|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/network-hacking-continued-intermediate-to-advanced/
课程评论：没有评论
Coursera 课程“网络黑客进阶”（Network Hacking Continued - Intermediate to Advanced）是一门为期不短的实践性课程，旨在深化学员对网络黑客技术的理解。本课程需要学员具备一定的网络黑客基础知识，建议先完成“道德黑客”课程中的网络黑客部分或独立完成“网络黑客”课程。 课程内容高度注重实操，但理论基础同样扎实，将把每个攻击分解为更小的组成部分，帮助学员深入理解其工作原理。通过学习，学员将能够组合和调整各种攻击技术以适应不同的场景。此外，学员还将学会编写自定义的中间人（Man-in-the-Middle, MITM）攻击脚本。 giảng方式以真实场景中的案例教学为主，避免枯燥的理论讲解。 课程主要分为三个部分： **一、连接前攻击 (Pre-Connection Attacks)** 本部分将对学员已有的连接前攻击知识进行扩展。例如，将学习如何对使用 5GHz 频段的网络和客户端执行攻击，以及如何将“解除认证攻击”（deauthentication attack）扩展到同时针对多个客户端和多个网络。 **二、获取访问权限 (Gaining Access)** 本部分将教授一系列高级技术，以突破不同的网络配置和加密方式。学员将学习如何应对会阻止攻击的安全机制，如何发现和定位隐藏网络，以及如何绕过基于黑名单或白名单的 MAC 地址过滤。此外，学员还将深入学习如何手动配置和创建伪造接入点（fake access point），理解其工作原理和依赖服务，并最终能够根据自身需求定制伪造接入点。 此部分还包含子模块，教授如何创建伪造的强制门户（fake captive portals），窃取 WPA/WPA2 密码，或利用其监视连接到伪造接入点的客户端。具体子模块包括： * **强制门户 (Captive Portals)**：学习三种破解酒店、机场等场所常用的需要登录验证的开放网络的方法。 * **WEP 破解 (WEP Cracking)**：在掌握对开放认证 WEP 网络破解的基础上，学习如何破解使用共享密钥认证（Shared Key Authentication, SKA）的 WEP 网络。 * **WPA & WPA2 破解 (WPA & WPA2 cracking)**：教授更高级的 WPA/WPA2 网络访问技术，包含： * **利用 WPS (Exploiting WPS)**：学习调试 Reaver 的输出，利用 WPS 功能破解更多路由器，以及如何应对路由器在多次尝试失败后锁定。 * **高级字典攻击 (Advanced Wordlist Attacks)**：学习更高级的字典攻击技术，提高破解密钥的成功率，包括如何高效使用大型字典、保存和恢复破解进度，以及利用 GPU 加速破解。 * **邪恶双胞胎攻击 (Evil Twin Attack)**：作为最后手段，利用社会工程学手段无需猜测或字典即可获取目标 WPA/WPA2 网络的密码。 * **WPA & WPA2 企业版 (WPA & WPA2 Enterprise)**：学习如何渗透企业和高校等安全网络，理解其工作原理并学习破解方法。 **三、连接后攻击 (Post-Connection Attacks)** 本部分将学习一系列在连接到网络后的高级攻击。这些攻击适用于 WiFi 和以太网网络。学员将学习如何手动绕过 HTTPS 并捕获敏感数据，该方法适用于任何中间人场景。此外，还将学习如何将 JavaScript/HTML 注入 HTTPS 网站，绕过路由器端安全机制，以及在不引起警报的情况下执行 ARP 欺骗攻击。课程还将教授如何手动分析数据流，构建自己的中间人攻击思路，并编写脚本实现自定义攻击，最终将整个攻击开发流程（分析网络流、简单测试、脚本实现、远程测试）传授给学员。 课程最后，学员将学到如何保护自己和系统免受这些攻击。 课程提供 24/7 支持，学员可以在问答区提问，通常会在 15 小时内得到回复。 **重要提示**：本课程仅供教育目的，所有攻击均在个人实验室或经过授权的设备上进行。本课程是 Zaid Sabih 和 zSecurity 的独有产品，与其他机构无关，也不提供外部认证。学员将获得 Udemy 的课程完成证书。
Welcome to this advanced network hacking course, this course is designed to build up on what you already know about network hacking, therefore I recommend finishing the network hacking section of my general ethical hacking course or finishing my network hacking course before starting this one.Just like all of my other courses, this course is highly practical, but it will not neglect the theory, since this is an advanced course we will be breaking each attack into its smaller components and understand how each of these components work, therefore by the end of the course you will be able to mix these attacks and adopt them to suit different situations and different scenarios, you will also learn how to write your own man in the middle scripts to implement your own attacks. You will learn everything by example in real world practical scenarios, no boring dry lectures.Because this course builds on what you learn in the courses mentioned above, the main sections here have similar titles to the main sections in these courses, but the topics covered here are more advanced.This course is divided into three main sections:Pre-Connection Attacks - in this section you will learn how to extend the pre-connection attacks you already know, for example you will learn how to run these attacks against networks and clients that use 5Ghz and extend the deauthentication attack to target multiple clients and multiple networks at the same time.Gaining Access - In this section you will learn a number of advanced techniques to gain access to various network configurations and various network encryptions. First you will learn how to overcome some security features that would prevent you from even trying any attacks, you will learn how to discover and target hidden networks and bypass MAC filtering whether it is implemented using a black-list or a white-list. As you go through all of the lectures in this section, you will learn how to manually configure and create a fake access point, you will understand exactly how it works and the services it relies on, therefore by the end of this section you