آموزش پیشرفته هک اخلاقی

 This Advanced Ethical Hacking course from VTC will provide direction on tools and techniques for performing ethical hacking (also known as penetration testing). Author Ric Messier will cover Nessus, Nexpose, Nmap, and Metasploit, as well as manual testing techniques. He will also demonstrate Web Application Testing and various tools that will assist in that effort. To begin learning today, simply click on the movie links IntroductionPlay all movies in this ChapterCollapse Welcome(01:10)T What This Course Will Cover(02:17)T System Requirements(03:20)T Prerequisites(02:54)TDradis: Results TrackingPlay all movies in this ChapterCollapse Acquiring Dradis(04:24)T Installing Dradis(02:32)T Using Dradis(04:02)T Adding Notes(02:50)T Categorizing Information(04:10)TNmapPlay all movies in this ChapterCollapse Review of Scan Types(04:36)T Advanced Scanning(05:14)T Scripting Engine(05:03)T Investigating Scan Types with Wireshark(05:33)T Importing Results to Dradis(03:18)TNessusPlay all movies in this ChapterCollapse Acquiring Nessus(02:23)T Setting Up Nessus(04:02)T Configuring Nessus(04:30)T Scan Details: Network(04:13)T Scan Details: Credentials / Plugins / Options(04:25)T Scan Details: Web Applications(05:54)T Starting a Scan(03:45)T Reviewing Results(04:49)T False Positives(03:27)T Setting Up Jobs(02:49)TNexposePlay all movies in this ChapterCollapse Acquiring Nexpose(03:02)T Setting Up Nexpose(02:13)T Configuring Nexpose(04:22)T Adding Hosts to Nexpose(03:29)T Reviewing Results & Manual Checks(03:30)TManual TestingPlay all movies in this ChapterCollapse Netcat(04:23)T Protocol Checking(07:52)T SSL_Client(04:48)T SSLScan(04:37)T Nikto(05:00)T Snmpwalk(04:00)TMetasploitPlay all movies in this ChapterCollapse Acquiring Metasploit(02:32)T Setting Up Metasploit(02:01)T Metasploit Web Interface(03:26)T Configuring Workspaces(02:44)T Running Nmap from Metasploit(03:34)T Importing Nessus Results(02:43)T Scanning with Metasploit(03:51)T Looking at Vulnerabilities(02:48)T Searching for Vulnerabilities(02:09)T Running Exploits(02:33)T Post Exploitation Data Gathering(04:08)T Pivoting & Tunneling(03:19)T Writing an MSF Plugin(06:11)T Writing Fuzzers(06:18)T Social Engineering Toolkit(02:06)T Spear Phishing(05:53)TSimple Web Application TestingPlay all movies in this ChapterCollapse Browser Plugins with Chrome(04:21)T Browser Plugins with Firefox(03:49)T Tamperdata(04:36)T Performing Injections with Tamperdata(02:43)T Cookie Data with Tamperdata(05:55)T SQL Inject Me(03:26)T XSS Me(03:25)T Firebug(04:30)T Hackbar(04:00)T Wappalyzer(03:47)T Passiverecon(04:05)T Groundspeed(03:54)TWebgoatPlay all movies in this ChapterCollapse Acquiring Webgoat(02:50)T Practicing Web Application Attacks(02:33)T Basics of Webgoat(03:04)T Working Through Lessons(04:27)TBurpsuitePlay all movies in this ChapterCollapse Acquiring Burpsuite(01:32)T Installing Burpsuite(01:57)T Running Burpsuite & Configuring Your Browser(02:49)T Spidering(03:16)T Passive Scanning(03:10)T Active Scanning(03:20)T Investigating Results(06:32)T Password Attacks(05:20)T Fuzzing Attacks(06:40)T Doing Sequencing(04:34)T Using the Intruder(05:55)TOther Web ToolsPlay all movies in this ChapterCollapse Acquiring W3Af(02:17)T Installing W3Af(02:11)T Running W3Af(02:48)T Configuring W3Af(04:28)T Acquiring & Configuring Zed Attack Proxy (ZAP)(02:49)T Quick Start with ZAP(02:50)T Scanning with ZAP(03:06)T Spidering with ZAP(02:39)T Fuzzing With ZAP(03:30)TInjection AttacksPlay all movies in this ChapterCollapse Web Architecture(03:15)T Basics of SQL Injection(04:46)T Manual Testing(03:48)T SQLMap(06:04)T Command Injection(03:24)T Cross Site Scripting(03:49)TSocial Engineering AttacksPlay all movies in this ChapterCollapse Spear Phishing(03:53)T Cross Site Request Forgery(04:12)T Rogue Servers(04:15)T Spoofed Certificates(06:05)TConclusionPlay all movies in this ChapterCollapse Course Wrap Up(02:19)T Next Steps(03:32)TCreditsPlay all movies in this ChapterCollapse About the Author