Ethical Hacking and Cybersecurity Masterclass

Topics Covered

• What is ethical hacking and why it matters
• Legal considerations and ethical guidelines
• Hacking methodology: reconnaissance to reporting
• Setting up hacking lab environment safely
• VirtualBox/VMware installation and configuration
• Kali Linux installation and initial setup
• OSI model deep dive: all 7 layers
• TCP/IP protocol suite fundamentals
• IP addressing and subnetting mastery
• IPv4 vs IPv6 differences and implications

• MAC addresses and ARP protocol
• Network devices: routers, switches, firewalls
• DNS fundamentals and exploitation basics
• HTTP/HTTPS protocol analysis
• Common ports and services

Topics Covered

• Linux file system hierarchy
• Essential Linux commands for hackers
• File permissions and ownership
• User and group management
• Process management and monitoring
• Package management (apt, yum, dpkg)
• Shell scripting fundamentals
• Bash scripting for automation
• Text manipulation: grep, sed, awk
• Network commands: netstat, ss, lsof

• Service management with systemctl
• Log file analysis and monitoring
• Cron jobs and task scheduling
• SSH configuration and hardening
• Linux security basics

Topics Covered

• Python fundamentals for security
• Socket programming in Python
• Network programming with Scapy
• Web scraping with BeautifulSoup
• Requests library for HTTP interactions
• Regular expressions for pattern matching
• HTML, CSS, JavaScript basics
• Understanding web application architecture
• Client-server communication model
• RESTful APIs and JSON

• SQL fundamentals and injection basics
• XML and XXE vulnerability basics
• Encoding and encryption basics
• Hashing algorithms and their weaknesses
• Cryptography fundamentals

Topics Covered

• Open Source Intelligence (OSINT) fundamentals
• Google dorking and advanced search operators
• Social media reconnaissance techniques
• Email harvesting and verification
• DNS enumeration and zone transfers
• Subdomain discovery techniques
• WHOIS and domain information gathering
• Shodan for device discovery
• Censys and other search engines
• Metadata extraction from documents

• Website technology identification
• Company and employee reconnaissance
• Physical location information gathering
• Dark web basics for intelligence
• OSINT frameworks and automation

Topics Covered

• Network scanning methodology
• Nmap fundamentals and advanced techniques
• TCP connect and SYN stealth scanning
• UDP scanning challenges and techniques
• Service version detection
• Operating system fingerprinting
• Nmap Scripting Engine (NSE)
• Vulnerability scanning with Nessus
• OpenVAS configuration and usage
• Banner grabbing techniques

• SNMP enumeration
• SMB/NetBIOS enumeration
• LDAP enumeration
• NFS enumeration
• Database enumeration

Topics Covered

• Web application architecture review
• Burp Suite Professional setup
• Proxy configuration and SSL handling
• Spidering and crawling applications
• Directory and file brute forcing
• Parameter discovery and fuzzing
• Technology stack identification
• Web application firewalls (WAF) detection
• API endpoint discovery
• JavaScript analysis for endpoints

• Source code review basics
• Automated scanning with Burp Scanner
• OWASP ZAP usage and automation
• Nikto and dirb for web scanning
• Custom wordlist creation

Topics Covered

• Vulnerability assessment methodology
• CVSS scoring understanding
• CVE database navigation
• Exploit database usage
• Manual vulnerability verification
• False positive identification
• Risk assessment and prioritization
• Vulnerability chaining concepts
• Patch management basics
• Compliance scanning (PCI DSS, HIPAA)
• Creating vulnerability matrices
• Remediation recommendations
• Phase 1 comprehensive review

Topics Covered

• Windows architecture and vulnerabilities
• Linux privilege escalation techniques
• Password attack methodology
• Rainbow tables and time-memory trade-off
• John the Ripper mastery
• Hashcat for GPU cracking
• Hydra for online attacks
• Pass-the-hash attacks
• Kerberoasting and ASREPRoasting
• Credential dumping with Mimikatz

• SAM and SYSTEM file extraction
• Keyloggers and screenshot capture
• Password policy bypassing
• Multi-factor authentication bypasses
• Physical access attacks

