Course Syllabus

Module 1 – Introduction to Ethical Hacking

1. Module 1 Notes
2. Introduction
3. Introduction to Hacking
4. Information Security Threats and Attack Vectors
5. Hacking Concepts
6. Ethical Hacking Concepts and Scope
7. Information Security Controls Part 1
8. Information Security Controls Part 2
9. Information Security Laws and Standards

Module 2 – Footprinting and Reconnaissance

1. Module 2 Notes
2. Footprinting and Reconnaissance
3. Footprinting Methodology
4. Google Hacking
5. FootPrinting Through Social Networking
6. Website Foot Printing
7. Email Foot Printing
8. Competitive Intelligence Gathering
9. WhoIs Foot Printing
10. DNS Logical and Geographical Foot Printing
11. Network Footprinting
12. Foot Printing
13. Foot Printing Tools
14. Foot Printing Penetration Testing
15. Conduct Recon with Ping Act
16. Query DNS with NSLookUp Act
17. Discover Website Subdomain with Sublist3r Act
18. Obtain OSINT Information About a Person wit Pipl Act
19. Gather Contact and Host Information with theHarvester Act
20. Automate OSINT Research with Recon-ng Act
21. Get Started with Metasploit Act
22. Conduct Open Source Intelligence with OSR Framework Act
23. Obtain Whois Information with Smart Whois Act
24. Extract Links, URLs, and Emails from Websites with Web Data Extractor Act
25. Create an Offline Copy of a Website with HTTrack Act
26. Trace an Email with eMail Tracker Pro Act

Module 3 – Network Scanning

1. Module 3 Notes
2. Network Scanning
3. Discovery Scans
4. Port Scans
5. Nmap
6. Nmap Stealth Scans
7. Nmap Options
8. H-ping and Other Scanners
9. SSDP Scanning
10. Scanning Beyond IDS and Firewall
11. Banner Grabbing
12. Scanning Pen Testing
13. Checking for Live Systems with Angry IP Scanner Act
14. Network Scanning with MegaPing Act
15. Advanced Scanning with nmap Act
16. Packet Crafting with Hping3 Act
17. Packet Crafting with Colasoft Packet Builder Act

Module 4 – Enumeration

1. Module 4 Notes
2. Enumeration
3. Enumeration Technicques Tools
4. NetBIOS Enumeration
5. SNMP Enumeration
6. LDAP Enumeration
7. NTP Enumeration
8. SMTP and DNS Enumeration
9. Enumeration Countermeasures
10. Enumeration Penetration Testing
11. Enumerate NetBIOS Information with SuperScan Act
12. Enumerate NetBIOS Information with NetBIOS Enumerator Act
13. Enumerate NetBIOS and LDAP Information with Hyena Act
14. Enumerate SNMP WMI and Other Information Using SoftPerfect
15. Network Scanner Act

Module 5 – Vulnerability Analysis

1. Module 5 Notes
2. Vulnerability Analysis
3. Vulnerability Assessment Solutions
4. Vulnerability Scoring Systems
5. Vulnerability Assessment Tools and Reports
6. Perform a Vulnerability Scan and Analysis with Nessus Act

Module 6 – Malware Threats

1. Module 6 Notes
2. Malware Threats
3. Trojan Concepts
4. Trojan Types
5. Trojan Tools
6. Virus and Worm Concepts
7. Virus Types
8. Malware Analysis
9. Malware Reverse Engineering
10. Malware Detection
11. Malware Countermeasures
12. Malware Penetration Testing
13. Infect a Victim with a Remote Access Trojan Act\

Module 7 – Sniffing

1. Module 7 Notes
2. Sniffing Concepts
3. DHCP Attacks
4. MAC Attacks
5. ARP Poisoning
6. DNS Poisoning
7. Sniffing Tools
8. Sniffing Countermeasures
9. Sniff a Clear Text HTTP Session with Wireshark Act
10. Intercept and Crack a Network Login Act

Module 8 – Social Engineering

1. Module 8 Notes
2. Social Engineering
3. Human Based Social Engineering
4. Computer Based Social Engineering
5. Additional Types of Social Enginnering
6. Social Engineering Countermeasures
7. Social Engineering Penetration Testing
8. Fool a User with a Baited USB Stick Act
9. Harvest Credentials with Spear Phishing Act

Module 9 – Denial of Service

1. Module 9 Notes
2. Denial of Service
3. Common Dos-DDoS Attack Types
4. Additional DoS Attack Types
5. BotNets
6. DoS Countermeasures
7. Additional DoS Countermeasures
8. DoS Penetration Testing
9. Perform a DoS Attack With the Low Orbit ION Cannon Act
10. Step Up the DoS Attack With the High Orbit ION Cannon Act
11. Perform a Slowloris DoS Attack Act

Module 10 – Session Hijacking

1. Module 10 Notes
2. Session Hijacking
3. Browser Session Hijacking
4. Way to Compromise a Session Token
5. Client Side Attacks
6. Hijacking at the Network Level
7. Session Hijacking Tools
8. Session Hijacking Countermeasures
9. Session Hijacking Testing
10. Perform a MITM Attack with Ettercap Act

