Ethical Hacking Certification Course

Ethical Hacking is a process or a technique that is mainly used to describe different hacking methodologies performed by an individual or a company to help in identifying threats or viruses on a network or computer before malicious hackers attack the network in an organization. The main aim of Ethical Hacker is to bypass system and network security and then search for weak points that could be accomplished by malicious hackers. Ethical Hacking and Ethical hacker are similar terms and their work is to identify threats in the system before malicious hackers attack the system.

Topics Covered in this module are:

• What is Ethical Hacking
• Types of Ethical Hacking
• Environmental Set up
• Basics of Networking
• What is the role of Ethical Hacker
• Advantages of Ethical Hacking

The main aim of Ethical Hacker is to bypass system and network security and then search for weak points that could be accomplished by malicious hackers. Ethical Hacking is a process or a technique that is mainly used to describe different hacking methodologies performed by an individual or a company to help in identifying threats or viruses on a network or computer before malicious hackers attack the network in an organization.

Topics Covered in this module are:

• Black Hat Hackers
• White Hat Hackers
• Grey Hat Hackers
• Red Hat Hackers
• Neophyte
• Hacktivist
• Script Kiddie
• Elite Hackers

A network is defined as a group of two or more devices connected with each other to share resources and data. Penetration testing is also called as a pen test or Ethical Hacking. It is a kind of Cyberattack it is mainly used to evaluate the security of the system. This testing is used to bypass system and network security and then search for weak points that could be accomplished by malicious hackers.

Topics Covered in this module are:

• What is a network
• Networking in Ethical Hacking
• What is Penetration testing
• Gaining Attacks
• Post-connection attacks
• Pre-connection attacks

Ethical Hacking is a process or a technique that is mainly used to identify threats or viruses on a network or computer before malicious hackers attack the network in an organization. There are a number of Ethical Hacking tools that are used by organizations to secure their resources and files.

Topics Covered in this module are:

• Network Mapper
• Burp Suit
• Abel
• Cain
• Angry IP Scanner
• Metasploit
• EtherPeek
• WebInspect
• Network Stumbler
• ToneLoc
• QualysGuard
• Advantages of using Ethical Hacking tools

Reconnaissance is defined as a set of techniques or processes that are mainly used to collect and discover information about the target system. During the process of Reconnaissance, an Ethical Hacker tries to gather a lot of information about the target system. The Reconnaissance takes place actively in two parts mainly and they are Passive Reconnaissance and Active Reconnaissance. This technique is also used to discover access points and open ports of the target system.

Topics Covered in this module are:

• What is the Reconnaissance process
• Mapping the network
• Fingerprint the operating system
• Determining the network range
• Gathering initial information
• Uncovering services on port
• What is Active Reconnaissance
• What is Passive Reconnaissance

The Ethical Hacking Footprinting process is the same as that of Reconnaissance. Footprinting is used to collect and discover information about the target system. During the process of Footprinting, an Ethical Hacker tries to gather a lot of information about the target system. The Footprinting process takes place actively in two parts mainly and they are Passive Footprinting and Active Footprinting. During this phase, an Ethical Hacker has the possibility to collect all the details of the employees. 

Topics Covered in this module are:

• What is Footprinting
• What is Domain Name Information
• Quick Fixes
• How to find IP Addresses
• Ways to find hosting companies
• Ranges of IP Addresses
• Finding Namespaces

Sniffing is defined as a process of capturing and monitoring all the packet’s information that are passing through a network using sniffing tools. Sniffing is also called wiretapping and it can be applied to all the computer networks. There are two types of sniffing and they are active sniffing and passive sniffing. Using sniffing technique you can see all sorts of traffic. 

Topics Covered in this module are:

• What is Sniffing
• How does Sniffing work
• How to sniff DNS Traffic
• Web Traffic
• Sniffing FTP Passwords
• Email Traffic
• Sniffing Routing Configuration
• Types of Sniffing
• Different types of Sniffing tools
• MSN Sniffer
• Ettercap
• Wireshark

ARP (Address Resolution Protocol) is a stateless protocol that is mainly used for resolving IP addresses. ARP spoofing is also known as ARP Poisoning. The ARP spoofing technique uses man-in-the-middle access to spoof the computer network.  

Topics Covered in this module are:

• Use of Address Resolution Protocol
• Working of ARP spoofing technique
• What is ARP table
• What is a man-in-the-middle attack
• What is an ARP packet
• Key features of ARP poisoning

DNS Poisoning is similar to ARP Poisoning. This technique is used to perform tricks to make DNS a Server believe that it has received an authentication. This technique allows the attacker to replace the IP address entries for a target site on the DNS Server. Moreover, the attacker can also create fake DNS entries for the server which may contain malicious information. 

Topics Covered in this module are:

• What is DNS Poisoning
• Use of ettercap tool
• Defense against DNS Poisoning
• Use of DNS Spoof Plugin
• How to activate DNS Spoof
• What is a hardware-switched network
• IP DHCP Spoofing
• What is Virtual Private Network

Ethical Hacking Enumeration comes under the first phase of Ethical Hacking called Information Gathering. In this process, the attacker gets a chance to establish an active connection with the victim. Here the attacker tries to extract more information for clear observation. Using Enumeration, you can find usernames of different systems. Enumeration mainly depends on the services offered by the system.  

