This module covers the structure and components of an HTTP packet, i.e., a TCP packet, and how Wireshark displays it.

Frame level is not a real protocol in itself, but it is used as the foundation for all protocols above it in Wireshark. It displays captured information, such as the exact time when certain packets were captured.

The Ethernet layer is in a sense the lowest layer according to the TCP/IP model, which refers to the link layer. This reveals the source and destination MAC addresses.

Internet Protocol level, in this case IPv4 frame refers to the network layer (Internet layer) and reveals, among others.

Total length of the packet with IP frame and other data

TTL (Time to Live): Remaining time before the packet is discarded, which prevents it from circulating endlessly in the network.


Transmission Control Protocol (TCP) - layer

This level can also be based on another protocol, such as the UDP protocol, and refers to the transport layer. In this case, however, it is the TCP protocol and it includes, for example:

The sequence number that defines the order of packets from the receiver's perspective

Confirmation number, indicating the next expected packet sequence number

TCP control flags (SYN, ACK, FIN, RST, etc.), which govern connection establishment, data transmission, and termination

Window size, which indicates how much data the receiver can receive without acknowledgement

Possible additional options or information in the TCP packet

The last level refers to the application layer in the TCP/IP model. The application layer in Wireshark, especially concerning the HTTP protocol, displays information about HTTP request and response messages. Wireshark is capable of dissecting and displaying detailed information about HTTP messages, such as headers, URLs, and cookies.

Package structure

Welcome to the Fundamentals of Penetration Testing! This path provides a comprehensive understanding of information security and IT fundamentals, including using the command line in a Linux environment, how networks operate, the basics of web development, and programming fundamentals. Throughout the course, we will also cover important skills for penetration testers, such as the use of tools like Nmap, Metasploit, and Wireshark, as well as Windows-based attacks. You will also practice exploiting some significant vulnerabilities related to various websites, which are valuable for a penetration tester to know.

The purpose of this path is to provide a clear roadmap for what to follow on the Hakatemia platform. However, if you find a specific topic particularly interesting or challenging, feel free to explore the full course on that subject, which you can find on the courses page.

What is ethical hacking?

Important warning

Intro

Linux operating system

Linux Command Line - video

First touch to the command line

Navigating the command line

Creating folders

Creating and editing files

Controlling the output

Moving files and folders

Deleting files and folders

File system permissions

Linux command line

How the Internet works - video

The beginning of the Internet

The structure of information networks

Internet addresses

Data networks and the TCP/IP model

Physical media of information networks

MAC addresses

ARP (Address Resolution Protocol)

IP addresses

Subnets, netmasks and CIDR notation

Gateways and routing

TCP (Transmission Control Protocol)

UDP (User Datagram Protocol)

DNS (Domain Name System)

DHCP (Dynamic Host Control Protocol)

Basics of information networks

Hello world

Variables

Arithmetic

Input

Data types

Conditional sentences

Imports and Random numbers

Lists

A while loop

A for loop

Functions

Python Programming

Browser side and server side

URL structure

HTTP protocol

HTTP methods

HTTP headers

HTTP status codes

Cookies

HTML markup language

JavaScript

Let's build a simple website

Website basics

Python and Flask

HTML Basics

Processing of HTML Forms

SQL Basics

Database connections

Login, session management and access management

Backend basics

What is Nmap?

Defining the destination

Configuring ports

TCP SYN scan

TCP connect scan

UDP scan

TCP FIN, NULL and Xmas scan

Identification of services (-sV)

Scanning networks with the Nmap tool

What is Metasploit?

Using nmap in metasploit

Identifying vulnerabilities

Using modules

Exercise: Unreal IRC backdoor

Continuation of the attack on other services

MSFVenom and multi/handler

Bringing exploits into the metasploit environment

Exercise 1

Exercise 2

Exploiting vulnerabilities with the Metasploit tool

What is wireshark?

Display filters - Display filters

Capture filters

Traffic analysis

Exercise 1 - http.pcap

Exercise 5 - http_with_jpegs.pcap

Analyzing network traffic with the Wireshark tool

Mapping the attack surface (Enumeration)

IIS Server Hacking, Metasploit

NTLM authentication, SAM database and hash stealing

Psexec and Pass the Hash (PtH) attack on a domain controller

AD and domains, NTDS.dit file and cracked domain controller

JTR and breaking the domain admin's NTLM hash

Windows - From an attacker's perspective

BurpSuite - Proxy

BurpSuite - Scope

BurpSuite - Repeater

BurpSuite - Decoder

BurpSuite - Comparer

BurpSuite - Logger

BurpSuite - Organizer

BurpSuite - Extensions

BurpSuite - Session Manager

BurpSuite - Community

What are XXE attacks?

What are deserialization attacks?

What are SQL Injections?

What are command injections?

Python Jinja2 Template Injections

Server-side attacks via web pages

Fundamentals of Penetration Testing

Package structure

Frame - level

Ethernet - level

Internet Protocol - layer

Transmission Control Protocol (TCP) - layer

Application Layer - HTTP Protocol

Ready to become an ethical hacker?
Start today.

Package structure

Frame - level

Ethernet - level

Internet Protocol - layer

Transmission Control Protocol (TCP) - layer

Application Layer - HTTP Protocol

Ready to become an ethical hacker?Start today.

Ready to become an ethical hacker?
Start today.