Hello everybody and welcome to this lecture.
And right now we're going to discuss briefly what ethical hacking is.
Now this tutorial is basically for anyone who is pondering whether they want to get into this whether
this is something that they're particularly interested in or whether this is something that they thought
would be interesting but after this video they decide it is not for them.
So first of all we all know about three terms for the Ethical Hacking or most of us know about the three
terms such as the black hat the white hat and the great hat.
Now before we discuss all of those three we want to first define what ethical hacking is.
While an ethical hacker is.
And you should note these are part of the sentence where it says ethical is basically a white hat hacker
who breaks into different systems networks companies in order to prevent the cyber criminals.
The black hat hackers to actually invade and steal some valuable information.
So they're the ones that are actually attacking the system in order to protect it.
OK.
That is the basic idea of an ethical hacker.
It is more and more available to us now in the technologies.
Basically what most companies now do is they hire ethical hackers in order for them to actually attack
their own websites companies or basically any kind of system that they want to protect.
And an ethical hacker should provide them all the vulnerabilities that he or she was able to find if
there were any and how they can protect them.
OK.
Now enough about that.
We want to talk about what black head white hat and gray hat is.
Now the black hat is an evil hacker basically a black hat is someone who breaks into a system without
any approval from the client or from the anyone who owns the system.
Basically they break in just to steal valuable information such as credentials usernames passwords different
types of messages or basically anything that is valuable to someone.
For example we all know about the Sony hack that happened a few years ago where basically the hacker
group hacked entire Sony platform and it didn't really happen once it happened multiple times and that
is just an example of black hat hacking.
Now that is a black hat basically an evil hacker and a white hack is basically an ethical hacker who
hacks for good he basically hacks in order to prevent unauthorized access to the system by hacking it
and then securing it in the proper way.
And the grey head is the mixture of the black hat and white hack and pardon me white hat.
And basically he's the one who does a little bit both from the black hat and from the white hat.
OK.
So basically the Now let's talk about ethical hacking in more detail basically Certified Ethical Hacker
which is CCH which is also certificate for which we're going to talk about later on is basically a it
is also credentialing and training program provided by its council.
It is respected and trusted ethical hacker program in the industry.
Now since the inception of a Certified Ethical Hacker in 2003 the credential has become one of the best
options for industries and companies across the world.
OK.
Now today you can find basically Certified Ethical hackers working with some of the finest the largest
companies across industries like for example government financial healthcare energy and many more.
They work for those companies in order to protect them from the black hat hackers who might be able
to break into their system and steal valuable data.
Now some of the questions that you might have are what kind of vulnerabilities does an attacker see
what can attacker do with the information.
What is the best way to fix the vulnerability.
How many people notice the attempted attack and for example what information or system would a hacker
want to access.
Now those are all of the things that you need to actually question once you perform a penetration test
or once you attack a specific target you need to know what can we do with this specific information.
Once we get to it how many people will notice that if we actually attempted the attack or did we actually
went through with the entire attack and managed to actually steal something now.
And the most important thing are what kind of abilities do we see.
So what kind of vulnerabilities can we find only protect that server that we want to hack okay.
Basically the importance of ethical hacking is growing more and more each year like ten years ago.
Most of the people if you would last some random people on the street there would be like Oh that is
not really that necessary.
It's just a hobby.
And right now it is growing in one of the most important careers in fields in the I.T. community today.
Basically everything right now is going over the Internet over.
It is connected to different computers the power plants the nuclear plants everything is connected.
And basically the importance of ethical hacking is growing just because of that because the damage can
be done more than it could have been done 10 years ago for example.
Now if we coming off the internet of things everything else will also be connected to the Internet such
as your microwave your fridge everything.
So you don't really want anyone else besides you to be able to control your own flat.
OK.
So basically these government agencies and businesses organizations today are in constant need of ethical
hackers to combat the growing threat to I.T. Security.
Now a lot of government agencies professionals and corporations now understand that.
Basically if you want to protect the system you cannot do it simply just by locking your doors.