will be able to create custom fake access points to suit your needs. You will be able to create fake captive portals, steal WPA/WPA2 passwords or use it to spy on clients that connect to it. This section is divided into a number of subsections each covering a specific topic:Captive Portals - captive portals are open networks that require users to login after connecting to it, they are usually used in hotels and airports. In this subsection you will learn three methods to hack captive portals.WEP Cracking - Even though this is an old and weak encryption, this is still used in some networks and you can not call yourself a hacker if you can not crack it, by now you should know how to rack WEP if OPEN authentication is used, in this section you will learn how to gain access to WEP networks that use Shared Key Authentication (SKA) as all of the methods that you learned so far will NOT work against SKA.WPA & WPA2 cracking - In this section you will learn more advanced techniques to gain access to WPA & WPA2 networks, this section is divided into even smaller subsections:Exploiting WPS - in this subsection you will learn how to debug reaver's output and exploit the WPS feature on more routers using reaver's advanced options, you will also learn how to unlock some routers if they lock after a number of failed attempts.Advanced Wordlist Attacks - in this subsection you will learn how to run more advanced wordlist attacks, this will increase your chances of cracking the key; you will learn how to use huge wordlists without wasting storage, save the cracking progress so that you can pause and resume and crack the key much faster using the GPU instead of the CPU.Evil Twin Attack - Finally if none of the above methods work, the last resort is to use social engineering to get the key, in this subsection you will learn how to get the password for a target WPA/WPA2 network using social engineering, without guessing and without using a wordlist.WPA & WPA2 Enterprise - These networks are usually used in companies and colleges, these are secure networks that use WPA or WPA2 but also require users to login with a username and password after connecting, in this subsection you will understand how they work and how to hack them.Post-Connection Attacks - In this section you will learn a number of advanced attacks that you can run after connecting to a network. All of the attacks in this subsection work against WiFi and ethernet networks, you will learn how to manually bypass HTTPS and capture sensitive data, you will be able to use this method regardless of how you became the man in the middle so you will be able to use it with any scenario or situation when interesting data is flowing through your computer. You will also learn how to inject javascript/HTML in HTTPS websites, bypass router-side security and run ARP poisoning attacks without raising any alarms. You will also learn how to manually analyse data flows and build your own MITM attack ideas. Not only that but I will also teach you how to write your own scripts to execute your own MITM attacks. By the end of this section you will learn the right methodology of building your own attack, you'll learn how to analyse network flows, run a simple test, translate that into a working script that implements your attack, and finally test that script against a remote computer.Finally at the end of the course you will learn how to protect yourself and your systems from these attacks.With this course you'll get 24/7 support, so if you have any questions you can post them in the Q & A section and we'll respond to you within 15 hours.Notes: This course is created for educational purposes only and all the attacks are launched in my own lab or against devices that I have permission to test.This course is totally a product of Zaid Sabih & zSecurity, no other organization is associated with it or a certification exam. Although, you will receive a Course Completion Certification from Udemy, apart from that NO OTHER ORGANIZATION IS INVOLVED.
