by Ric Messier | Publisher: Infinite Skills | Release Date: June 2013 | ISBN: 9781771370998

In this Advanced White Hat Hacking And Penetration Testing training course, expert author Ric Messier takes you beyond the basics of Ethical Hacking and shows you advanced techniques for discovering potential security problems with your websites and networks. This course requires that you already have familiarity with the basics of penetration testing, and assumes that you have already completed the Learning White Hat Hacking And Penetration Testing course from Infinite Skills.Ric jumps right into the nitty gritty with a chapter about using Dradis. You will learn about scanning, including stealth scanning, data acquisition using various methods, and advanced ways to utilize Metasploit. In this Ethical Hacking tutorial you also learn how to use Burp Suite to do web testing, what reverse engineering is and how to use it, and finally, Ric covers fuzzing with Peach.Once you have completed this training course on Advanced White Hat Hacking And Penetration Testing, you will have an in-depth understanding of how to test networks and websites for potential exploits for the purpose of securing them. You will also know how to use the tools and software that you will need to perform and analyze this testing.

1. Introduction
   • What You Should Expect 00:02:18
   • What You Should Know 00:04:49
   • What You Will Learn 00:04:04
   • System Requirements 00:02:35
2. Getting Organized
   • Ethical Hacking 00:04:05
   • Dradis Framework 00:02:47
   • Using Notes With Dradis 00:03:48
   • Importing Data With Dradis 00:03:43
   • Installing Plugins In Google Chrome 00:05:04
   • Installing Plugins In Mozilla Firefox 00:04:43
   • Raspberry PI 00:03:06
   • SSH Forwarding 00:05:41
3. Scanning
   • Refresher On NMAP 00:02:46
   • Scan Types 00:03:21
   • Stealth Scanning 00:04:02
   • Application Scans Using AMAP 00:03:28
   • Web Testing With NMAP 00:04:28
   • Scanning And Scripting With NMAP And UDP 00:03:58
   • Scanning With Hping 00:03:02
   • Payload-Based Scanning With Unicorn Scan 00:02:45
   • TCP Scanning With Unicorn Scan 00:04:10
4. Data Acquisition
   • Using Wappalyzer 00:03:15
   • Using Passive Recon 00:04:55
   • Using Firebug 00:05:38
   • Using Groundspeed 00:05:22
   • Converting With Hackbar 00:02:40
   • Managing Cookies 00:04:35
5. Metasploit
   • Starting Up Metasploit 00:02:41
   • Scanning With Metasploit 00:02:59
   • Service Scanning With Metasploit 00:04:59
   • SMB Scanning With Metasploit 00:06:23
   • Importing Nessus Results 00:05:16
   • Creating Payloads 00:05:36
   • Creating Standalone Exploits 00:03:18
   • Encoding And Packing 00:04:17
   • Writing Fuzzers Using Metasploit 00:06:44
   • Exploits 00:03:56
   • Using Meterpreter 00:03:08
   • Post-Exploitation 00:02:52
   • Pivoting 00:04:20
   • Manipulating Windows API 00:04:06
   • Client Side Attacks 00:06:32
   • Social Engineering Toolkit 00:02:25
   • Spear Phishing 00:03:33
   • Web Attacks 00:03:16
   • Automating Metasploit 00:03:22
   • SQL Server Logins 00:04:53
   • Token Stealing 00:02:51
   • Extending Metasploit 00:05:12
6. Web Testing
   • Running Burp Suite 00:02:15
   • Passive Scanning 00:04:35
   • Active Scanning 00:04:54
   • Using The Intruder 00:02:41
   • Brute Forcing Passwords 00:03:33
   • SQL Injection Testing With Burp Suite 00:05:59
   • Cross Site Scripting With Burp Suite 00:04:57
   • Using The Burp Suite Repeater 00:03:08
   • Using The Burp Suite Sequencer 00:04:31
   • XSS-Me 00:04:14
   • SQL-Inject Me 00:03:51
   • TamperData 00:03:39
   • Injection Attacks With TamperData 00:04:05
   • Hidden Form Fields 00:03:09
   • ZED Attack Proxy 00:04:10
   • Fuzzing With ZED Attack Proxy 00:03:36
   • Hackbar 00:02:32
7. Reverse Engineering
   • Assembly Basics 00:04:49
   • Buffer Overflows 00:04:37
   • Format String Attacks 00:03:24
   • Debugging - Linux 00:04:43
8. Fuzzing
   • Peach Fuzzer 00:02:28
   • HTTP Fuzzing With Peach 00:04:56
   • E-Mail Fuzzing With Peach 00:05:08
   • File And Network Fuzzing With Peach 00:03:33
   • Sulley 00:04:44
   • Spike Proxy 00:02:53
9. Wrapping Up
   • Extending Your Learning 00:04:05
10. About The Author
    • About Ric Messier 00:03:01