Topics Covered

• Metasploit architecture and components
• MSFconsole navigation and usage
• Exploit selection and configuration
• Payload types and encoding
• Meterpreter advanced features
• Post-exploitation with Metasploit
• Persistence mechanisms
• Pivoting through compromised hosts
• Port forwarding and tunneling
• Custom exploit development basics

• Ruby for Metasploit modules
• Evasion techniques and encoding
• Anti-virus bypass methods
• Exploit chaining strategies
• Manual exploitation techniques

Topics Covered

• SQL Injection: union, blind, time-based
• SQLMap advanced usage
• Cross-Site Scripting (XSS): reflected, stored, DOM
• XSS filter bypasses and polyglots
• Cross-Site Request Forgery (CSRF)
• XML External Entity (XXE) attacks
• Server-Side Request Forgery (SSRF)
• Insecure Deserialization exploitation
• Command injection techniques
• Directory traversal and LFI/RFI

• File upload vulnerabilities
• Authentication and session flaws
• Broken access control exploitation
• Security misconfiguration attacks
• Using Burp Suite for exploitation

Topics Covered

• Modern JavaScript framework vulnerabilities
• React, Angular, Vue.js security issues
• WebSocket vulnerabilities
• GraphQL injection and attacks
• REST API vulnerabilities
• JWT token manipulation
• OAuth and SAML attacks
• Race conditions and TOCTOU
• Cache poisoning attacks
• HTTP request smuggling

• Subdomain takeover techniques
• CORS misconfiguration exploitation
• Business logic vulnerabilities
• Payment gateway bypasses
• Two-factor authentication bypasses

Topics Covered

• Database architecture and weaknesses
• Advanced SQL injection techniques
• Oracle, MySQL, PostgreSQL specific attacks
• MongoDB injection attacks
• Redis exploitation techniques
• Elasticsearch vulnerabilities
• Database privilege escalation
• Data exfiltration techniques
• Blind injection automation
• Time-based extraction optimization
• NoSQL injection payloads
• GraphQL database attacks
• ORM injection vulnerabilities

Topics Covered

• ARP poisoning and spoofing
• DNS spoofing and hijacking
• DHCP starvation attacks
• VLAN hopping techniques
• STP manipulation
• BGP hijacking basics
• SSL/TLS vulnerabilities
• SSL stripping attacks
• Evil twin attacks
• Rogue access points

• SMB relay attacks
• LLMNR/NBT-NS poisoning
• Responder tool usage
• IPv6 attack vectors
• Network sniffing at scale

Topics Covered

• Wireless networking fundamentals
• 802.11 protocol weaknesses
• Monitor mode and packet injection
• WEP cracking techniques
• WPA/WPA2 handshake capture
• WPA2 cracking with hashcat
• WPS attacks with Reaver/Bully
• PMKID attack methodology
• Evil twin and karma attacks
• Captive portal bypassing

• Bluetooth hacking basics
• Software Defined Radio (SDR) basics
• RFID and NFC hacking
• Wireless IDS/IPS evasion
• Creating custom rogue APs

Topics Covered

• Post-exploitation methodology
• Maintaining access techniques
• Backdoor installation methods
• Rootkit basics and detection
• Living off the land (LOLBins)
• PowerShell for post-exploitation
• Windows privilege escalation
• Linux privilege escalation
• Lateral movement strategies
• Pass-the-hash/ticket attacks

• Kerberos attacks in depth
• Active Directory exploitation
• Domain dominance techniques
• Data exfiltration methods
• Covering tracks and log cleaning

Topics Covered

• Malware types and categories
• Static malware analysis
• Dynamic malware analysis
• Sandboxing and VM detection
• Basic assembly language
• x86/x64 architecture basics
• Debugging with OllyDbg/x64dbg
• IDA Pro basics
• Ghidra for reverse engineering
• Packing and unpacking

• Anti-analysis techniques
• Behavioral analysis
• Network traffic analysis
• Memory forensics basics
• Indicators of Compromise (IoCs)

