Open "http_with_jpegs.pcap" (download below) on your own machine, or alternatively use Hakatemian remote workstation (below) and open Wireshark and /root/pcaps/http_with_jpegs.pcap file.

If you haven't installed Wireshark on your own machine, you can complete the tasks on this Kali Linux remote workstation that already has Wireshark and the necessary PCAP files ready.

Wireshark - practice tasks

Exercise 5 - http_with_jpegs.pcap

Welcome to the Fundamentals of Penetration Testing! This path provides a comprehensive understanding of information security and IT fundamentals, including using the command line in a Linux environment, how networks operate, the basics of web development, and programming fundamentals. Throughout the course, we will also cover important skills for penetration testers, such as the use of tools like Nmap, Metasploit, and Wireshark, as well as Windows-based attacks. You will also practice exploiting some significant vulnerabilities related to various websites, which are valuable for a penetration tester to know.

The purpose of this path is to provide a clear roadmap for what to follow on the Hakatemia platform. However, if you find a specific topic particularly interesting or challenging, feel free to explore the full course on that subject, which you can find on the courses page.

What is ethical hacking?

Important warning

Intro

Linux operating system

Linux Command Line - video

First touch to the command line

Navigating the command line

Creating folders

Creating and editing files

Controlling the output

Moving files and folders

Deleting files and folders

File system permissions

Linux command line

How the Internet works - video

The beginning of the Internet

The structure of information networks

Internet addresses

Data networks and the TCP/IP model

Physical media of information networks

MAC addresses

ARP (Address Resolution Protocol)

IP addresses

Subnets, netmasks and CIDR notation

Gateways and routing

TCP (Transmission Control Protocol)

UDP (User Datagram Protocol)

DNS (Domain Name System)

DHCP (Dynamic Host Control Protocol)

Basics of information networks

Hello world

Variables

Arithmetic

Input

Data types

Conditional sentences

Imports and Random numbers

Lists

A while loop

A for loop

Functions

Python Programming

Browser side and server side

URL structure

HTTP protocol

HTTP methods

HTTP headers

HTTP status codes

Cookies

HTML markup language

JavaScript

Let's build a simple website

Website basics

Python and Flask

HTML Basics

Processing of HTML Forms

SQL Basics

Database connections

Login, session management and access management

Backend basics

What is Nmap?

Defining the destination

Configuring ports

TCP SYN scan

TCP connect scan

UDP scan

TCP FIN, NULL and Xmas scan

Identification of services (-sV)

Scanning networks with the Nmap tool

What is Metasploit?

Using nmap in metasploit

Identifying vulnerabilities

Using modules

Exercise: Unreal IRC backdoor

Continuation of the attack on other services

MSFVenom and multi/handler

Bringing exploits into the metasploit environment

Exercise 1

Exercise 2

Exploiting vulnerabilities with the Metasploit tool

What is wireshark?

Display filters - Display filters

Capture filters

Traffic analysis

Package structure

Exercise 1 - http.pcap

Analyzing network traffic with the Wireshark tool

Mapping the attack surface (Enumeration)

IIS Server Hacking, Metasploit

NTLM authentication, SAM database and hash stealing

Psexec and Pass the Hash (PtH) attack on a domain controller

AD and domains, NTDS.dit file and cracked domain controller

JTR and breaking the domain admin's NTLM hash

Windows - From an attacker's perspective

BurpSuite - Proxy

BurpSuite - Scope

BurpSuite - Repeater

BurpSuite - Decoder

BurpSuite - Comparer

BurpSuite - Logger

BurpSuite - Organizer

BurpSuite - Extensions

BurpSuite - Session Manager

BurpSuite - Community

What are XXE attacks?

What are deserialization attacks?

What are SQL Injections?

What are command injections?

Python Jinja2 Template Injections

Server-side attacks via web pages

Fundamentals of Penetration Testing

Exercise 5 - http_with_jpegs.pcap

Wireshark - practice tasks

Ready to become an ethical hacker?Start today.

Ready to become an ethical hacker?
Start today.