Penetration Testing with KALI and More: All You Need to Know

Xploit academy

• Introduction 02:09

  • 1: The Power of Ethical Hacking Preview 02:09

• Setup Your Lab 10:45

  • 2: Why KALI Linux 01:41
  • 3: Different Installation Methods 00:36
  • 4: Install Kali Linux 04:14
  • 5: Color Coding Root User 00:59
  • 6: Installing Windows (Victim's Machine) 01:43
  • 7: Understand Color Coding 01:32

• Your Command and Control Server 13:35

  • 8: Get Started with Linux Commands 08:24
  • 9: Explore Main Services and Programs 05:11

• Steps to Plan a Successful Penetration Test 09:27

  • 10: Threat Modeling 05:33
  • 11: Penetration Testing Cycle 03:54

• 9+ Ways to Attack a Network 1:17:03

  • 12: Wireshark Simplified 06:17
  • 13: How Does Port Scanning Work 03:59
  • 14: Introducing NMAP 02:57
  • 15: Understand NETBIOS and SMB Attacks 02:33
  • 16: NMAP and ZENMAP Simplified 09:56
  • 17: Execute Man-in-the-Middle Attacks 08:35
  • 18: Perform a DNS Spoofing Attack 05:21
  • 19: Identify a DNS Zone Transfer Vulnerability 03:43
  • 20: Plan DOS and DDOS Attacks 02:21
  • 21: All-in-one Metasploit Framework 09:37
  • 22: Transfer the Payload to a Windows Machine 02:21
  • 23: Create Your First Trojan and Infiltrate a Target 08:11
  • 24: Explore The Powerful Armitage Tool 08:07
  • 25: Hide a Payload in a JPEG Image 03:05

• Attack Modern Wireless Networks 19:50

  • 26: Modern Wireless Networks 07:11
  • 27: WEP Cracking 01:26
  • 28: WPA and WPA2 Cracking 06:21
  • 29: WPS Cracking 04:02
  • 30: Tips to Improve Your Wireless Network Security 00:50

• 4+ Ways to Attack a Web 41:54

  • 31: Web Applications Security Overview 02:27
  • 32: Web Applications Attack Surface 05:59
  • 33: Metasploitable VM 02:33
  • 34: Discover Vulnerabilities in Websites 07:56
  • 35: Control Database Server with SQLMap 08:26
  • 36: Easily Hack a WordPress Site 06:54
  • 37: Intercept, Analyze, and Replay Web Traffic 07:39

• Simple Ways to Gain Access 42:57

  • 38: Various Password Attacks 03:35
  • 39: Hashing in a Nutshell 05:33
  • 40: Execute an Offline Password Attack on Linux 06:16
  • 41: Execute an Offline Password Attack on Windows 05:54
  • 42: Run an Online Password Attack on Linux 03:23
  • 43: Run an Online Password Attack on a Router 01:57
  • 44: Crack Passwords with Rainbow Tables 04:19
  • 45: Design Effective Wordlists 10:08
  • 46: Password Management Tips 01:52

• Proven Social Engineering Techniques 28:24

  • 47: SE Attack Vectors 03:57
  • 48: Open-source Intelligence (OSINT) 01:32
  • 49: Google Dorks Live Examples 06:27
  • 50: Collect and Visualize Data with Maltego 04:47
  • 51: Execute a Phishing Attack 04:49
  • 52: Hack Facebook, Twitter, and Gmail Accounts 06:52

• Attack Mobile Phones 29:49

  • 53: Mobile Attack Surface 03:59
  • 54: Decrypt SSL Session 11:53
  • 55: Reverse Engineer an Android Application 07:07
  • 56: Hack an Android Phone and Download its Contacts 06:50

• Maintain Permanent Access 44:17

  • 57: Post-Exploitation Terminologies 03:41
  • 58: Backdoor Tools Explained 04:06
  • 59: Netcat Simplified 10:45
  • 60: Install a Backdoor 06:13
  • 61: Deface a Website in Few Seconds 04:13
  • 62: Understand Hidden Tear Ransomware 09:09
  • 63: Bypass Firewalls by Tunneling Data and Commands over DNS 06:10

• Let’s Get Real ! 13:16

  • 64: Publish Your Weapons Online 03:20
  • 65: Stay Anonymous Online 03:54
  • 66: Setup a Stealthy CC 06:02

• How to Prepare and Present Your Report 18:56

  • 67: Report Writing Techniques 12:41
  • 68: How Can Pentest.ws Help You 06:15

• Secret Sauce BONUS 20:07

  • 69: Create a WiFi Jammer 09:58
  • 70: Create a $3 Rubber Ducky Key-logger 10:09

The layout of the course is easy to walk-through, and the videos are made short and engaging. My purpose is to present you with case exposition and show you live demos, while utilizing a large set of KALI tools (Enumeration, Scanning, Exploitation, Persistence Access, Reporting and Social Engineering tools) in order to get you started quickly. The necessary resources and tools are posted for each sections of the course.

Before jumping into penetration testing, you will first learn how to set up your own lab and install the needed software to practice Penetration Testing along with me. All the attacks explained in this course are launched against real devices, and nothing is theoretical. The course will demonstrate how to fully control victims' devices such as servers, workstations, and mobile phones. The course can also be interesting to those looking for quick hacks such as controlling victim's camera, screen, mobile contacts, emails and SMS messages.

• Anyone who wants to learn how to secure their systems from hacker
• Anyone who wants to learn how hackers can attack their computer systems
• Anyone looking to become a penetration tester (From zero to hacker)
• Computer Science, Computer Security, and Computer Engineering Students

• Intermediate computer knowledge
• Fair knowledge of Windows systems
• Networking basics
• Programming basics
• Web applications basics
• Mobile applications basics
• General idea about information security

The course will help you in your red team career by enabling you to:

• Assess security risks by adopting a standard Threat Modeling technique
• Adopt a structured approach to perform Penetration Tests
• Protect yourself and the organization you work at
• Compile security findings and present them professionally to your clients
• Make the world a safer place