Topics Covered

• Active Directory fundamentals
• Domain enumeration with PowerView
• BloodHound for AD mapping
• Kerberoasting deep dive
• ASREPRoasting techniques
• Golden ticket attacks
• Silver ticket attacks
• DCSync attacks
• Trust relationship abuse
• Group Policy exploitation

• LAPS bypass techniques
• Constrained delegation abuse
• Forest compromise strategies
• Azure AD attacks
• Hybrid environment exploitation

Topics Covered

• Android architecture and security
• iOS security model
• Mobile app reverse engineering
• APK decompilation and analysis
• Smali/baksmali usage
• Frida for dynamic analysis
• SSL pinning bypass
• Root/jailbreak detection bypass
• Mobile app traffic interception
• Insecure data storage

• Weak cryptography in mobile apps
• Intent vulnerabilities
• Deep link exploitation
• Mobile malware basics
• MDM bypass techniques

Topics Covered

• Cloud security fundamentals
• AWS security and exploitation
• S3 bucket misconfigurations
• IAM privilege escalation
• Lambda function attacks
• Azure security issues
• GCP vulnerabilities
• Kubernetes security
• Docker escape techniques
• Container image vulnerabilities

• Secrets management issues
• Terraform security
• CI/CD pipeline attacks
• Serverless security
• Cloud metadata exploitation

Topics Covered

• Physical security assessments
• Lock picking basics
• RFID/NFC cloning
• Badge cloning techniques
• Tailgating and piggybacking
• Social engineering principles
• Pretexting techniques
• Phishing campaign creation
• Vishing and smishing
• Spear phishing strategies

• Watering hole attacks
• USB drop attacks
• Evil maid attacks
• Dumpster diving value
• OSINT for social engineering

Topics Covered

• Memory layout and stack structure
• Buffer overflow theory
• Stack-based buffer overflows
• EIP/RIP control
• Shellcode development
• NOP sleds and reliability
• Bad character analysis
• Return-to-libc attacks
• Heap overflow basics
• Format string vulnerabilities

• Integer overflows
• Off-by-one errors
• Fuzzing fundamentals
• Exploit development with Python
• Debugging exploits with GDB

Topics Covered

• ASLR bypass techniques
• DEP/NX bypass methods
• Stack canaries bypass
• Return-oriented programming (ROP)
• ROP chain construction
• Gadget finding tools
• SEHOP bypass
• Control Flow Guard (CFG) bypass
• Kernel exploitation basics
• Use-after-free vulnerabilities

• Race condition exploitation
• Sandbox escapes
• Browser exploitation basics
• 0-day research methodology
• Responsible disclosure

Topics Covered

• WAF detection techniques
• Common WAF products and weaknesses
• Encoding and obfuscation techniques
• Unicode and UTF-8 bypasses
• HTTP parameter pollution
• HTTP verb tampering
• Case variation attacks
• Comment injection techniques
• White space variations
• SQL injection WAF bypasses

• XSS filter evasion
• XXE WAF bypasses
• Rate limiting bypasses
• IP rotation techniques
• CDN and reverse proxy bypasses

Topics Covered

• Cryptography fundamentals review
• Symmetric encryption algorithms
• Asymmetric encryption systems
• Hashing algorithms and collisions
• Digital signatures and certificates
• PKI infrastructure attacks
• SSL/TLS vulnerabilities deep dive
• Padding oracle attacks
• CBC bit flipping
• ECB mode vulnerabilities

• Weak random number generators
• Side-channel attacks
• Timing attacks
• Quantum computing threats
• Blockchain security basics

Topics Covered

• Red team vs penetration testing
• Adversary simulation
• MITRE ATT&CK framework
• Threat actor emulation
• Command and control (C2) setup
• Cobalt Strike usage
• Empire framework
• Covenant C2 platform
• Infrastructure setup and management
• Domain fronting

• Operational security (OPSEC)
• Anti-forensics techniques
• Long-term persistence
• Data staging and exfiltration
• Purple team exercises

