Introduction To Ethical Hacking

• i) What is hacking? And what is Ethical about it?
• ii) Types of Hackers.
• iii) Terminology of Hacking [Vulnerability, Exploit, 0-Day]
• iv) 5 Steps of Hacking [Information Gathering, Scanning, Gaining Access, Maintaining Access, Covering Tracks]
• v) Discussing about Information Gathering [Active, Passive]
• vi) Information Gathering Practical [who.is, yougetsignal.com]
• vii) Google Hacking
• viii) Types of malicious files [virus, worm, rootkit etc]
• ix) Introduction to Kali/Linux OS
• x) Social Engineering

Installation

• i) According to the configuration of Laptop, 32/64 bit, provide VMware, and any Penetration testing OS like Kali 1.1.0a/Backbox, Windows XP SP2
• ii) Install VMware, OSs on it using Bridge Connection
• iii) Completion of the Lab setup. Explanation of the tools
• i) Ping a Website to get IP
• ii) Addon:-server spy, Passive recon, Flagfox, Ghostery, Cryptofox, Wapplazer (Mozilla Firefox), Tamper data ii) Network Scan, Port Scan, Service Scan, OS Fingerprint Scan [Nmap/Zenmap]
• iii) Network Vulnerability Scanning [Nessus/Open VAS]
• iv) Metasploit, SE Toolkit
• v) Web Vulnerability Scanning [Acunetix/Zap]
• vi) Sql-Injection [Havij, Sqlmap]
• vii) Cryptography
• xi) Steganography System Hacking
• i) System Hacking using Kon-Boot, Live CD
• ii) Prevention of System Hacking
• iii) Types of Passwords
• iv) Password Cracking
• v) Dictionary, brute force attack, Rule Based attack
• vi) Keylogger, Spyware, Rootkits
• vii) Defending Keylogger, Spyware and Rootkits

Network Penetration Testing

• i) Remote Administration Tool {RAT}
• ii) Scanning with NMAP
• iii) Installing of Nessus
• iv) Vulnerability Scanning using Nessus/Qualys Free Scan/ GFI Lan Guard
• v) Metasploit
• vi) Set toolkit
• vii) Protect System from RAT
• viii) Protect System from Metasploit
• ix) What is Sniffing and what is the mechanism of Sniffing
• x) How to use Wireshark and Cain and Able as a sniffer
• xi) What is netscan and how it works. Real time practical
• xii) Malware threats and prevention
• xiii) Denial Of Service/ Distributed Denial Of Service
• xiv) Session Hijacking
• xv) Hacking Wireless Network
• xvi) MAC Spoofing
• xvii) IP Spoofing
• xviii) Tor Browser and VPN

Web Application Penetration

• i) Web Application and its basics (Understanding HTML and its response and a website works)
• ii) OWASP Top 10 Vulnerability
• iii) Sql-Injection [Basic, Advance, Blind]
• iv) Practical of Sql-Injection using Havij/Sqlmap
• v) Prevention of Sql-Injection
• vi) Cross Site Scripting and Its effect
• vii) Prevention of Cross-site scripting
• viii) Data-tampering on E-commerce Sites
• ix) Prevention of Data-tampering
• x) Website Defacement and Prevention
• xi) E-mail hacking using phishing
• xii) Hacking Web Servers Cyber Law in India in depth analysis

Course Agenda in Session Order

Footprinting (Reconnaissance-Passive)

• Types of Footprinting
• Footprinting Tools and countermeasures

Enumeration (Reconnaissance – Active)

• Enumeration Techniques
• Enumeration Countermeasures

Network Scanning

• Network Scanning Technique
• Network Scanning Countermeasures

System Hacking Methodology

• System Hacking Methodology
• Steganography
• Ste analysis Attacks
• Covering Tracks

Malware Threats

• Types of Trojans
• Trojan Analysis
• Trojan countermeasures

Virus and Worms

• Working Of Viruses
• Virus Analysis
• Computer Worms
• Malware
• Analysis Procedure and Countermeasures

Sniffing

• Packet Sniffing Techniques
• How to defend against sniffing?

Denial of Service

• DoS/DDoS Attack Techniques
• Botnets
• DDoS Attack Tools
• DoS/DDoS Countermeasures

Session Hijacking Techniques

• Session Hijacking Techniques
• Session Hijacking Countermeasures

Servers Attacks – Web Server, File Server

• Different Types of Webserver Attacks
• Attack Methodology and Countermeasures

Cryptography

• Different Types Of Web Application Attacks
• Web Application
• Hacking Methodology and Countermeasures

SQL Injection Attacks

• SQL Injection Attacks
• Injection Detection Tools

Wireless Networks Attacks

• Wireless Encryption
• Wireless Cracking Methodology
• Wireless Cracking Tools
• Wireless Security Tools

IDS, IPS, Firewalls and Honeypots

• Firewall
• Intrusion Detection System (IDS)
• Honeypot Evasion Techniques
• Evasion Tools
• Countermeasures

Cloud Computing Techniques

• Various Cloud Computing Concepts
• Cloud Computing Threats
• Cloud Computing Attacks
• Security Techniques and Tools

Cryptography

• Different Types Of Cryptography Ciphers
• Public Key Infrastructure (PKI)
• Cryptography Attacks
• Cryptanalysis Tools

Social Engineering

• Social Engineering Techniques
• Identify Theft
• Social Engineering Countermeasures

Vulnerability Assessment and Penetration Testing

• Various types of penetration testing
• Penetration Testing Roadmap
• Security Audit
• Vulnerability Assessment

Ethical Hacking As a Career In detailed discussion on Information Security Industry growth and its present career opportunities
Cyber Law in India in depth analysis