrinting through the Google Hacking Database

Chapter 2.3: FootPrinting using Web Services

• Discovering the Organization's Top-Level Domains and Sub-domains
• Discovering the Geographical location of the Intent
• People Search on People Search Sites and Social Networking Sites
• Collecting Information from LinkedIn and Financial Services
• FootPrinting using Job sites
• Monitoring Target through Alerts
• Collecting Information through Groups, Forms, and Blogs

Chapter 2.4: Website FootPrinting and Email FootPrinting

• Website FootPrinting through Web Spiders
• Mirroring Entire website and Fetching website information from www.archieve.org
• Fetching Metadata of Public Documents and Controlling the web pages for changes and updates.
• Tracing Email Communication
• Gathering Information from the Email Header
• Email Tracking Tools

Chapter 2.5: DNS FootPrinting and Network FootPrinting

• Fetching DNS Information and DNS examination tools
• Finding the Network Range
• Traceroute and Traceroute Tools

Chapter 2.6: FootPrinting Tools

• Maltego and Recon-ng
• FOCA and Recon-Dog
• OSRFramework and Other FootPrinting Tools

Chapter 2.7: FootPrinting Counterattacks and Pen Testing

• FootPrinting Counterattacks
• FootPrinting Report Templates
   

Description:

This module provides you with a detailed look at network scanning overview, network scanning techniques, Nmap, port scanning counterattacks, and scanning IDS, penetration testing, and firewalls.

Chapter 3.1: Network Scanning Basics

• Network Scanning Overview
• TCP communication flags
• TCP/IP communication
• Setup custom packet through TCP flags
• Scanning in IPV6 Networks

Chapter 3.2: Network Scanning Tools

• Nmap
• Hping2/Hping3
• Scanning Tools for Web and Mobile

Chapter 3.3: Network Scanning Techniques

• Scanning Techniques
• Port scanning Counterattacks

Chapter 3.4: Network Diagrams

• Drawing Network Diagrams
• Network Discovery and Mapping Tools
• Network Discovery Tools for Mobile

Chapter 3.5: Scanning IDS, Firewall, and Pen Testing

• IDS or Firewall Evasion Techniques
• Scanning Pen Testing
   

Description:

In this ethical hacking course module, you will learn the Enumeration concepts like enumeration techniques, NETBIOS enumeration tool, SNMP enumeration, IPsec enumeration, and enumeration counterattacks.

Chapter 4.1: Enumeration Basics

• Define Enumeration
• Enumeration Techniques
• Ports and Services to Enumerate

Chapter 4.2: NETBIOS Enumeration

• NETBIOS Enumeration Tool
• Enumerating user Accounts and Shared Resources

Chapter 4.3: SNMP and LDAP Enumeration

• Working of SNMP Enumeration
• Management Information Base
• SNMP Enumeration Tools
• LDAP Enumeration Tools

Chapter 4.4: NTP Enumeration, SMTP Enumeration, and DNS Enumeration

• NTP Enumeration Commands and Tools
• SMTP Enumeration Tools
• DNS Enumeration through Zone Transfer

Chapter 4.5: Additional Enumeration Techniques

• IPsec Enumeration
• VoIP Enumeration
• RPC Enumeration
• Linux/Unix user Enumeration

Chapter 4.6: Enumeration Counterattacks and Pen Testing

• Enumeration Counterattacks
• Enumeration Pen Testing
   

Description:

This vulnerability analysis module discusses concepts like vulnerability categorization, kinds of vulnerability analysis tools, choose a vulnerability assessment tool, common vulnerabilities and exposures, and vulnerability assessment reports.

Chapter 5.1: Vulnerability Assessment Concepts

• Vulnerability Analysis
• Vulnerability Categorization
• Kinds of Vulnerability Assessment
• Vulnerability Management Life cycle

Chapter 5.2: Vulnerability Assessment Solutions

• Contrasting Approaches for Vulnerability Assessment
• Vulnerability Scanning Solutions working
• Kinds of Vulnerability Assessment Tools
• Characteristics of a Good Vulnerability Assessment Solution
• Selecting a Vulnerability Assessment Tool
• Criteria or Standards for selecting a Vulnerability Assessment Tool
• Best methods for Choosing Vulnerability Assessment Tools

Chapter 5.3: Vulnerability Scoring Systems

• Common Vulnerability Scoring System(CVSS)
• Common Vulnerabilities and Exposures(CVE)
• National Vulnerability Database
• Vulnerability Research Resources

Chapter 5.4: Vulnerability Assessment Tools

• Nessus Professional
• GFI LanGuard
• Qualys Vulnerability Management
• Qualys FreeScan
• Nikto
• Retina CS
• OpenVAS
• SAINT
• Microsoft Baseline Security Analyzer
• Automated Vulnerability Detection System
• Vulnerability Assessment Tools for Mobile

Chapter 5.5: Vulnerability Assessment Reports

• Vulnerability Assessment Reports Basics
• Analyzing the Vulnerability Scanning Reports
   

Description:

This ethical hacking online training Module deals with CEH hacking methodology, password cracking, types of password attacks, password recovery tools, Kerberos authentication, password cracking tools, spyware, steganography, and NTFS data stream.

