Ethical Hacking

1. Introduction to Ethical Hacking

• What is Ethical Hacking and Importance
• Types of Hackers - White, Black, Grey Hat
• Cyber Security Laws and Ethics
• Penetration Testing Methodologies
• Building a Lab Environment (VirtualBox/VMware)
• Kali Linux Installation and Basics
• Legal Agreements and Permissions

2. Footprinting and Reconnaissance

• Passive vs Active Reconnaissance
• OSINT (Open Source Intelligence) Techniques
• WHOIS Lookup and DNS Enumeration
• Email Tracking and Social Media Recon
• Google Dorking and Advanced Search Techniques
• Using Maltego and theHarvester
• Footprinting Tools and Countermeasures

3. Scanning Networks

• Network Scanning Concepts and Techniques
• Nmap - Port Scanning, OS Detection, Version Detection
• TCP/IP Flags and Scan Types (SYN, FIN, XMAS, NULL)
• Network Mapping and Topology Discovery
• Vulnerability Scanning with Nessus and OpenVAS
• Proxy Servers and Anonymizers
• Scanning Evasion Techniques and Firewall Detection

4. Enumeration

• NetBIOS, SNMP, LDAP Enumeration
• SMTP and DNS Enumeration Techniques
• Enum4linux and SMB Enumeration
• NFS and RPC Enumeration
• Active Directory Enumeration
• Web Application Enumeration
• Countermeasures for Enumeration

5. System Hacking

• Password Cracking Techniques - Brute Force, Dictionary
• Using John the Ripper and Hashcat
• Privilege Escalation Methods (Windows & Linux)
• Creating and Deploying Malware (Trojans, RATs)
• Keyloggers and Spyware
• Steganography and Covering Tracks
• Maintaining Access and Backdoors

6. Malware Threats

• Types of Malware - Virus, Worm, Trojan, Ransomware
• Malware Analysis and Detection Techniques
• Creating Custom Payloads with Msfvenom
• Obfuscation and Packing Techniques
• Antivirus Evasion Methods
• Malware Countermeasures and Removal Tools
• Ransomware Prevention and Response

7. Web Application Hacking

• OWASP Top 10 Vulnerabilities
• SQL Injection - Manual and Automated
• Cross-Site Scripting (XSS) - Stored, Reflected, DOM
• Cross-Site Request Forgery (CSRF)
• Command Injection and File Inclusion
• Burp Suite and Web Vulnerability Scanners
• Web Application Firewall (WAF) Bypass

8. Wireless Network Hacking

• Wi-Fi Encryption - WEP, WPA, WPA2, WPA3
• Wireless Scanning and Monitoring (Airodump-ng)
• WEP Cracking Techniques
• WPA/WPA2 Handshake Capture and Cracking
• Evil Twin Attack and Rogue Access Points
• Bluetooth Hacking Basics
• Wireless Security Best Practices

9. Cryptography

• Symmetric vs Asymmetric Encryption
• Hashing Algorithms - MD5, SHA1, SHA256
• Digital Signatures and Certificates
• SSL/TLS and HTTPS Encryption
• Cryptanalysis and Hash Cracking
• GPG and File Encryption Tools
• Cryptography Best Practices