The Ethical Hacking Course (TEHC)
Learn the ins and outs of ethical hacking and network security in the industry.
RELATED RECENT PLACEMENTS
Rohit Mali
William O'Neil India
NMIMS MUMBAI
Dhiraj Satghare
RD Civil Solution
Acharya Shrimannarayan Polytechnic
Namrata Rao
Piaggio & C. S.p.A.
Rajeev Gandhi College of Engg and Research Institute
Siddhi Parab
C.C Engineers
lokmanya tilak college of engineering
Anil Katarkar
3D engineering
NATIONAL INSTITUTE OF TECHNOLOGY
Bhavesh Kumbhare
Dar Al-Handasah Engineering company
Rashtrasant Tukadoji Maharaj Nagpur University
Akash Bhadkumbe
XS CAD
Dr. D Y Patil College of Engineering & Innovation, Varale
Madhura Joshi
NEILSOFT LIMITED
Government Polytechnic Ratnagiri
Syllabus
This course is full of best-in-class content by leading faculty and industry experts in the form of videos and projects
Course Overview
- The Ethical Hacking Course is mainly focused on providing the fundamental idea and knowledge to every individual with the zeal to learn & understand the concepts of real-time Ethical Hacking
- The course offers coverage to a wide array of concepts, tactics, tools and techniques used by cyber security experts and professionals across the globe
- The course would be the first step for an individual to plug themselves into the cyber security space
Course Syllabus
On a daily basis we talk to companies in the likes of Tata Elxsi and Mahindra to fine tune our curriculum.
Week 01 Introduction to Ethical Hacking, Code of Ethics and Moral values
- In this module, we will learn
- What is Ethical Hacking, who is an Ethical Hacker, Types of Ethical Hacking/Hackers. Ethical Hacking Terminologies, Phases of Ethical Hacking, Types of Testing and Attacks
- Cyber Laws in India and Abroad
- Prerequisites – Setting up a lab environment
Week 02 Identification of Targets: Reconnaissance, Footprinting, and Social Engineering
- In this module, we will learn
- Information gathering methodologies, DNS records & Enumeration, WHOIS lookup, traceroute, email tracking, web spidering
- Social Engineering – Types of Social engineering, Tail-gating, insider attack, dumpster diving, shoulder surfing, phishing, social engineering countermeasures
Week 03 Gathering Network and Host Information: Scanning and Enumeration
- In this module, we will learn
- Scanning for networks, ports and vulnerabilities. TCP Scan types, nmap scanning, port scan countermeasures
- Banner Grabbing and OS fingerprinting, visualizing network and target structure, tools used, Enumeration
Week 04 System Hacking: Password Cracking, Escalating Privileges, and Hiding Files
- In this module, we will learn
- Password cracking techniques, types of passwords, password cracking tools, rainbow tables, keyloggers & spywares.
- Defending against password cracking, hashing, salting, privilege escalation
- Hiding files, rootkits, steganography, covering tracks and clearing evidences
Week 05 Malwares - Trojans, Backdoors, Viruses, and Worms, Physical site security.
- In this module, we will learn
- What is a Trojan, Backdoor, types of Trojans, indications of Trojan attacks, using Netcat.
- Viruses Vs Worms, types of Viruses.
- Trojan, Viruses & Worms detection and countermeasures.
- Physical site Security – Need for Physical Security, Security countermeasures.
Week 06 Sniffers - Network Data Gathering.
- In this module, we will learn
- What is Sniffing, Active Vs Passive sniffing, ARP Poisoning, Wireshark network packet sniffer, MAC Flooding, DNS Spoofing.
- Sniffing countermeasures
Week 07 Cryptography, Denial of Service and Session Hijacking
- In this week, we will learn
- Cryptography – Encryption & Decryption techniques, Public and private keys, PKI, SSL/TLS certificates, Hashing algorithms.
- DoS and DDos Attacks, BOTNETs, Smurf and SYN Flood Attacks. DoS/DDoS Countermeasures.
- Session Hijacking – What is a Session, Sequence prediction, consequences and preventive measures.
