Welcome to the Offensive Hacking Cookbook, an intensive course designed to transform you into a skilled penetration tester. This No BS, comprehensive program will take you on a journey through the intricate world of ethical hacking, and penetration testing equipping you with the knowledge and hands-on skills needed to identify and exploit vulnerabilities in real-world systems.
This course is designed for:
- Complete beginners who want to learn the art of hacking from scratch and build a strong foundation in offensive cybersecurity.
- Students looking to break into the world of offensive cybersecurity and pursue a career in ethical hacking and penetration testing.
- Aspiring professionals aiming to ace certifications like CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), eJPT (eLearnSecurity Junior Penetration Tester), and PNPT (Practical Network Penetration Tester).
- Security professionals who want to sharpen their existing offensive skillset and stay ahead in the rapidly evolving cybersecurity landscape.
Course Highlights:
- 150+ videos (19+ hours) to teach you ethical hacking & cybersecurity from scratch.
- Hands on Practicals on Different machines from THM, HTB, Vulnhub and Proving Grounds
- Master complete Networking for hackers
- Master complete Linux command-line for hackers
- How to become anonymous using proxychains and TOR
- Learn importance of Note taking and complete note taking process
- Understanding Cybersecurity Fundamentals
- Understand CIA Triad and Cyber Kill Chain Methodology
- Performing complete Reconnaissance on the target with 3 Levels of depth
- Master Nmap – The Network Scanning Swiss Army Knife
- Master Enumeration of different services
- Master Vulnerability Scanning with Nikto, Nessus and OpenVAS
- Master Exploitation Techniques – Bruteforce Attacks, Default Password attacks, Credential Stuffing & Password Spraying
- Learn Manual Exploitation and Automated Exploitation with Metasploit
- Learn Fixing Exploits
- The Metasploit Framework
- Performing Client Side Attacks
- Exploitation via Office Macros
- Exploitation with HTA attack
- The Browser Exploitation Framework (BeEF)
- AV & EDR Evasion
Course Curriculum:
1. Course Introduction – Introduction to our course modules and what you will get inside.
- Introduction
- Whoami
- Why this course ?
- What you will learn here ?
- Pre-requisites & requirement
2. Note Taking & Learning – Module 2 focuses on mastering the notetaking process, teaching you how to document critical information during penetration tests and cybersecurity assessments for accurate analysis and reporting.
- Notetaking process
- Reading vs Visual learning
- Learn in Public
- Assignment, Quizzes & Labs
- Course Discord
3. Networking Refresher – Module 3 refreshes your networking knowledge, covering essential concepts like IP addressing, subnetting, and protocols crucial for effective ethical hacking and penetration testing.
- IP addresses
- MAC addresses
- Client-Server Model
- DNS
- TCP VS UDP and Three-way handshake
- Common Ports & Protocols
- OSI Model and TCP/IP Model
- How Web Works ?
- Subnetting
4. Linux Refresher – Module 4 provides a Linux refresher, equipping you with essential command-line skills and system knowledge needed for effective penetration testing and ethical hacking.
- Installing Kali Linux on Vmware & Virtual Box
- Kali Linux Overview
- Sudo Overview
- Navigating the File System
- File & Directory permissions
- Users & privileges
- Viewing, Creating and Editing Files
- grep and piping
- Finding files in Linux
- Enumerating Distribution & Kernel Information
- Shells & Bash configuration
- Disk Usage
- Networking
- File compression in linux
- Service & Process Management
- Installing software & tools
- Useful Keyboard Shortcuts
- Using TOR & Proxychains
5. Cybersecurity Principles – Module 5 covers core cybersecurity principles, including confidentiality, integrity, availability, and risk management, to build a strong foundation for ethical hacking and secure system design.
- Understanding Threats & Threat Actors
- The CIA Triad
- The Cyber Kill Chain
- Security Principles
- Threat Modelling and Threat Intelligence
- Information Security Laws & Standards
- The Ethical Hacking Methodology
6. Information Gathering (Reconnaissance) – Module 6 focuses on Passive Reconnaissance techniques, showing you how to gather valuable information about targets without directly interacting with the systems, minimizing detection risks.
