Ontol про пентест и этичное хакерство: подборка лучших бесплатных курсов на YouTube

(0:00) — Course Introduction/whoami
(6:12) — Part 1: Introduction, Notekeeping, and Introductory Linux
(1:43:45) — Part 2: Python 101
(3:10:05) — Part 3: Python 102 (Building a Terrible Port Scanner)
(4:23:14) — Part 4: Passive OSINT
(5:41:41) — Part 5: Scanning Tools & Tactics
(6:56:42) — Part 6: Enumeration
(8:31:22) — Part 7: Exploitation, Shells, and Some Credential Stuffing
(9:57:15) — Part 8: Building an AD Lab, LLMNR Poisoning, and NTLMv2 Cracking with Hashcat
(11:13:20) — Part 9: NTLM Relay, Token Impersonation, Pass the Hash, PsExec, and more
(12:40:46) — Part 10: MS17-010, GPP/cPasswords, and Kerberoasting
(13:32:33) — Part 11: File Transfers, Pivoting, Report Writing, and Career Advice

Installing VMWare / Kali Linux
Kali Linux Overview
Navigating the File System
Users and Privileges
Common Network Commands
Viewing, Creating, and Editing Files
Starting and Stopping Services
Installing and Updating Tools
Scripting with Bash

(0:00:00) Setting Up Burp Suite
(0:08:07) Spidering & DVWA
(0:19:04) Brute Force Attacks With Burp Suite
(0:32:55) Target Scope And Spidering
(0:46:32) Discovering Hidden Files With ZAP
(1:04:24) Web Application Firewall Detection with WAFW00F
(1:12:28) DirBuster
(1:25:27) XSS(Reflected, Stored & DOM)
(1:41:22) CSRF (Cross Site Request Forgery)
(2:02:42) Cookie Collection & Reverse Engineering
(2:14:17) HTTP Attributes (Cookie Stealing)
(2:27:48) SQL Injection

(0:00:00) Introduction
(0:01:56) Useful keyboard Shortcuts
(0:08:52) File Management & Manipulation
(0:32:18) File & Directory Permissions
(0:55:22) File & Directory Ownership
(0:59:35) grep & piping
(1:06:53) Finding Files With Locate
(1:14:36) Enumerating Distribution & Kernel Information
(1:23:30) Find + OverTheWire Bandit Challenge
(1:39:36) Shells & Bash Configuration
(1:49:53) Disk Usage
(1:58:41) File Compression & Archiving With tar
(2:05:45) Users And Groups & Permissions With Visudo
(2:24:52) Networking (ifconfig, netstat & netdiscover)
(2:40:46) TOR & Proxychains
(2:47:28) Service And Process Management (HTOP & systemctl)
(3:04:58) SSH And SSH Security
(3:20:56) Curl Fundamentals
(3:36:40) UFW Firewall (Uncomplicated Firewall)
(3:59:48) How To Clear Tracks & Logs On Linux
(4:17:43) SSH Brute Force Protection With Fail2Ban

(0:00:16) [01] General & Forensics Warmups
(0:11:54) [02] Resources & Reversing Warmups
(0:21:41) [03] Cryptography Warmups, grep & netcat
(0:34:38) [04] Here's Johnny
(0:45:29) [05] strings, pipe & Inspect Me
(0:50:48) [06] grep2, Aca-Shell-A, Client Side is Still Bad
(1:01:53) [07] Logon & Reading Between The Eyes
(1:08:54) [08] [08] Recovering From the Snap & Admin Panel
(1:14:12) [09] Assembly 0 & Buffer Overflow 0
(1:26:07) [10] Caesar Cipher 1, ENV, & Hertz
(1:32:26) [11] [11] Hex Editor, SSH, Irish Name Repo
(1:38:57) [12] Mr. Robots, Login, & Secret Agent
(1:46:54) [13] Truly an Artist & Assembly 1
(1:53:04) [14] be-quick-or-be-dead 1 & blaise's cipher
(2:00:47) [15] Buffer Overflow 1 & Hertz 2
(2:09:16) [16} leak me & Now You See Me
(2:15:40) [17] quackme
(2:26:01) [18] Shellcode
(2:30:28) [19] What Base Is This?
(2:39:10) [20] You Cant See Me & Buttons
(2:43:09) [21] Super Ext Magic
(2:51:09) [22] The Vault & What's My Name
(2:56:45) [23] Absolutely Relative
(3:00:33) [24] Assembly 2
(3:08:32) [25] Buffer Overflow 2
(3:17:07) [26] Caesar Cipher 2
(3:22:44) [27] ret2libc Exploits (got 2 learn libc)
(3:38:50) [28] RSA Madlibs
(3:55:54) [29] BE QUICK OR BE DEAD 2
(4:07:37) [30] in out error
(4:11:57) [31] Artisinal Handcrafted HTTP 3
(4:19:55) [32] echooo
(4:31:47) [33] learn gdb
(4:36:34) [34] Flaskcards

