|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/the-certified-ethical-hacking-practical-expert-199courses/
课程评论：没有评论
课程名称：《完整实用的道德黑客专家》 课程概述： 欢迎来到这门全面的道德黑客课程！本课程不要求学员具备任何黑客基础知识，完成课程后，您将能够像黑帽黑客一样攻破系统，同时像安全专家一样进行防护！此课程高度实用，同时不忽视理论知识。我们将从道德黑客基础和渗透测试的不同领域开始，安装所需软件（适用于Windows、Linux和Mac OS X），然后立即开始破解系统。 之后，您将通过实例学习，分析和利用计算机系统（如网络、服务器、客户端、网站等），避免乏味的理论讲座。课程分为多个部分，每个部分涵盖一个渗透测试/黑客领域。您将首先学习目标系统的工作原理、弱点，并如何实际利用这些弱点进行攻击，同时也学习如何加强系统防御。 课程主要分为四个部分： 1. 网络黑客： - 学习如何测试有线和无线网络的安全性；包括连接前攻击、获取访问与连接后的攻击；了解如何收集网络信息、破解密码、监控网络设备等。 2. 获取访问权限： - 学习服务器端和客户端攻击的主要方法；掌握如何无交互方式征服计算机系统以及如何通过用户交互实现控制。 3. 后期利用： - 学习如何与被攻破的系统进行交互，维护访问权限，监视目标，并利用目标计算机作为连接其他系统的跳板。 4. 网站/网络应用程序黑客： - 学习网站工作原理、如何收集目标网站信息，发现和利用多种漏洞（如SQL注入、跨站脚本等）进行攻击。 每个部分结束时，您将学习如何检测、预防和保护系统免受讨论的攻击。课程中的所有技术均为实际操作，您将理解每种技术的机制，最终能够根据不同情况调整并运用这些技术。 本课程提供24/7支持，如有任何问题，您可以在问答部分提出，我们将在15小时内回复。 注意：本课程仅用于教育目的，所有攻击均在我自己的实验室进行或针对我有权限测试的设备。 适合人群： - 对学习道德黑客/渗透测试感兴趣的任何人 - 想了解黑客如何攻击计算机系统的人 - 希望学习如何保护自己系统免受黑客攻击的人。
Welcome this comprehensive course on Ethical Hacking! This course assumes you have NO prior knowledge in hacking and by the end of it you'll be able to hack systems like black-hat hackers and secure them like security experts!This course is highly practical but it won't neglect the theory, so we'll start with ethical hacking basics and the different fields in penetration testing, installing the needed software (works on Windows, Linux and Mac OS X) and then we'll dive and start hacking systems straight away. From here onwards you'll learn everything by example, by analysing and exploiting computer systems such as networks, servers, clients, websites.....etc, so we'll never have any boring dry theoretical lectures.The course is divided into a number of sections, each section covers a penetration testing / hacking field, in each of these sections you'll first learn how the target system works, the weaknesses of this system, and how to practically exploit theses weaknesses and hack into it, not only that but you'll also learn how to secure this system from the discussed attacks. This course will take you from a beginner to a more advanced level by the time you finish, you will have knowledge about most penetration testing fields.The course is divided into four main sections:1. Network Hacking - This section will teach you how to test the security of networks, both wired and wireless. First, you will learn some basic network terminology, how networks work, and how devices communicate with each other. Then it will branch into three sub sections:Pre-connection attacks: in this subsection you'll learn what can you do before even connecting to a network, and even before having internet access; you'll start by learning how to gather information about the networks around you, discover the devices connected to them, and how to control connections around you (ie: deny/allow devices from connecting to networks) even without knowing the password of the target network.Gaining Access: Now that you gathered information about the networks around you, in this subsection you will learn how to crack the key and get the password to your target network weather it uses WEP, WPA or even WPA2.Post Connection attacks: Now that you have the key, you can connect to the target network, in this subsection you will learn a number of powerful techniques that allow you to gather comprehensive information about the connected devices, see anything they do on the internet (such as login information, passwords, visited urls, images, videos....etc), redirect requests, inject evil code in loaded pages and much more! All the attacks here work against both wireless and wired networks. You will also learn how to create a fake WiFi network, attract users to connect to it and use all of the above techniques against the connected clients.2. Gaining Access - In this section you will learn two main approaches to gain full control or hack computer systems:Server Side Attacks: In this subsection you will learn how to gain full access to computer systems without the need for user interaction. You will learn how to gather useful information about a target computer system such as its operating system, open ports, installed services, then you'll learn how to use this information to discover weaknesses and vulnerabilitiesand exploit them to gain full control over the target. Finally you will learn how to generate different types of reports for your discoveries.Client Side Attacks - If the target system does not contain any weaknesses then the only way to gain access to it is by interacting with the users, in this subsection you'll learn how to get the target user to install a backdoor on their system without even realising, this is done by hijacking updatesor backdoornig downloadeds on the fly. Not only that but you'll also learn how to create trojans by backdooring normal files (such as an image or a pdf) and use social engineering to deliver this trojan to the target, to do this you'll learn how to spoof emails so they appear as if they're sent from the target's friend, boss or any email account they're likely to interact with.3. Post Exploitation - In this section you will learn how to interact with the systems you compromised so far. You'll learn how to access the file system (read/write/upload/execute), maintain your access, spy on the target and even use the target computer as a pivot to hack other computer systems.4. Website / Web Application Hacking - In this section you will learn how websites work, how to gather information about a target website (such as website owner, server location, used technologies....etc) and how to discover and exploit the following dangerous vulnerabilities to hack into websites:File Upload.Code Execution.Local File Inclusion.Remote File Inclusion.SQL Injection.Cross Site Scripting (XSS).At the end of each section you will learn how to detect, prevent and secure your system and yourself from the discussed attacks.All the techniques in this course are practical and work against real systems, you'll understand the whole mechanism of each technique first, then you'll learn how to use it to hack into the target system, so by the end of the course you'll be able to modify the these techniques to launch more powerful attacks, and adopt them to different situations and different scenarios.With this course you'll get 24/7 support, so if you have any questions you can post them in the Q & A section and we'll respond to you within 15 hours.NOTE: This course is created for educational purposes only and all the attacks are launched in my own lab or against devices that I have permission to test.Who this course is for:Anybody who is interested in learning ethical hacking / penetration testingAnybody who wants to learn how hackers hack computer systemsAnybody who wants to learn how to secure their systems from hackers
