Original subtitles

Hello everybody and welcome back.

And in the previous editorial we covered some of the basic networking terms which you will need to know

in order to follow up with this course now these are just some of the basic terms not really widely

explained.

If you want to know more about some of those terms that I covered in the previous video you can always

google any of them and just learn more about them.

But in this video we will cover some of the hacking terms that you need to know in order to better understand

what we will be doing in the next lectures.

So I will just write to you.

I will open leaf bed which is basically something like no pet just in minutes in here.

I will write one by one the terms that we cover.

So now the first hacking term which is also beginning process in ethical hacking is called foot printing.

Now you might be asking now what is foot printing.

Well basically it is just the same as it says it is.

It's just um getting as many information about for example a company as you can before you attack them.

Now let's say a client asks you to test his company or his.

Yes his company website.

And you want to you want to get as much information as you can.

Now one of the most common methods for doing that would probably be Google hacking which is basically

just opening Google and searching for files or anything that is uploaded on the Internet which may help

you in further attacks.

There is also a Web site called showdown and the it is basically used to discover vulnerable devices

on the Internet.

You can use that in order to check if any of those devices that belong to the companies vulnerable to

any of the known attacks.

Now we will cover all of those tools.

Uh don't worry.

We will cover that one by one in detail and you will know better what am I talking about.

But also there is one more tool which is I don't I don't think it is that known but it is called harvester.

I'm not sure we haven't installed in the clinics we might have if we don't we will install it.

Uh harvester is basically used for uh gathering the emails for a certain domain.

For example you want together all of the emails that belong to Apple company for example.

You just type the domain name and the harvester will basically automatically go over to Google and there

are a bunch of other options that I will show you but um plainly it will go over to Google and search

for all the e-mails available that that belong to that domain.

So you basically get a list of all the e-mails that belong to a certain company that you're attacking.

Now that is basically foot printing so we will cover that firstly in the one of the next lectures.

Once you finish foot printing then comes the next thing the next process in the process of ethical hacking

which is scanning an enumeration.

So I will just write that out right here scanning and enumeration now for printing basically it gets

you the information without actually testing or without actually attacking the company itself or the

website or whatever it is you are testing.

No scanning basically does is it says it is just scanning the company network for example in order to

discover what versions of software they are running what ports they have open what operating system

are they running on their machines and more and more.

Now you might have heard for this program you probably have if you have any ethical hacking knowledge

from before it is called and map.

Let me just type here and map this is the program that you will cover in details.

It is basically use to scan a network.

You can use it to scan the Web site or an hour range of IP addresses if you want to.

You can discover with it what ports are open on the certain Web site or on a certain machine or on more

machines.

You can also discover what operating system it has.

And it basically just prints you out with bunch of operating systems and it shows the possibility of

having that operating system in percentage it is most likely accurate but there are times when it just

gives you are wrong operating system but knows I didn't have that much.

Now also what an app can do is discover the version of software running on an open port.

So for example you have an edgy DP port open and you're running a website.

The End Method the end up has the ability to discover for example what web server are you running on

that port.

So it might print out a patch it to or anything else that you're running there which basically just

keeps out the banner in order for us to grab it and find out what version you're running.

Now as I said we will cover all of that in the details from now on you just need to know theoretically

what it basically does.

And we will cover it practically later on.

Now the next thing you also need to know is system hacking.

This is a very important part because this is actually the part where we discover a way to enter the

machine for example no system hacking is usually done with back doors backdoor is our program that you

run on our victim P.C. and it basically gives you full access to that P.C. without the victim knowing

that now back doors usually have some of the options such as being able to execute commands on the victim's

P.C. being able to access a microphone the web camera being able to screenshot the screen being able

to upload download files change files and for example upload a key logger which will give us back our

keystrokes that the victim is type again in there on their keyboard basically back doors are detectable.

The ones we will cover in the Intermediate section can be detected because they are mostly widely used

by every ethical hacker ever.

So in the event section will code our own back doors that will be fully undetectable by any antivirus

available

now.

Note the current system hacking we can go on until the malware.

Now you most likely know what varies but basically malware is malicious program now by malicious I mean

it can be any program that does damage to your P.C..

For example let's say you make a program a simple program that just creates files in an infinite loop.

So basically it creates infinite files.

Now that program will most likely make your P.C. crash before you get too close it.

So it is basically our version of a malware since it makes your P.C. crash and it doesn't do any good.

Now.

Most known terms for malware are worms Trojans and viruses will be also coding some of the malware.

But we are not really interested in that for now.

Since those programs really don't have any use except to destroy someone's machine so we wont be covering

that much of malware that will surely go over it.

Now the next thing you want to know is what is sniffing mobs.

Sniff sniff saying Sorry I can type at the moment.

Well basically sniffing is an action where you as it says sniff someone elses packets.

Now you shouldn't be doing that but in some cases in some ethical hacking projects you might need to

do that in order to gather some of the information.

For example a password can be hacked to sniffing for example on a local network.

If you run a man in the middle attack and you sniff others packets.

If someone logs into a to a website that is in G.P.S. you will see their password in plaintext from

the tool that you most likely we will use for sniffing is called Wild shark.

It is a widely known tool and it is used to just basically go over the packets that are going through

your network interface card so now that we covered but sniffing is we can go to social engineering.