Week 08 Web Hacking: Google, Web Servers, Web Application Vulnerabilities, and Web-Based Password Cracking Techniques
- In this module, we will learn
- How web server works, Web Server vulnerabilities, HTTP Methods, HTTP verb, HTTP Request and Response, Web Application vulnerabilities and countermeasures.
- Web-Based password cracking techniques – Types of authentication, Password cracker – attack types and countermeasures.
Week 09 Attacking Applications: SQL Injection, Cross-Site Scripting, CSRF, IDOR and Buffer Overflows
- In this module, we will learn
- What is SQLi, XSS, CSRF, IDOR and Buffer overflow vulnerabilities.
- Steps to identify & exploit Web Application vulnerabilities.
- OWASP Framework and other application security frameworks.
- Preventive measures.
Week 10 Wireless - Mobile Network and IoT Hacking
- In this module, we will learn
- Overview of WEP, WPA authentication and cracking techniques. Wireless sniffers and SSID, MAC spoofing.
- Rogue Access Points, Wireless Hacking Techniques, IoT Exploit Techniques.
- Securing Wireless Networks.
Week 11 Bypassing Network Security: Evading IDSs, Honeypots, and Firewalls
- In this module, we will learn
- Types of Intrusion Detection Systems and evasion techniques.
- Types of Firewalls and Honeypot evasion techniques.
Week 12 Vulnerability Assessment & Penetration Testing Methodologies
- In this module, we will learn
- Why is VA/PT required, what is the difference between VA and PT, tools used, purpose, procedure and methodologies.
Our courses have been designed by industry experts to help students achieve their dream careers
Industry Projects
Our projects are designed by experts in the industry to reflect industry standards. By working through our projects, Learners will gain a practical understanding of what they will take on at a larger-scale in the industry. In total, there are 2 Projects that are available in this program.
Setting Up Virtual Machine
This project requires extensive hands-on involvement. Learners will have to:
- Setup 2 virtual machines (1 Kali Linux machine and 1 Windows Server 2012 machine) and find/print the local/private IP addresses of both the VMs.
- Generate a “Windows Reverse TCP Shell” payload (shell.exe) using “msfVenom” payload generator on attacker machine.
- Send the payload to target/victim machine (Windows Server 2012) using netcat (use port 7555).
- Gain reverse shell access to the Windows server from the Kali attacker machine on port 4444. Using the cmd.exe reverse shell access of the victim machine that is now accessible from the Kali Linux terminal, find the list of user accounts available on the victim (Windows Server) machine.
- Display the firewall status using cmd.exe shell access on the compromised victim machine
Installing BWAPP Web App on Local Machine
In this project, learners are required to:
- Install BWAPP web app on local machine and successfully exploit the given vulnerabilities like,
- Cross-Site Scripting - Stored (Blog) – Include a script to pop-up an alert message that says, “Vulnerable to stored XSS!”
- SQL Injection (GET/Search) – Exploit the SQLi vulnerability in the application using SQLMAP tool and list down the available databases.
- Insecure DOR (Change Secret) – Create 2 users. Login as user A and try to change the password (secret) of user B.
- Cross-Site Scripting - Reflected (User-Agent) – Inject malicious script and exploit Reflected XSS on the ‘user-agent’ request header. The malicious script should trigger an alert pop-up with number ‘0’
- Install & run Metasploitable2 server on the Virtualbox. Print the IP Address of the Metasploitable2 machine after successful boot up. Use Nessus Community edition to scan the Metasploitable2 target and generate the vulnerability report for the same. Document the steps (with screenshots) involved in creating an unauthenticated scan profile. Attach the Final Executive Summary Report for vulnerabilities (PDF format)
Our courses have been designed by industry experts to help students achieve their dream careers
Ratings & Reviews by Learners
Skill-Lync has received honest feedback from our learners around the globe.
Instructors profiles
Our courses are designed by leading academicians and experienced industry professionals.
1 industry expert
Our instructors are industry experts along with a passion to teach.
6 years in the experience range
Instructors with 6 years extensive industry experience.
Areas of expertise
- Cyber Security
Similar Courses
Got more questions?
Talk to our Team Directly
Please fill in your number & an expert from our team will call you shortly.