You need to try to attack it and see what are all of the available ways in order for someone to get
in.
OK.
Now there are most the actual terms and improve expressions that you should know as an ethical hacker
but we're not going to talk about that at the moment.
We are just going to mention it.
Uh basically this is of course for our teach you how to get a job.
So I already assume that you know a little bit about ethical hacking or that you are in the process
of studying and you want to see how you can get your first job.
This is not a course where we will actually teach the ethical hacking.
There are a bunch of other courses which I'll show you later on where you can actually learn ethical
hacking.
Now you should already be familiar with some of the terms and expressions if you're an ethical hacker
such as forms malware viruses ransomware and so on and so on.
So if I mentioned them I will actually believe that you already know what they mean.
Now what are the benefits of ethical hacking.
Now the primary benefit of ethical hacking is to prevent data from being stolen and misused by malicious
hackers or attackers such as black heads.
Now what are those uh precious data or valuable data that or however you want to call it basically that
can be of discovering vulnerabilities from the attackers point of view so that weak points can be fixed.
Now that is one of the benefits of ethical hacking but also implementing a secure network that prevents
security breaches that is also a job of an ethical hacker.
Defending national security by protecting data from terrorists is a little bit extreme but it is also
the benefit of being an ethical hacker or of having an ethical hacker in your own company or in this
case in the government.
Government hires ethical hackers in order to prevent their precious data from being stolen by spies
or terrorists or basically anyone that wants to get their hands on the data.
Now also gaining the trust of customers and investors by ensuring the security of their products and
data.
Now you always want to make sure that the website is secure.
Once you actually want to provide that website with your credit card number which are low a physical
address name last name birth and so on and so on all of those valuable information to you need to be
protected by that website.
So that website most likely hydrostatic hackers to test their security and to see whether there are
any vulnerabilities or basically any holes in the system from where the bad guys can get in.
So you want to make sure that your data is secured properly before you actually input your credit card
number next time.
You can also help protect networks with real world assessments.
Now there are multiple types of ethical hacking now you can hack networks websites.
Basically there are even physical hacks such as for example breaking the doors to a company.
Now that is not really a point of of course but I'm just mentioning there are a bunch of different things
that you can do with the actual thought of being an ethical hacker.
It is very interesting once you get in and basically the jobs can also be very interesting.
Now let us talk about types of ethical hacking.
We just mentioned it like right here.
But we are going to talk about them in more detail.
Now it is not big secret that any system process website device or anything else can be hacked.
Now in order to understand how the hack might happen and what the damage would be ethical hackers must
know how to think like malicious hackers and know the tools and techniques they're likely to use.
So there because of that we actually split ethical hacking in to a few different sections each section
is actually aimed at specific parts such as for example web application hacking is aimed at hacking
websites basically.
Even the word says it it is basically used to hack Web sites to protect websites such as for example
Eskil injection access injection and an injection and so on and so on.
Now for those of you who are not ethical hackers and for those who do some of the terms or some of the
attacks that you can perform on to the website.
Now the next thing is the system hacking which is one of the most important ones.
Basically the system hacking is getting the access to for example your and my machine.
So for example someone can install a backdoor onto my P.C. and monitor everything I do such as control
my keyboard control or run a key logger in order to capture my passwords to run ah that can record my
microphone basically.
They can do anything.
Once the system is hacked or once my computer system is hacked well have web server hacking basically
hacking of the databases.
For example let's say someone hacks into Facebook they enter their database and basically they steal
everyone's usernames and passwords.
Therefore the attacker would have everyone at everyone's Facebook account and you can only imagine what
kind of information that would be.
Now of course it is really hard to hack Facebook and even if you do manage to hack it it would probably
get patched the same day.
If someone finds out of course and the more popular or certain websites or certain company or something
like that is such as Facebook Google Twitter and so on and so on the harder will be to hack them because
they have hard and multiple ethical hackers.
Cybersecurity experts in order to prevent any kind of intrusion to happen on their own platforms.