Topics Covered in this module are:  

• What is Enumeration
• DNS Enumeration
• SMB Enumeration
• SNMP Enumeration
• Windows/Linux Enumeration
• Network shares
• What is NTP Suite
• Quick Fix

Trojans are referred to as non-replication programs that hide in the healthy processes. They cannot reproduce their own codes. Trojans have a number of malicious functions mainly used to create backdoors for a system. Trojans are used by hackers to delete and edit files in the victim system. Trojans have the capability to steal all the financial details.  

Topics Covered in this module are: 

• What is a Trojan Attack
• What is a malicious function
• Role of SMS trojans
• Ransomware Trojans
• Trojan bankers
• How to encrypt using trojans

Distributed Denial of Service Attack (DDOS) is an active attack its main aim is to make the server or the site unavailable for the client or keep the server busy so that client can’t receive any kind of resources from the server. This attack cannot be resolved easily in the network. The entire process between a huge network and all the systems. 

 Topics Covered in this module are: 

• What is an Active attack
• What is Denial of Service attack
• What are Botnets
• How the DDOS flood occurs
• Types of DDOS attacks
• HTTP Flood
• Amplification Attack
• Protocol Attacks
• Application Layer attack

Metasploit is the most popular exploit tool and all its related resources can be found in its own website metasploit.com. Basically, it comes in two versions one is a free edition and the other is commercial. Metasploit can be used with Web UI or Command Prompt. You can even install Metasploit as a separate tool in Windows and Linux. 

Topics Covered in this module are: 

• What is Metasploit
• Exploits of Metasploit
• Metasploit Payloads
• What are the hardware requirements to install Metasploit
• Metasploit Payload types

A wireless network is defined as a set of two or more devices connected to the same network via radio waves within the limited range. Using a Wireless network, you share data and resources with other devices in the network. A Wireless router plays a key role in the Wireless Network because it connects the users with the Internet. Hacking Wireless network is defeating the security of the wireless local area network. The defect in Wireless LANs is they have inherent security weaknesses. 

Topics Covered in this module are: 

• What is a Wireless Network
• How a Wireless LAN is hacked
• Working of a Wireless Router
• Kismet Tool
• Wireless Sniffing
• NetStumbler
• Wired Equivalent Privacy (WEP) protocol
• WEPcrack
• Wireless DoS Attacks

In this module, you will learn in detail about social engineering attacks. Using social engineering tools and techniques attackers can easily retrieve information from the companies by using the process if pilfering through the garbage.  

Topics Covered in this module are: 

• What is Social Engineering
• email hacking
• Social engineering attacks
• Shoulder Surfing
• Document Shredding

Password hacking is a process of hacking the secret codes of the system to get important information from computers or any devices. The password must be strong enough so that there will be no chance of hacking the password very soon. A password should be created by including alphabets, numbers, special characters, capital letters, and small letters. You need to set verification identities for any important login so that you will receive a notification if some others open your email or any of your business accounts.  

Topics Covered in this module are: 

• What is Password Hacking
• How to create a strong password
• Various techniques used to hack a password
• Dictionary Attack
• Hybrid Dictionary Attack
• Brute-Force Attack
• What is a Rainbow Table

Email Hijacking is also known as Email Hacking. It mainly works based on the three techniques and they are social engineering tools, email spoofing, insertion of viruses on a computer. In the email spoofing technique, the spammers send mail from a known domain. Social Engineering mailing mainly comes in the form of promotional emails. Email hacking can also be performed using phishing attacks.  

Topics Covered in this module are: 

• How to hack an email
• Different phishing techniques
• What is Email spoofing
• What is social engineering
• Ways to insert a virus into a user system

TCP/IP Hijacking takes place when an authorized user gains access to another user connection. It is mainly performed to bypass the password authentication I.e normally the start of the session. Shijack is one of the most popular TCP/IP Hijacking tools that is used to hijack a telnet connection between the two hosts. Hunt is another popular tool mainly used to hijack TCP/IP connection.  

Topics Covered in this module are: 

• What is TCP/IP Connection
• Use of Shijack tool
• Use of the Hunt tool
• Network Sniffing
• What is TCP/IP Hijacking

Cross-site Scripting, in short, is represented as XSS, it is actually a code injection attack. XSS’s main aim is to allow a hacker to execute malicious JavaScript in another browser. This kind of attack can also gather data from the account hijacking and they can be carried using Flash, HTML, VBScript, JavaScript, and ActiveX.  

Topics Covered in this module are: 

• What is Cross-site scripting
• Types of XSS Attacks
• Vulnerability scanners
• What is Burp Suite
• Persistent XSS
• DOM-based XSS

In Ethical Hacking, SQL Injection is defined as the set of commands that are used to retrieve the response from the database connected to a web application. This type of attack occurs mainly in the webpages developed using ASP.NET or PHP.  

Topics Covered in this module are: 

• Describing SQL Injection
• SQL Injection Query
• Different types of SQL Injection
• Various types of SQL Injection attacks
• SQLMAP
• JSQL Injection
• SQLNinja

A website is an application that can be installed on the device or system. There are two main applications on the website and they are database and web server. The web server is mainly used to execute the web application. The database plays a key role in a web application because it stores all the data used by the web app. A Website can be attacked in two different approaches using methods of attacking and the other is client-side attacks. 

Topics Covered in this module are: 

• What is a website
• Methods used to attack a website
• What is Netcraft
• Robtex
• Whois Lookup
• Discovering Subdomain