Original subtitles

Instructor: Welcome to the Complete Ethical

Hacking Course, in this course, we will be covering

everything you need to know as an ethical hacker

from theory to the practical examples.

We will start with basics first and the further

we go in the course, the more intermediate

and advanced stuff we will cover.

Knowing theory and practicing different attack methods

that we will learn will eventually make you

a master in ethical hacking, but wait,

wait a second, we just started the course

and I'm already talking about being a master

in ethical hacking, let's slow down a little bit.

What even is ethical hacking and

what does an ethical hacker do?

Or you might also wonder can I get in trouble by doing this?

Don't worry, remember, we are ethical hackers.

This means we are hard to hack into a network or

a device or in general, we want to find as

many vulnerabilities inside the target system

but not to do bad things, quite

opposite, we want to secure them.

An ethical hacker who is hard to find

as many vulnerabilities in a certain system

is also known as a white hat hacker.

Now I mentioned a word system quite a few times by now,

what do I mean by finding vulnerabilities in a system?

Well system can be anything, it can be a network

of multiple computers or it could be just one

single computer, it could also be some company's server

that they keep their important data on,

we could also be targeting a webpage or a website.

Our ability on the other hand is anything

that could allow someone to have an unauthorized

access to that system, we are there to

discover them and secure them.

But why are we doing this?

Well as you know, there are the bad guys,

or also known as black hat hackers.

Their goal is also to find vulnerabilities

in a system but not to secure them,

instead they want to perform malicious activity

once they gain access to that system.

That is difference between a white hat hacker

and a black hat hacker, a white hat hacker is there

to find vulnerability, notify the person

that hired him and let him know of a possible

unauthorized access, you can think of us

as a cyber police, we are there to protect.

A black hat hacker on the other hand is

there to perform malicious activity

such as stealing your data, they could also try

to steal your online money, they could install a virus

or a keylogger on your PC and track everything

that you do, they can go as far as doing something

like stealing your identity, however the methods

white hat and black hat hackers use

can be quite similar, the difference is

we as white hat hackers must make sure

that we have a permission to target a certain system.

An example would go like this, we get hired

by a certain company, that company

could have a website, different networks

with computers inside the building

where for example employees work,

it could also have large servers and databases

holding important company data.

And as we already know, our goal is to

make sure that data is secured from cyber attacks,

that also employees and their machines are also in

a secure network and that website doesn't have

any bugs that could present a threat to that company.

How do we do all of this?

Well we do it by attacking the company, we act as a

black hat hacker would but with a different goal.

OK, but here we come to another problem,

you might be wondering well how am I going to learn this,

or how am I going to practice this?

I just said that we need a permission

to attack any system, right, well don't worry,

we will simulate all of these targets

with the help of our home devices

and also with the help of virtual machines.

It will be exactly the same, just this way

you won't be breaking any law while you practice

since the targets that you will attack will be yours.

OK, more about virtual machines later,

right now I want to give you a small challenge.

One of the biggest online cyber attacks

is something called phishing, in most cases,

phishing is an act of black hat hackers

tricking you into entering some of your private data

such as usernames and passwords

into a webpage that isn't to be trusted.

This is one of the ways how they steal online accounts.

Let me show you, here I have two Twitter login pages,

one of these two that you can see right here

is a fake login page and the other one is real.

Let's take a quick look at them,

so let's take a look at the first one, here it is,

and if we take a look at the second one,

they appear to be exactly the same, right?

Have you figured out which one

is real and which one is fake?

The first one that we saw is the fake login page

while the second one right here is real one.

Let's mention some of the obvious reasons

why this page right here that you're looking at

is a fake login page that can be used to steal your account.

Even though they are identical at first glance,

if we take a closer look, we can see it doesn't really

have twitter.com as the website name,

instead we have some random IP address in

our search tab and this is the biggest indication

that this page is indeed a fake page

and that you shouldn't enter any private information here.

The original page should be twitter.com.

Another thing we can notice is that

next with the website name on a real page,

we have this green lock right here

and this green lock indicates that this is

an HTTPS page or in other words, it is secured,

as it says right here, secure connection.

Usually phishing websites won't be HTTPS

and they won't have this green lock right here, however,

this too can be forged in a more advanced phishing attack.

And just to compare, our fake login page

doesn't have this green lock, if we click right here,

it says connection is not secure

and even though many of you probably knew these things

already, if you were in a hurry and you got

redirected to this fake login page,

you could potentially enter your password here

and little do you know in just a few seconds

your account has been compromised

and stolen by the bad guys since the information

that you enter right here on this page

gets sent to them and not to twitter.com.

But don't worry if you aren't familiar

with these type of attacks, throughout the course

we will learn not only how to secure ourselves

from these attacks and how these attacks work

but also we will learn how to perform the

attacks themselves, and by the way,

we also have a Discord Channel where we

answer your questions, so if you haven't already,

feel free to come and join us in Discord

since that is where we notify everyone

about any new course updates that will come

out and that is also where you can reach out

to us in case you run into any problem during the course.

Nonetheless I welcome you once again

and let's get straight into the course.