(0:00) Introduction
(0:52) Episode 1 — Enumeration
(1:20:28) Episode 2 — Enumeration, XSS, and UI Bypassing
(2:19:40) Episode 3 — XSS, SQL Injection, and Broken Access Control
(3:13:30) Episode 4 — XXE, Input Validation, Broken Access Control, and More XSS
(4:13:40) Episode 5 — SQL Injections and Live Bug Bounty Hunting

***Session 1***
(3:00) Custom Lab Files For The Course
(4:10) How Enterprise Security Works
(6:45) Enterprise Networking Explained
(11:52) Setup The Enterprise Level Pentest Lab
(19:30) Hacking The Beta Server In DMZ Area
(22:04) Reconnaissance Explained
(24:20) Using WhatWeb To Study Technology Profile
(29:40) Using WPScan For Hacking/Pen-Testing WordPres
(53:40) Using Cewl To Create A Custom Password WordList
(1:01:35) Transmutation Of Passwords With A Python Script
(1:09:22) Boom! We Cracked The Password
(1:22:47) Common Student Questions — FAQs
(1:15:44) Recap — Lab Setup On Student PC — Live

*** Session 2***
(1:34:00) Metasploit Framework Explained
(1:58:00) Search, Rank & Check To Find What You Need
(2:00:58) Use, Info & Show Options To Tune The Exploit
(2:06:19) Boom! We Got The Reverse Shell
(2:13:00) Multi Handler Explained
(2:19:22) Creating Payloads Using MSFvenom
(2:25:13) Manual Exploitation Of WordPress
(2:40:20) Common Student Questions — FAQs

***Session 3***
(2:54:00) Setup For Routing & Pivoting
(3:00:22) Ping Sweep While Routing The Traffic
(3:05:40) Adding A Manual Route To Another Network
(3:08:04) Scanning On Other Network Ranges Via The Route
(3:20:10) SMB Enumeration On Windows Machine
(3:28:00) Exploiting Windows Machine Over The Pivot
(3:37:34) Boom! We Hacked The Windows Machines Too
(3:40:30) Beauty Of Meterpreter Payload
(3:45:30) Persistence Post Exploitation Module
(3:51:30) Auto Route Post Exploitation Module
(3:54:18) Common Student Questions — FAQs

***Session 4***
(3:59:50) Setup For Advance Routing & Pivoting
(4:10:39) Portforwarding Over A Pivot
(4:17:44) Nmap Through Portforwarding
(4:21:50) Pivoting Through Socks4 Proxy Server
(4:22:00) Proxchains To Use Other Tools Over Pivot
(4:34:24) Exploiting Media Server
(4:43:32) Boom! Dummy Shell Uploaded

***Session 5***
(4:45:20) Setting Pivoted Environment With New Class
(4:49:29) Metasploit Version Of ClipBucket Exploit
(5:02:30) My Partial Access Method With Respect To Limited Time
(5:11:13) Common Student Questions — FAQs

Note: Reverse port forward is not a beginner concept so it will be taught in a more advanced course later.

***Session 6***
(5:16:34) Web Hacking Learning Resources
(5:20:00) Setup SBVA — My OSCP Inspired Web App
(5:28:48) Manual SQL Injection In Detail — OSCP Level
(6:04:12) Automated SQL Injection — LPT Level

***Session 7***
(6:15:36) Directory Bursting With DirBuster
(6:27:48`) Directory Bursting With Dirb
(6:31:00) Pen Testing Web Server With Nikto
(6:41:42) NMap Scripting Engine For Remaining Auxiliaries
(6:44:24) My Experience On OpenVas In The LPT Exam
(6:51:26) HTTP Methods Using NSE
(6:58:10) Common Student Questions — FAQs

***Session 8***
(6:59:06) KnowledgeBase Server Lab Explained
(7:02:00) LPT Methodology For Scanning
(7:09:40) Real Project We Did — Inside Look
(7:12:14) Maintain A Target Database Manually
(7:18:24) Dividing Work For A Team In Real Project
(7:24:10) Managing Professional Test In MetaSploit Framework
(7:33:54) Vulnerability Assessment
(7:37:52) Tuning An Exploit
(7:40:56) Boom! We Got The Command Shell
(7:42:04) Upgrading From A Command Shell To Meterpreter Shell
(7:45:28) Public Vs Commercial Exploits In Professional Test

***Session 9***
(7:50:22) Million Dollar Advice For Pentesting Students
(7:59:10) Privilege Escalation — Resources To Learn
(8:01:41) Privilege Escalation Using Manual Exploits
(8:32:30) Privilege Escalation Using MetaSploit Framework

(0:00:00) Introduction
(0:02:33) What is SQL Injection
(0:06:56) Lab Setup
(0:11:04) Basics of SQL
(0:16:33) Classic Injection Bypass
(0:26:01) Types of SQL Injection
(0:30:21) Union Based SQL Injection
(0:41:08) Error Based SQL Injection
(0:53:27) Boolean Based SQL Injection
(1:03:04) Time-Based SQL Injection
(1:11:39) Semi-Automated SQL Injection
(1:24:02) Fully Automated SQL Injection
(1:37:11) Defending Against SQL Injections

