121. Discovering SQL injections In POST

Learn Ethical Hacking From Scratch

Section: 1 - Introduction

1. Course Introduction & Overview (3:15)
2. Teaser - Hacking a Windows 10 Computer & Accessing Their Webcam (6:32)
3. What Is Hacking & Why Learn It? (3:09)

Section: 2 - Setting up The Lab

4. Lab Overview & Needed Software (3:25)
5. Installing Kali 2018 As a Virtual Machine (8:31)
6. Installing Metasploitable As a Virtual Machine (4:13)
7. Installing Windows As a Virtual Machine (3:21)
8. Creating & Using Snapshots (6:08)

Section: 3 - Linux Basics

9. Basic Overview of Kali Linux (7:05)
10. The Terminal & Linux Commands (9:06)
11. Updating Sources & Installing Programs (4:42)

Section: 4 - Network Penetration Testing

12. Network Penetration Testing Introduction (2:42)
13. Networks Basics (3:09)
14. Connecting a Wireless Adapter To Kali (7:18)
15. What is MAC Address & How To Change It (4:30)
16. Wireless Modes (Managed & Monitor) (5:02)
17. Enabling Monitor Mode Manually (2nd method) (2:36)
18. Enabling Monitor Mode Using airmon-ng (3rd method) (3:16)

Section: 5 - Network Penetration Testing - Pre Connection Attacks

19. Packet Sniffing Basics Using Airodump-ng (5:16)
20. Targeted Packet Sniffing Using Airodump-ng (7:02)
21. Deauthentication Attack (Disconnecting Any Device From The Network) (4:51)
22. Creating a Fake Access Point (Honeypot) - Theory (3:31)
23. Creating a Fake Access Point (Honeypot) - Practical (9:50)

Section: 6 - Network Penetration Testing - Gaining Access (WEP/WPA/WPA2 Cracking)

24. Gaining Access Introduction (1:16)
25. WEP Cracking - Theory Behind Cracking WEP Encryption (3:03)
26. WEP Cracking - Basic Case (5:34)
27. WEP Cracking - Fake Authentication (5:59)
28. WEP Cracking - ARP Request Replay Attack (4:15)
29. WPA Cracking - Introduction (1:56)
30. WPA Cracking - Exploiting WPS Feature (6:43)
31. WPA Cracking - Theory Behind WPA/WPA2 Cracking (2:15)
32. WPA Cracking - How To Capture The Handshake (4:29)
33. WPA Cracking - Creating a Wordlist (5:32)
34. WPA Cracking - Using a Wordlist Attack (2:49)
35. Securing Your Network From The Above Attacks
36. How to Configure Wireless Security Settings To Secure Your Network (6:25)

Section: 7 - Network Penetration Testing - Post Connection Attacks

37. Introduction (2:43)
38. Information Gathering - Discovering Connected Clients using netdiscover (3:20)
39. Gathering More Information Using Autoscan (8:42)
40. Gathering Even More Information Using Zenmap (10:04)
41. MITM - ARP Poisoning Theory (5:32)
42. MITM - ARP Spoofing using arpspoof (5:51)
43. MITM - ARP Spoofing Using MITMf (5:21)
44. MITM - Bypassing HTTPS (4:40)
45. MITM - Session Hijacking (6:34)
46. MITM - DNS Spoofing (5:10)
47. MITM - Capturing Screen Of Target & Injecting a Keylogger (5:07)
48. MITM - Injecting Javascript/HTML Code (6:43)
49. MITM - Using MITMf Against Real Networks (9:08)
50. Wireshark - Basic Overview & How To Use It With MITM Attacks (9:08)
51. Wireshark - Sniffing Data & Analysing HTTP Traffic (8:00)
52. Wireshark - Capturing Passwords & Cookies Entered By Any Device In The Network (5:36)

Section: 8 - Network Penetration Testing - Detection & Security

53. Detecting ARP Poisoning Attacks (5:11)
54. Detecting suspicious Activities Using Wireshark (5:51)

Section: 9 - Gaining Access to Computer Devices

55. Gaining Access Introduction (4:14)

Section: 10 - Gaining Access - Server Side Attacks

56. Introduction (4:05)
57. Basic Information Gathering & Exploitation (10:05)
58. Using a Basic Metasploit Exploit (7:31)
59. Exploiting a Code Execution Vulnerability (10:03)
60. MSFC - Installing MSFC (Metasploit Community) (5:46)
61. MSFC - Scanning Target(s) For Vulnerabilities (3:21)
62. MSFC - Analysing Scan results & Exploiting Target System (9:42)
63. Nexpose - Installing Nexpose (9:59)
64. Nexpose - How To Configure & Launch a Scan (9:16)
65. Nexpose - Analysing Scan Results & Generating Reports (7:56)

