|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/ethical-hacking-pentester/
课程评论：没有评论
课程名称：成为专业渗透测试员 课程概述： 本课程旨在教授学员成为专业的渗透测试员所需的基础知识和实用技能。课程内容涵盖了多个方面，包括： 1. **Linux基础**：学习Linux的基础知识，包括VMware播放器安装、Kali Linux安装、网络配置及基本命令、目录结构等。 2. **网络基础**：了解网络的基本概念、设备、OSI模型及TCP/IP协议。 3. **渗透测试概述**：介绍黑客，白帽黑客及渗透测试的定义。学习如何使用TOR网络进行匿名渗透测试，以及通过Nmap、Sqlmap和Metasploit工具进行目标系统的信息收集和漏洞扫描。 4. **渗透测试场景**：通过多个实际场景练习渗透测试，包括使用Nessus漏洞扫描器和Metasploit的详细指南，以及如何制作不可检测的恶意软件。 5. **Web应用攻击**：理解Web应用的基础，学习如何进行HTTP基本认证攻击、字典攻击、暴力破解、SQL注入、跨站脚本攻击（XSS）、CSRF攻击等。 6. **社会工程学攻击**：使用SEToolkit进行社会工程攻击，制作恶意Word文件。 7. **本地网络攻击**：包括中间人攻击（MITM）、密码哈希破解、无线黑客等。 8. **DDoS攻击**：掌握分布式拒绝服务攻击（DDoS）的原理及方法，包括SYN洪水攻击、UDP洪水和DNS洪水攻击等。 通过该课程，学员不仅能够掌握渗透测试的基本知识，还能获得实际操作技能，为日后从事网络安全领域的工作打下坚实的基础。
LINUX FUNDAMENTALS VMWARE PLAYER INSTALLATION KALI LINUX INSTALLATION LINUX NETWORK CONFIGURATION LINUX BASIC COMMANDS LINUX DIRECTORY STRUCTURE NETWORK FUNDAMENTALS NETWORK BASICS NETWORK DEVICES OSI MODELS TCP/IP WHAT IS HACKER , WHITE HACKER AND PENTEST? PENTEST TOR NETWORK TOR NETWORK & USING NMAP, SQLMAP AND METASPLOIT WITH TOR & WHONIX ANONYMOUS OPERATING SYSTEM INFORMATION GATHERING ABOUT TARGET SYSTEM RECONNAISSANCE AND VULNERABILITY SCANNING AT PENETRATION TEST NMAP GUIDE PENTEST SCENARIO -1 PENTEST SCENARIO -2 NESSUS VULNERABILITY SCANNER METASPLOITE METASPLOITE GUIDE MAKE UNDETECTABLE MALWARE WITH METASPLOITE MAKE UNDETECTABLE PHP AND ASP SHELL MAKE AN INFECTED PDF FILE PENTEST SCENARIO -3 PENTEST SCENARIO -4 PENTEST SCENARIO -5 PENTEST SCENARIO -6 WEB APPLICATION ATTACKS WEB FUNDAMENTALS WEB APPLICATION SECURITY HTTP BASIC AUTHENTICATION DICTIONARY ATTACK WITH BURPSUITE BRUTE FORCE TO WEB FORM BASED AUTHENTICATION WITH FIREFORCE DICTIONARY ATTACK TO FORM BASED AUTHENTICATION WITH BURPSUITE CROSS SITE SCRIPTING(XSS) BEEF - THE BROWSER EXPLOTION FRAMEWORK PROJECT SQL INJECTION STEP BY STEP SQL INJECTION ATTACK - DEMO 1 STEP BY STEP SQL INJECTION ATTACK - DEMO 2 AUTHENTICATION BYPASS WITH SQL INJECTION SQLMAP SQL INJECTION THROUGH LIVE HTTP HEADERS & BYPASS CLIENT SIDE SECURTY PROTECT LOCAL FILE INCLUSION EXPLOITATION REMOTE FILE INCLUSION (RFI) DIRECTORY THAVERSAL ATTACK CSRF(CROSS SITE REQUEST FORGERY) FINDING TARGET WEB SERVER INFORMATIONS OWASP-ZAP OPEN SOURCE WEB APPLICATION SECURITY SCANNER W3AF OPEN SOURCE WEP APPLICATION SECURITY SCANNER SOCIAL ENGINEERING ATTACKS SETOOLKIT MALWARE INFECTED WORD FILE LOCAL NETWORK ATTACKS MAN IN THE MIDDLE ATTACK(MITM) DECRYPTION METHODS CREATE WORDLIST WITH CRUNCH PASSWORD HASH CRACKING - OFFLINE CRACKING ATTACKS BRUTE FORCING PASSWORD WITH MEDUSA, HYDRA AND NCRACK(ONLINE PASSWORD ATTACKS) WIRELESS HACKING CONFIGURE WIFI ADAPTOR TO MONITORING MODE EASY-CREDS FAKE ACCESS POINT ATTACK CRACKING WEP PASSWORDS WITH AIRCRACK-NG CRACKING WPA/WPA2 PASSWORDS WITH AIRCRACK-NG HACK WIFI BY WPS PIN ATTACK CRACKING WPA HANDSHAKE BY PYRIT MORE QUICKLY CRACK PASSWORD HASHES WITH OCLHASHCAT PROGRAM EVIL TWIN ATTACK ( HACK WPA/WPA2 WITHOUT USING BRUTE FORCE OR DICTIONARY ATTACK) DDOS ATTACKS DISTRIBUTED DENIAL OF SERVICE ATTACK (DDOS) SYN FLOOD ATTACK UDP FLOOD & DNS FLOOD & DNS AMPLIFICATION ATTACKS HTTP FLOOD ATTACK