Module 11 – Hacking Webservers

1. Module 11 Notes
2. Hacking Web Servers
3. Webserver Attacks
4. Methodology of Webserver Attacks
5. Webserver Attack and Defense Tools
6. Webserver General Defense
7. Webserver Specific Attack Countermeasures
8. Webserver Patch Management
9. Webserver Pen Testing
10. Footprint a Web Server with IDServe Act
11. Conduct a Simple Web Server Vulnerability Scan with Uniscan Act
12. Conduct a Comprehensive Web Server Vulnerability Scan with Uniscan Act
13. Brute Force a Web Server with Medusa Act

Module 12 – Hacking Web Applications

1. Module 12 Notes
2. Hacking Web Applications
3. Web App Vulnerabilities and Exploits
4. Web Application Threats
5. Injection Attacks
6. Hidden Fields and Clickjacking
7. Cross Site Attacks
8. Additional Web App Attacks
9. Web Hacking Methodology
10. Web App Hacking Countermeasures
11. Web App Security Tools
12. Web Application Penetration Testing
13. Conduct a Simple Command Injection Attack Act
14. Inject a Malicious Link with Cross Site Scripting Act
15. Conduct a Cross Site Request Forgery Attack

Module 13 – SQL Injection

1. Module 13 Notes
2. SQL Injection
3. Types of SQL Injection
4. SQL Injection Methodology
5. SQL Injection Tools
6. SQL Injection Countermeasures
7. SQL Injection Penetration Testing
8. SQL Injection Act

Module 14 – Hacking Wireless Networks

1. Module 14 Notes
2. Hacking Wireless Networks
3. Wireless Discovery and Mapping
4. WiFi Sniffers
5. WiFi Attacks
6. WiFi Cracking
7. Wireless Hacking Tools
8. Bluetooth Hacking
10. Wireless Hacking Countermeasures
11. Wireless Security Tools
12. Wireless Penetration Testing
13. Crack a WEP Key with Aircrack-ng Act
14. Crack a WPA Key with Aircrack-ng Act

Module 15 – System Hacking

1. Module 15 Notes
2. System Hacking Methodology
3. Windows System Vulnerabilities and Exploits
4. Linux System Vulnerablities and Exploits
5. Password Cracking Methods
6. Network Service Password Cracking
7. Windows Password Cracking
8. Linux Password Cracking
9. Password Cracking Tools
10. Other Methods of Obtaining Passwords
11. Keylogging
12. Spyware
13. RootKits
14. Hiding Files
15. Steganography
16. Privilege Escalation
17. Creating and Maintaining Remote Access
18. Hiding Evidence
19. System Hacking Penetration Testing
20. Spoof Name Resolution and Capture Credentials with Responder Act
21. Dump and Crack Password Hashes with pwdump7 and Ophcrack Act
22. Crack Passwords with L0pht7 Act
23. Exploit Client Side Vulnerabilities Act
24. Track User Activity with Spyware Act
25. View and Clear Audit Policies with Auditpol Act
26. Hide Data Using Whitespace Steganography Act
27. Hide Data Using Least Significant Bit Steganography Act
28. Cover Your Tracks Act

Module 16 – Hacking Mobile Platforms

1. Module 16 Notes
2. Hacking Mobile Platforms
3. Hacking Android OS
4. Rooting Android
5. Securing Android
6. Hacking iOS
7. Jailbreaking iOS
8. Securing iOS
9. Hacking Windows Phone OS
10. Hacking Blackberry
11. Mobile Device Management
12. Mobile Security Guidelines and Tools
13. Mobile Penetration Testing
14. Prepare Your Wireless Email Environment Act
15. Pwn a Mobile Device with Metasploit Act
16. Use a Mobile Device in a DDoS Campaign Act
17. Return Your VMs to Original Configuration Act
18. Uninstall Main Activity Malware from Android Act

Module 17 – Evading IDS, Firewalls, and Honeypots

1. Module 17 Notes
2. Evading IDS Firewalls and Honeypots
3. Firewalls
4. Honeypots
5. IDS Firewalls and Honeypots Tools
6. Evasion
7. Evasion Countermeasures
8. IDS Firewall Honeypot Penetration Testing
9. Fly Below IDS Radar Act
10. Test and Analyze a Honey Pot Act
11. Bypass Windows Firewall Act

Module 18 – Cryptography

1. Module 18 Notes
2. Cryptography
3. Encryption Algorithms
4. Cryptography Tools
5. Public key Infrastructure
6. Email Encryption
7. Disk Encryption
8. Cryptography Attacks
9. Crytography Penetration Testing
10. Examine Hashing Algorithms Act
11. Protect Data with Symmetric Encryption Act
12. Protect Data with Asymmetric Encryption Act

Module 19 – Cloud Computing

1. Module 19 Notes
2. Cloud Computing
3. Virtualization
4. Cloud Computing Threats
5. Countermeasures to Cloud Computing Threats
6. Cloud Computing Attacks
7. Cloud Security
8. Cloud Security Best Practices
9. Cloud Penetration Testing

Module 20 – IoT Hacking

1. Module 20 Notes
2. IoT Hacking
3. IoT Vulnerabilities and Attacks
4. IoT Hacking Methodology and Tools
5. IoT Hacking Countermeasures
6. oT Penetration Testing
7. Search the Internet for Vulnerable IoT Devices Act
8. Conclusion