Cyberhacker Series: Finding Hacking Targets

Course details

Cyberhacker Series: Finding Hacking Targets

This course is for beginners and IT pros looking to learn more about hacking targets and doing reconnaissance.   Each chapter closes with exercises putting your new learned skills into practical use immediately.

What are the pre-requisites for this course?

1. Students should have a working understanding of TCP/IP and networking concepts. 

What will you be able to do after taking this course?

• Port inspection with Netstat - In computing, netstat (network statistics) is a command-line network utility tool that displays network connections for the Transmission Control Protocol (both incoming and outgoing), routing tables, and a number of network interfaces. 

• Metasploit and Nmap - Nmap features include:
  • Host discovery - Identifying hosts on a network. For example, listing the hosts that respond to TCP and/or ICMP requests or have a particular port open.
  • Port Scanning - Enumerating the open ports on target hosts.
  • Version detection - Interrogating network services on remote devices to determine application name and version number.
  • OS Detection - Determining the operating system and hardware characteristics of network devices.
  • Scriptable interaction with the target - using Nmap Scripting Engine (NSE) and Lua programming language.

• Visual mapping and rendering with Maltego - Maltego focuses on providing a library of transforms for discovery of data from open sources, and visualizing that information in a graph format, suitable for link analysis and data mining. 

• Whois and Nslookup - nslookup is a network administration command line  tool available for many computer operating systems  for querying the (DNS) to obtain domain name or IP address mapping or for any other specific DNS Record. 
• IoT enumeration and discovery with Shodan - Shodan is a search engine that lets the user find specific types of computers (web cams, routers, servers, etc.) connected to the internet using a variety of filters.
• Enumerating the Network Time Protocol - 

• SNMP foot printing - Simple Network Management Protocol (SNMP) is a popular protocol for network management. It is used for collecting information from, and configuring, network devices, such as servers, printers, hubs, switches, and routers on an Internet Protocol (IP) network.

• SMTP enumeration - SMTP is a service that can be found in most infrastructure penetration tests.This service can help the penetration tester to perform username enumeration via the EXPN and VRFY commands if these commands have not been disabled by the system administrator.

• Enumerating and hacking the Server Message Block protocol - Ransomware attacks such as Wannacry and Petya have used vulnerabilities in the SMB protocol to automatically spread across networks via SMB file shares.