Chapter 6.1: CEH Hacking Methodology(CHM)
Chapter 6.2: System Hacking Objectives
Chapter 6.3: Password Cracking
Chapter 6.4: Kinds of Password Attacks

• Non-Electronic Attack
• Active Online Attack
• Passive Online Attack

Chapter 6.5: Password Recovery Tools
Chapter 6.6: Microsoft Authentication
Chapter 6.7: Storing Hash Passwords in Windows SAM
Chapter 6.8: NTLM Authentication Process
Chapter 6.9: Kerberos Authentication
Chapter 6.10: Password Salting and Cracking Tools
Chapter 6.11: Tools for Extracting the Password Hashes
Chapter 6.12: How to Defend against LLMNR/NBT-NS Poisoning and Password Cracking
Chapter 6.13: Escalating Privileges
Chapter 6.14: Tools to Execute Applications
Chapter 6.15: Keylogger
Chapter 6.16: Spyware
Chapter 6.17: How to Defend against Keylogger and Spyware
Chapter 6.18: RootKits

Kinds of RootKits
RootKits working
Steps to Detect RootKits
Defend Against RootKits
Anti-RootKits

Chapter 6.19: NTFS Data Stream

• Creating NTFS Streams
• Manipulating NTFS Streams
• Defend Against NTFS Streams
•  NTFS Stream Detectors

Chapter 6.20: Steganography

• Categorization of Steganography
• Kinds of Steganography
  • Document Steganography
  • Video and Audio Steganography
  • Email/Spam Steganography
  • Folder Steganography
  • Image Steganography Tools
  • Whitespace Steganography
• Steganography Tools for Mobile Phones
• Steganalysis
• Steganalysis Methods and Attacks on Steganalysis
• Detecting Steganography
• Steganography Detection Tools

Chapter 6.21: Covering Tracks

• Deactivating Auditing: Auditpol
• Clearing Logs
• Covering Tracks
• Covering Tracks tools
• Covering Tracks on OS and Network
• Covering Tracks Tools
   

Description:

This ethical hacking online training module deals with malware components, different types of trojans, stages of the  virus, worms, malware analysis, and anti-virus software.
 
Chapter 7.1: Malware Fundamentals

• Introduction to Malware
• Different methods by which Malware can get into a system
• General Techniques which Attackers use for Distributing the Malware on the web
• Components of Malware

Chapter 7.2: Trojan Basics

• Define Trojans
• How Hackers use Trojans
• General Ports used by the Trojans
• How to Infect systems through a Trojan
• Trojan Horse Construction Kit
• Wrappers and Crypters
• How Attackers Deploy the Trojan
• Avoiding Anti-virus Techniques
• Kinds of Trojans
  • Remote Access Trojans
  • BotNet Trojans
  • Backdoor Trojans
  • RootKit Trojans
  • E-banking Trojans
  • Proxy Trojans
  • Mobile Trojans 
  • IoT Trojans
• Exploit Kits

Chapter 7.3: Worms and Virus Concepts

• Virus Basics
• Stages of Virus life
• Working with Viruses
• Signs of Virus Attack
• How Virus Infects a computer
• Virus Hoaxes
• Fake Antivirus
• Ransomware
• Kinds of Viruses
• Creating Virus
• Computer Worms and Worm Makers

Chapter 7.4: Malware Analysis

• Sheep Dip Computer
• Anti-Virus Senor Systems
• Malware Analysis Basics
• Preparing Testbed
• Static and Dynamic Malware Analysis
• Virus Detection Ways
• Trojan Analysis: ZeuS/Zbot
• Virus Analysis: WannaCry

Chapter 7.5: Counterattacks

• Trojan and Backdoor Counterattacks
• Virus and Worms Counterattacks

Chapter 7.6: Anti-Malware Software

• Anti-Trojan and Antivirus software

Chapter 7.7: Malware Penetration Testing