0:00:00 — Introduction
0:02:57 — Cyber security and Cryptography
0:39:34 — Cyber Threats
1:01:42 — History of Ethical Hacking
3:36:26 — Fundamentals of Networking
4:16:32 — Ethical Hacking Using Kali Linux
6:20:02 — Penetration Testing
6:45:54 — Nmap
7:01:58 — XSS (Cross-Site Scripting)
7:26:51 — DDOS
7:46:52 — SQL Injection
8:28:13 — Steganography
9:10:19 — Ethical Hacker Roadmap
9:18:10 — Ethical Hacking Interview Questions

0:00 — Introduction
0:40 — Intigriti Sponsorship
1:32 — Origin Story
2:10 — Important Notes
5:41 — Basic IT Skills
8:16 — Networking Skills
11:31 — Linux Skills
14:52 — Coding Skills
18:34 — Hacking Basics
24:40 — Active Directory Hacking
28:53 — Web Application Hacking
34:19 — Wireless Hacking
36:04 — Hacking Certifications
39:29 — Exploit Development
41:45 — Privilege Escalation
43:15 — Content Creators, Communities, and Conclusion

00:00:00 Introduction to Cybersecurity
00:10:15 Top Cyber Security Skills
00:22:32 Types of Cyberattacks
00:41:59 What is Cyber Security
03:02:18 Ethical Hacking
04:46:48 Cryptography
06:11:53 CompTIA Security+Cerificatios
06:23:56 CEH Certification
07:27:33 CISSP Certification
09:40:46 Cyber Security Interview Questions and answers

00:00 Intro
3:00 Teaser
8:40 Install Virtual Box
13:07 Install Kali Linux — download
19:25 Install Kali Linux — setup Virtual Box
25:29 Install pycharm in kali linux
30:44 First Line in Python

[ PORT SCANNER ]

33:00 Port Scanner (pt1)
46:35 Port Scanner (pt2)
53:33 Port Scanner (pt3)
1:00:15 Port Scanner (pt4)
1:11:37 Port Scanner (pt5)
1:21:35 Port Scanner (pt6)

[ VULNERABILITY SCANNER ]

1:34:22 Vulnerability Scanner (pt1)
1:38:32 Vulnerability Scanner (pt2)
1:45:41 Vulnerability Scanner (pt3)
2:02:58 Vulnerability Scanner (pt4)
2:17:55 Vulnerability Scanner (pt5)

[ SSH BRUTE FORCE ]

2:21:41 Install Metasploit as a VM (BONUS VIDEO)
2:26:09 SSH Brute Force (pt1)
2:33:42 SSH Brute Force (pt2)
2:38:56 SSH Brute Force (pt3)
2:44:16 SSH Brute Force (pt4)
2:54:34 SSH Brute Force (pt5)

[ ARP Spoofing ]

3:01:13 ARP Spoofing (pt1)
3:09:45 ARP Spoofing (pt2)
3:23:44 ARP Spoofing (pt3)
3:33:00 ARP Spoofing (pt4)
3:43:32 ARP Spoofing (pt5)

[ Password Sniffer ]

3:46:04 Password Sniffer (pt1)
3:51:39 Password Sniffer (pt2)
3:55:50 Password Sniffer (pt3)
4:03:10 Password Sniffer (pt4)
4:09:48 Password Sniffer (pt5)

4:15:33 ENDING

00:00 Introduction and requirements
08:44 Installing VirtualBox
20:31 Installing VirtualBox on Windows
25:10 Installing Kali Linux
45:43 Finishing our Kali installation
56:08 Installing Kali in VirtualBox on Windows 10
01:14:41 Installing Virtualbox Guest Additions
01:20:15 Guest additions fix
01:25:26 Running Kali on a USB drive
01:32:27 Essential hacking terms
01:56:47 Linux terminal basics part 1
02:11:54 Linux terminal basics part 2
02:34:41 Using the apt package manager
02:52:37 Tor part 1
03:09:06 Tor part 2
03:16:09 Proxychains
03:30:00 Adding multiple links in a proxychain
03:38:12 Macchanger
03:46:40 Setting up a web server to hack
03:54:41 phpMyAdmin configuration
04:07:00 Troubleshooting MySQL permissions
04:17:14 phpMyAdmin issue resolved
04:30:14 Setting up a database
04:37:46 Coding a simple PHP app
04:53:02 Hacking our website
05:01:15 Patching our vulnerability
05:06:52 Securing strings against SQL injections
05:28:20 SQLmap options and scanning a WordPress site
05:42:10 Using nmap to scan a server
05:52:46 Testing servers for vulnerabilities using nmap
06:00:16 Brute forcing WordPress sites
06:13:06 Brute forcing SSH, SFTP and other protocols
06:21:22 Building a simple app to brute force
06:46:27 Brute forcing PHP applications
06:56:46 Phishing demonstration part 1
07:22:01 Phishing demonstration part 2