Module 1: Port and Vulnerability Scanning

• Coding a simple port scanner

• Adding user input to scan custom ports

• Scanning the first 1,000 ports

• Developing an advanced port scanner (Part 1 & 2)

• Finishing and testing the scanner

• Configuring IP and installing Metasploitable lab environment

• Retrieving banners from open ports

• Coding a vulnerability scanner (Part 1 & 2)

Module 2: Password Cracking

• Understanding hashing algorithms: SHA256, SHA512, MD5

• Cracking SHA1 hashes with online dictionaries

• Recovering passwords from MD5 hashes

• Cracking crypt passwords with salt

Module 3: Sniffers, Flooders, and Spoofers

• Changing MAC address manually and coding a MAC changer

• Theory and coding of ARP spoofing (including crafting malicious ARP packets)

• Packet forwarding and restoring ARP tables

• Spoofing IP addresses and sending TCP payloads

• Running SYN flood attack with spoofed IP

• Extracting MAC addresses from network packets

• Sniffing FTP credentials (Part 1 & 2)

• Capturing passwords from HTTP traffic

Module 4: Multi-functioning Reverse Shell

• Introduction to socket programming theory

• Installing Wine and PyInstaller to convert scripts to executables

• Setting up a listener and establishing target-server connection

• Implementing send & receive commands

• Executing remote commands on the target system

• Parsing data with JSON library

• Converting Python backdoor to Windows executable

• Using OS library for directory operations

• Uploading and downloading files on the target machine

• Hiding backdoor and creating persistence

• Auto-reconnecting to server every 20 seconds

• Capturing screenshots on the target PC

• Checking for administrator privileges

• Launching other programs remotely

• Running the shell disguised as image, audio, or PDF files

Module 5: Coding a Keylogger

• Installing and using Pynput library

• Detecting and printing key presses, including spaces

• Adding timers for keylogging intervals

• Integrating keylogger into the backdoor shell

Module 6: Website Penetration Testing

• Extracting saved wireless passwords

• Saving captured passwords to files

• Bruteforcing Gmail and other login pages (Part 1 & 2)

• Finding hidden directories (Part 1 & 2)

• Discovering subdomains

• Modifying HTTP headers for testing

• Implementing basic and digest authentication bruteforcers

• Managing multithreaded brute force attacks

• Coding utility run functions and testing tools

• Overview of ransomware and its impact