No this is something very important as it is most likely to get you into a company or any other machine

or basically to hack anything you want to since in the social engineering attacks you don't really attack

the machine itself as much as you attack the person.

So for example I always say why would you hack a Wi-Fi from a restaurant for example if you can just

ask someone what is the Wi-Fi password.

Now it is a simple simple use of social engineering for example.

Not really that good one but is an example.

So social engineering basically means attacking people.

Now what I mean by attacking people.

Well let's say for example I make a backdoor I called a backdoor.

Now what are the chances of someone opening an executable file that looks suspicious.

Well not big chances but if you for example change the icon of that file to be a picture and you change

the name of that file to be a dot JP JP G or BMG there the chances of someone opening the file increased

drastically

so let's say for example you know something about the person that you want to hack and you just send

them a fake email from someone they know.

And in that email you send basically that picture which is a hidden backdoor and they open the picture

and the backdoor just installs itself deeply in the system without them even knowing that that is basically

what social engineering is.

It is a method of attacking people and not the machine.

Now now that we cover that we can go on to the next step which is denial of service

now denial of service is basically what it says.

It's just you.

It is used to crash someone's Web site or machine.

So basically you send a lot of packets which the website cannot handle and basically just crashes and

nobody else is able to connect to it anymore

in order to perform.

And now it's denial of service attacks.

You will need a bunch of pieces in order to be able to crash anything so you can perform a denial of

service attack with one P.C. you won't be crashing anything because there are not enough packages that

can be sent in order to crash a website for example.

But if you make a command and control center for example and send a bunch of back doors to bunch of

pieces and they all run the same command at the same time which is sending packets to the website they

will be able to crash it.

Now depending on the website some of them are easier to crash and some of them are harder to crash but

you get the basic idea now.

We will cover ask you all and accesses cross-eyed scripting.

Let me just find this exercise.

I'll just type it like here.

Well basically here we exploit the user name input not the user name but any input.

For example the basic example of a Eskil injection would be let's say you have an online shop and someone

didn't filter out the requests that you put in the search bar well enough.

So if you type here a code for example it will be you read website as part of their website code.

So you'll be running code on their Web site and you should not be able to do that.

Now these attacks are only available because of the poor programming of your Web site.

They didn't program it well enough they didn't filter out the user input so that is a skill.

Now we will cover also Wi-Fi hacking in detail.

Now there are a bunch of methods to attack Wi-Fi with the CPE Eugene you whatever you want.

Now most of the courses that I saw did not even cover the attacking of Wi-Fi with cheap you.

I didn't know why.

Because well basically the most common method is would air crack program which hacks or not hacks which

tries to break the password of Wi-Fi.

We see you now the power of the CPO is fast but the power of the your graphics card will be much much

better for hacking Wi-Fi because when you have Wi-Fi you basically get the hashed password and you don't

know you don't see it in plain text and you need the power of our CPO or power of your graphics card

in order to crack that password hash and much faster method is to crack with your graphics card.

We will also cover the attacking of Wi-Fi on an enterprise bar less which will basically use to make

a fake log in page where someone will enter their password for wireless.

We can also make an evil twin which is basically a method where you reproduce the exact the exact same

wireless hotspot and with enough signal available to the victims you can make them connect to your wireless

instead of their wireless their real virus.

So basically just to authenticate everyone from the real wireless and they will automatically connect

back to your wireless and therefore you can watch all of the data that is going through.

And also if they need to log in in order to use the bar less you will catch your day password now we

will also cover mobile hacking in the mostly mobile hacking.

We will cover the android attacks because their mind than and eyes but we will also cover some of the

apple attacks.

For example let's say you make an application which looks like a widget application and you install

it on someone's mobile phone.

You will be able to access all of their messages calls send messages.

You can watch files pictures download upload and all of that without them knowing it.

Now how we do that.

Well basically we need to create something like a backdoor just for the android device for example.

The problem with this method is that they need to click on a certain part which can be suspicious.

I will show you when we get to that but we will try to make that as less suspicious as we can.

Now there is also one more thing we need to cover which is cryptography

well you probably know what cryptography is but that is basically a method of protecting your information

now.

For example you have a passport password hashes.

Now they're hashed for a reason.

So some of the attacks such as sniffing can be used to seed the password and steal it.

You can steal the password but it won't be in the plain text it will be encrypted and you will need

to decrypt it.

And if the password this big and uses numbers letters symbols and all of that it will be very hard for

the attacker to decrypt your password now.

Cryptography is used so that only the use of codes it basically uses coding.

So Tony those for whom the information is intended can read and process it and nobody else can.

We will cover some of the basic cryptography methods but we will only touch it a little bit since cryptography

is of course itself.

It has a lot of stuff to it and we won't be able to cover all of that but we will just barely touch

it in order for you to understand what that is.

So that's about it for these basic terms now as well as the networking terms you can if you want to

search these more search more about these online and read about them to cover all of them theoretically

and practically later on in the intermediate in the Intermediate section.

And basically we will code some of our own tools in the advance section the footprint in part we will

cover.

Now in the beginning section I will show you Google hacking these showdowns website and the harvester

in order to get e-mails.

And until then I hope I hope you have a great day.

And I will see you later.

Bye.