|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/learn-ethical-hacking-from-scratch/
课程评论：没有评论
课程名称：从零开始学习伦理黑客 课程概述：该课程旨在为没有任何基础的学习者提供全面的伦理黑客培训。课程内容从基础知识开始，逐步深入讲解如何像黑客一样攻击系统，并像安全专家一样保护它们。课程强调实践操作，同时兼顾理论知识，内容涵盖了伦理黑客的基础知识、各种渗透测试领域，并指导学员在Windows、Linux和Mac OS上安装所需的软件。 课程结构分为多个部分，每个部分专注于一种渗透测试/黑客领域。在学习每种领域时，学员将深入了解目标系统的工作原理、系统的弱点以及如何利用这些弱点进行实际攻击。课程所涉及的知识点包括网络安全、系统安全、用户社交工程等，将通过大量实例和实践来帮助学员理解。 课程主要分为四个部分： 1. **网络黑客**：学员将学习如何攻击和保护有线和无线网络，包括预连接攻击、获取访问权限及连接后攻击技术等。 2. **获取访问权限**：通过服务器端和客户端攻击，学员将了解如何在不需要用户互动的情况下获得对计算机系统的完全控制以及如何利用社交工程进行攻击。 3. **后期利用**：掌握与已侵入系统的交互方法，包括访问文件系统、维持访问权限以及利用目标计算机攻击其他系统。 4. **网站/网络应用黑客**：学习网站工作原理、收集目标网站信息以及发现和利用常见的网络漏洞（如SQL注入、XSS等）。 整个课程将教授使用多种工具（如Kali Linux、Metasploit、Wireshark等），以实现上述目标。同时，每个部分结束时都会讲解如何检测、预防和保护系统及个人不受相关攻击。 课程提供全天候支持，确保学员能及时获得解答。需要注意的是，课程仅用于教育目的，所有攻击都在合法授权的环境中进行。成功完成课程后，学员将获得Udemy颁发的课程结业证书。
Last Update: June 2024Welcome this comprehensive Ethical Hacking course! This course assumes you have NO prior knowledge! It starts with you from scratch and takes you step-by-step teaching you how to hack systems like black-hat hackers and secure them like security experts!This course is highly practical but it won't neglect the theory; we'll start with ethical hacking basics, breakdown the different penetration testing fields and install the needed software (on Windows, Linux and Apple Mac OS), then we'll dive and start hacking straight away. You'll learn everything by example, by analysing and exploiting different systems such as networks, cloud servers, clients, websites, etc. No boring dry lectures.The course is divided into a number of sections, each section covers a penetration testing / hacking field, in each of these sections you'll first learn how the target system works, the weaknesses of this system, and how to practically exploit theses weaknesses to hack this system. As we do this I will also introduce you to different hacking and security concepts, tools and techniques. Everything will be taught through examples and hands-on practicals, there will be no useless or boring lectures!All the techniques in this course are practical and work against real systems, you'll understand the whole mechanism of each technique first, then you'll learn how to use it to hack the target system. By the end of the course you'll be able to modify these techniques to launch more powerful attacks, and adopt them to suit different situations and different scenarios.By the end of the course you will have a strong foundation in most hacking or penetration testing fields and you'll also learn how to detect, prevent and secure systems and yourself from the discussed attacks. The course is divided into four main sections: 1. Network Hacking - This section will teach you how to hack and secure both wired & wireless networks. First, you will learn network basics, how they work, and how devices communicate with each other. Then it will branch into three sub sections: Pre-connection attacks: in this subsection you'll learn a number of attacks that can be executed without connecting to the target network and without the need to know the network password; you'll learn how to gather information about the networks around you, discover connected devices, and control connections (deny/allow devices from connecting to networks). Gaining Access: Now that you gathered information about the networks around you, in this subsection you will learn how to crack the key and get the password to your target network whether it uses WEP, WPA or even WPA2.Post Connection attacks: Now that you have the key, you can connect to the target network, in this subsection you will learn a number of powerful techniques that allow you to gather comprehensive information about the connected devices, see anything they do on the internet (such as login information, passwords, visited urls, images, videos, etc.), redirect requests, inject evil code in loaded pages and much more! You will also learn how to create a fake WiFi network or a honeypot, attract users to connect to it and use all of the above techniques against the connected clients.2. Gaining Access - In this section you will learn two main approaches to gain remote access or hack computer systems:Server Side Attacks: In this subsection you will learn how to gain full access to computer systems without user interaction. You will learn how to gather useful information about a target system such as the operating system, open ports, installed services, then use this information to discover weaknesses / vulnerabilities and exploit them to gain full control over the target. Finally you will learn how to automatically scan servers for vulnerabilities and generate different types of reports with your discoveries.Client Side Attacks - If the target system does not contain any weaknesses then the only way to hack it is by interacting with the users, in this subsection you'll learn how to get the target user to install a backdoor on their system without even realising, this is done by hijacking software updates or backdooring downloads on the fly. This subsection also teaches you how to use social engineering to hack secure systems, so you'll learn how to gather comprehensive information about system users such as their social accounts, friends, their mails, etc. You'll learn how to create trojans by backdooring normal files (such as an image or a pdf) and use the gathered information to spoof emails so they appear as if they're sent from the target's friend, boss or any email account they're likely to interact with, to social engineer them into running your trojan.3. Post Exploitation - In this section you will learn how to interact with the systems you compromised so far. You'll learn how to access the file system (read/write/upload/execute), maintain your access, spy on the target (capture key strikes, turn on the webcam, take screenshots, etc.) and even use the target computer as a pivot to hack other systems.4. Website / Web Application Hacking - In this section you will learn how websites work, how to gather information about a target website (such as website owner, server location, used technologies, etc.) and how to discover and exploit the following dangerous vulnerabilities to hack websites:Information Disclosure.File Upload.Code Execution.Local File Inclusion.Remote File Inclusion.SQL Injection.Cross Site Scripting (XSS).Throughout the course you'll learn how to use use the following tools to achieve the above:VMware.Kali LinuxNmap.Bettercap.Wireshark.OWASP Zap.Metasploit.Nexpose.SQLmap.Maltego.Veil Framework.Crunch.Netdiscover.Zenmap.arpspoof.Evilgrade.The Backdoor Factory.BeEF.Dirb.Knockpy.Netcat.Aircrack-ng suite.Airmon-ng.Airodump-ng.Aireplay-ng.Aircrack-ng.At the end of each section you will learn how to detect, prevent and secure systems and yourself from the discussed attacks. Checkout the curriculum and the course teaser for more info!With this course you'll get 24/7 support, so if you have any questions you can post them in the Q & A section and we'll respond to you within 15 hours. Notes: This course is created for educational purposes only, all the attacks are launched in my own lab or against systems that I have permission to test.This course is totally a product of Zaid Sabih & zSecurity and no other organisation is associated with it or a certification exam. Although, you will receive a Course Completion Certification from Udemy, apart from that NO OTHER ORGANISATION IS INVOLVED.