Topics Covered

• DevSecOps principles and practices
• Shift-left security approach
• SAST tools and implementation
• DAST in CI/CD pipelines
• IAST and RASP technologies
• Container security scanning
• Infrastructure as Code security
• Secrets management in CI/CD
• Git security and secret scanning
• Jenkins security hardening

• GitLab CI/CD security
• GitHub Actions security
• Supply chain security
• SBOM generation and analysis
• Compliance as code

Topics Covered

• Security orchestration platforms
• SOAR implementation
• Playbook development
• Automated incident response
• Threat intelligence integration
• API security automation
• Vulnerability management automation
• Compliance automation
• Security metrics and KPIs
• Dashboard creation

• Alerting and notification systems
• Integration with ticketing systems
• Automated reporting
• Machine learning for security
• AI-powered threat detection

Topics Covered

• Threat hunting methodology
• Hypothesis-driven hunting
• Threat intelligence lifecycle
• OSINT for threat intelligence
• Dark web monitoring
• Threat actor tracking
• IOC and YARA rules
• SIGMA rules creation
• Threat hunting with Splunk
• ELK stack for security

• Network flow analysis
• Endpoint detection techniques
• Memory analysis for threats
• Threat intelligence platforms
• Information sharing (STIX/TAXII)

Topics Covered

• Incident response methodology
• NIST incident response framework
• Evidence collection and preservation
• Chain of custody
• Disk forensics and imaging
• File system analysis
• Memory forensics with Volatility
• Network forensics
• Timeline analysis
• Windows forensics artifacts

• Linux forensics artifacts
• macOS forensics basics
• Mobile device forensics
• Cloud forensics challenges
• Forensics report writing

Topics Covered

• Security frameworks overview
• NIST Cybersecurity Framework
• ISO 27001/27002
• PCI DSS requirements
• GDPR and privacy
• HIPAA compliance
• SOC 2 requirements
• Risk assessment methodologies
• Business impact analysis
• Security policies and procedures
• Security awareness training
• Vendor risk management
• Security metrics and reporting
• Audit preparation

Topics Covered

• Zero trust principles
• Identity-centric security
• Microsegmentation strategies
• Software-defined perimeter
• Identity and access management
• Privileged access management
• Multi-factor authentication
• Conditional access policies
• Device trust and compliance
• Network access control

• Zero trust network access
• Application segmentation
• Data classification and protection
• Zero trust monitoring
• Migration strategies

Topics Covered

• Blockchain technology overview
• Cryptocurrency security
• Smart contract basics
• Solidity security issues
• Reentrancy attacks
• Integer overflow/underflow
• Access control issues
• Front-running attacks
• Flash loan attacks
• Oracle manipulation

• Smart contract auditing
• Web3 security
• Wallet security
• DeFi protocol risks
• NFT security considerations

Topics Covered

• ML model security threats
• Adversarial attacks on ML
• Data poisoning attacks
• Model extraction attacks
• Privacy attacks on ML models
• Backdoor attacks in ML
• Evasion attacks
• Model inversion attacks
• Membership inference
• Differential privacy

• Federated learning security
• Secure multi-party computation
• AI ethics and bias
• Explainable AI for security
• ML for cybersecurity

Topics Covered

• Choosing the capstone: a full authorized penetration test of a provided lab environment, from reconnaissance to a professional report
• A one-page spec: scope, milestones, stack
• Repository and skeleton ready on day one
• Instructor sign-off before the build begins

Topics Covered

• Two focused weeks in vertical slices
• Instructor checkpoints and honest scope cuts
• Using the whole course: the whole methodology, offensive and defensive, under authorized and documented conditions
• Daily commits and an always-working build

Topics Covered

• The finishing pass: edge cases, errors, documentation
• A professional pentest report: findings, evidence, severity ratings and remediation advice
• A README worth reading and a demo worth watching
• A full-course spiral review before the exam

Topics Covered

• Presenting the capstone: live demo plus the hardest bug story
• The honest map of next roads: penetration tester, security analyst, red or blue team roles, and certifications like CEH and OSCP
• Where our other courses continue the journey