- Introduction to Reconnaissance
- Identifying our Target
- Whois Records
- Google Dorking
- Company OSINT
- Web Archives
- Identifying Website Technologies
- Discovering Email addresses
- Hunting breached credentials
- Hunting for subdomains
- Open Source code reconnaissance
- Security Headers and SSL/TLS testing
- Banner grabbing and Firewall Detection
- Finding IP address behind Cloudflare
- Shodan, Zoomeye and Censys
- Enumeration with Carbon Dating
- Android Apps Enumeration
- Utilizing Social Media
- Information Gathering with Black Widow
- DNS recon using host, nslookup and dig
- DNS Zone Transfer
- Historical DNS records
- DNS Brute forcing and subdomain enumeration
- Finding and enumerating ASN
- Finding Cloud resources
- Filtering live hosts and domains
- Finding Hidden parameters and endpoints
- Automating the Reconnaissance
7. Active Reconaissance – Module 7 explores Active Reconnaissance techniques, teaching you how to directly interact with target systems to uncover vulnerabilities while managing potential risks of detection.
- Introduction to Active Reconnaissance
- Installing Metasploitable 2
- Host discovery with Netdiscover
- Host discovery with Nmap
- Port scanning with Nmap
- Service Fingerpriting
- OS Fingerprinting
- Scanning beyond Firewall & IDS
- Optimizing your scans
- Port Scanning in Windows
- Scanning with masscan
- Scanning with Rustscan
- Directory Bruteforcing
8. Enumeration – Module 8 covers Enumeration techniques, guiding you through the process of extracting detailed information from target systems to identify potential security weaknesses and attack vectors.
- Introduction to Enumeration
- FTP Enumeration
- Telnet Enumeration
- SSH Enumeration
- NetBIOS Enumeration
- SMB Enumeration
- SNMP Enumeration
- LDAP Enumeration
- NTP Enumeration
- NFS Enumeration
- SMTP Enumeration
- IMAP Enumeration
- POP Enumeration
- MYSQL Enumeration
- TFTP Enumeration
- IPSec Enumeration
9. Vulnerability Scanning – Module 9 teaches you how to perform effective vulnerability scanning, helping you identify and assess security flaws in systems to prioritize remediation and strengthen defenses.
- Introduction to Vulnerability Scanning
- Vulnerability Classification
- Vulnerability assessments
- Vulnerability Scanning with Nikto
- Vulnerability Scanning with Nmap
- Vulnerability Scanning with Nessus
- Vulnerability Scanning with OpenVAS
- The Zero days
10. Exploitation (Popping Shellz) – Module 10 delves into exploitation techniques, showing you how to safely and effectively exploit identified vulnerabilities to gain access to systems and understand potential attack paths.
- Introduction to Exploitation
- Reverse Shells vs Bind Shells
- Staged vs Non-staged payloads
- All about Malwares
- Default Passwords attacks
- Bruteforce Attacks
- Credential Stuffing & Password Spraying
- Gaining Access with Metasploit
- Locating Public Exploits
- Fixing Public Exploits
- Manual Exploitation
11. The Metasploit Framework – Module 11 focuses on using the Metasploit Framework for exploitation, teaching you how to harness this powerful tool to automate attacks and exploit vulnerabilities in a controlled, ethical manner.
- Metasploit Framework Overview
- Setting up the working environment
- Auxiliary Modules
- Exploit Modules
- Post, Nops and encoders Modules
- Meterpreter Payloads
- Creating payloads with msfvenom
- Hacking Windows XP with Metasploit
- Hacking Windows 7 with Metasploit
- Hacking Windows 10 with Metasploit
- Hacking Windows remotely over WAN
- Adding a new exploit
- Resource scripts
12. Client Side Attacks – Module 12 covers Client-Side Attacks, guiding you through techniques to exploit vulnerabilities in user devices and applications, including phishing, malware, and social engineering tactics.
- Introduction to Client Side Attacks
- Performing Target Recon
- Exploitation with Office Macros
- Exploitation with HTA attack
- The Browser Exploitation Framework (BeEF)
13. Antivirus & EDR Evasion – Module 13 teaches you strategies for evading Antivirus and Endpoint Detection & Response (EDR) systems, helping you bypass security defenses to carry out penetration testing and ethical hacking more effectively.
- Introduction to Antivirus & EDR Evasion
- How AV Detection Works ?
- AV Evasion Concepts
- AV Evasion with Shellter
- AV Evasion with Scarecrow
14. Getting Hands Dirty – Module 14 gives you 8 machines from different platforms like Tryhackme, HTB and PG to test your skills that you have learned throughout the course.
- THM – Agent T Walkthrough
- THM – Bolt CMS Walkthrough
- THM – Blue Walkthrough
- THM – Blueprint Walkthrough
- PG – Stapler Walkthrough
- PG – Monitoring Walkthrough
- HTB – Preignition Walkthrough
- Vulnhub – Kioptrix Walkthrough
Still here ? What are you waiting for? Click the buy now button and enroll in the World’s Biggest & Most Advanced Ethical Hacking Course now. See you inside the course!