Section: 11 - Gaining Access - Client Side Attacks

66. Introduction (2:19)
67. Installing Veil 3 (7:49)
68. Veil Overview & Payloads Basics (7:20)
69. Generating An Undetectable Backdoor Using Veil 3 (9:44)
70. Listening For Incoming Connections (7:18)
71. Using A Basic Delivery Method To Test The Backdoor & Hack Windows 10 (7:12)
72. Backdoor Delivery Method 1 - Using a Fake Update (9:50)
73. Backdoor Delivery Method 2 - Backdooring Downloads on The Fly (8:23)
74. How to Protect Yourself From The Discussed Delivery Methods (3:51)

Section: 12 - Gaining Access - Client Side Attacks - Social Engineering

75. Introduction (2:43)
76. Maltego Basics (8:45)
77. Discovering Websites, Links & Social Networking Accounts Associated With Target (7:32)
78. Discovering Twitter Friends & Associated Accounts (4:57)
79. Discovering Emails Of The Target's Friends (3:48)
80. Analysing The Gathered Info & Building An Attack Strategy (8:41)
81. Backdooring Any File Type (images, pdf's ...etc) (4:41)
82. Compiling & Changing Trojan's Icon (6:16)
83. Spoofing .exe Extension To Any Extension (jpg, pdf ...etc) (8:29)
84. Spoofing Emails - Send Emails As Any Email Account You Want (7:33)
85. BeEF Overview & Basic Hook Method (6:39)
86. BeEF - hooking targets using MITMf (3:11)
87. BeEF - Running Basic Commands On Target (4:24)
88. BeEF - Stealing Credentials/Passwords Using A Fake Login Prompt (2:17)
89. BeEF - Gaining Full Control Over Windows Target (3:39)
90. Detecting Trojans Manually (5:32)
91. Detecting Trojans Using a Sandbox (3:16)

Section: 13 - Gaining Access - Using The Above Attacks Outside The Local Network

92. Overview of the Setup (6:06)
93. Ex1 - Generating a Backdoor That Works Outside The Network (5:24)
94. Configuring The Router To Forward Connections To Kali (6:58)
95. Ex2 - Using BeEF Outside The Network (5:49)

Section: 14 - Post Exploitation

96. Introduction (2:02)
97. Meterpreter Basics (6:22)
98. File System Commands (5:09)
99. Maintaining Access - Basic Methods (5:07)
100. Maintaining Access - Using a Reliable & Undetectable Method (6:53)
101. Spying - Capturing Key Strikes & Taking Screen Shots (2:39)
102. Pivoting - Theory (What is Pivoting?) (7:06)
103. Pivoting - Exploiting Devices on The Same Network As The Target Computer (8:11)

Section: 15 - Website Penetration Testing

104. Introduction - What Is A Website ? (4:16)
105. How To Hack a Website? (3:51)

Section: 16 - Website Pentesting - Information Gathering

106. Gathering Basic Information Using Whois Lookup (5:36)
107. Discovering Technologies Used On The Website (6:03)
108. Gathering Comprehensive DNS Information (5:57)
109. Discovering Websites On The Same Server (3:42)
110. Discovering Subdomains (5:05)
111. Discovering Sensitive Files (7:25)
112. Analysing Discovered Files (4:17)

Section: 17 - Website Pentesting - File Upload, Code Execution & File Inclusion Vulns

113. Discovering & Exploiting File Upload Vulnerabilities (6:43)
114. Discovering & Exploiting Code Execution Vulnerabilities (7:25)
115. Discovering & Exploiting Local File Inclusion Vulnerabilities (5:16)
116. Remote File Inclusion Vulnerabilities - Configuring PHP Settings (3:45)
117. Remote File Inclusion Vulnerabilities - Discovery & Exploitation (5:44)
118. Preventing The Above Vulnerabilities (7:19)

Section: 18 - Website Pentesting - SQL Injection Vulnerabilities

119. What is SQL (5:48)
120. Dangers of SQL Injection Vulnerabilities (2:53)
121. Discovering SQL injections In POST (7:56)
122. Bypassing Logins Using SQL injection Vulnerability (4:48)
123. Discovering SQL injections in GET (7:01)
124. Reading Database Information (5:26)
125. Finding Database Tables (3:33)
126. Extracting Sensitive Data Such As Passwords (4:29)
127. Reading & Writing Files On The Server Using SQL Injection Vulnerability (5:57)
128. Discovering SQL Injections & Extracting Data Using SQLmap (6:47)
129. The Right Way To Prevent SQL Injection (4:57)

Section: 19 - Website Pentesting - Cross Site Scripting Vulnerabilities

130. Introduction - What is XSS or Cross Site Scripting? (3:09)
131. Discovering Reflected XSS (3:46)
132. Discovering Stored XSS (2:56)
133. Exploiting XSS - Hooking Vulnerable Page Visitors To BeEF (5:31)
134. Preventing XSS Vulnerabilities (5:13)

Section: 20 - Website Pentesting - Discovering Vulnerabilities Automatically Using OWASP ZAP

135. Scanning Target Website For Vulnerabilities (4:18)
136. Analysing Scan Results (4:11)

121. Discovering SQL injections In POST

Lesson content locked

If you're already enrolled, you'll need to login.

Enroll in Course to Unlock