Now we also have hacking wireless networks now part of its networks are something that can easily be
hacked especially if someone who's set up that part of this network has set up a big pass for it for
that actual part of us.
It can be hacked in a matter of milliseconds in that case.
And once you actually breached you wireless network you can perform different types of attacks such
as monitoring networks and network connections.
And in the middle attacks sniffing different packets see Big Data sniffing passwords and so on and so
on.
You can perform more of spoofing and all of those actual terms that you should know if you're an ethical
hacker if you're not.
Once again don't worry you will learn it later on in some different course if you decide that ethical
hacking is a job for you.
And we also have at the end the social engineering which is these mostly and nothing actually aimed
at the systems or Web sites or something like that.
It's most likely an attack aimed on to a human being.
So for example you can hack people such as asking them simply what the password deals let's say you
want to hack our wireless network in a cafe.
And the easiest way you can do that is to ask the waiter there what the password is.
There is no need for you to brute force anything you could simply just ask for password and if they
give it to you they give it to you.
If they don't then simply you perform different types of the attacks aimed for wireless networks.
Also let's say you want to steal some precious data once you're in the network.
You need to make sure that the you need to meet the person that you want to hack to input some were
you their password.
Well they shouldn't really input it.
So basically then you clone the Facebook page let's say you clone it to look exactly like the real Facebook
you sent today you send it over the local network with the are spoofing and with the demand in the middle
attack and basically then the actual target will input their password into a fake Facebook page and
therefore that is a type of these social engineering attack because you are we managed to make up human
beings input their password.
They shouldn't.
They basically believe that that page of Facebook page is a real Facebook page and therefore they typed
their email address or username and also their password and therefore they therefore you managed to
hack their account by getting their password.
Okay now we already talk about types of hackers such as black hat white hack and grey hat hackers now
there.
Now let's talk about the faces of ethical hacking.
Now there are different stages in the penetration testing process such as First of all.
The step number one is deep planning and precautions.
Basically the first step in an ethical hacking is to define the scope and goals of a test as well as
the testing methods to be followed.
It also addresses intelligence to understand the potential probabilities and how a target works.
Basically you will not have every time same target some targets get run different things and then different
programs different software and all of those targets should be approached differently.
Okay.
Now the prospective footprint is made through search engines.
Web services social network sites DNS e-mail network and so on and so on by simply using foot printing
tools you can.
There are a bunch of other tools that help you actually discover more more about a certain company or
a certain target that you want to hack.
You simply can use just google different search engines and so on and so on in order to plan out your
attack and in order to find out.
Most of the things about the company as well as the people working there.
Sometimes the easiest way to get in or to hack something is simply just by hacking a human being.
There is always that example of an older woman working in an beef company that is very well secured.
Basically let's say there is no other way to get in and simply then hacker just finds out that the older
woman likes cats and then one once she's at the job the attacker sends an email with the cat image which
has a virus attached to it and then the older woman opens the cat image and the virus is ran and basically
now you are in the company even though you didn't really breach any security measures in order to get
there.
Your target was an older woman that likes cats and just because she worked there that you managed to
hack the entire company.
Now the next part of this step two in the penetration test is the scanning.
Now the second step or step or basically scanning is performed to understand how Target's reacts to
various intrusion attempts.
Basically in two ways when the application is called static and when the application code is functioning
basically you scan a target and once you actually scan it you can see how different open ports react
to a certain scan.
What they are running what version of sore throat they're running and where you should plan your next
attack as well as the step 3 which is decon access and this is a crucial step for developing nation
is attacked using SSL injections for example cross-eyed scripting back doors or basically anything else
in order to find the vulnerabilities and then exploit them by stealing intercepting traffic and interfering
privileges in order to understand what can you do to that specific target.
And once you actually gained access and managed to actually exploit the target you want to maintain
that access.
Now in this type of penetration testing the vulnerability is used as a persistent presence for a long
duration in the infected system in order to for example stay in sensitive information or to spread inside
and that quickly gaining access to different machines different servers and anything else.
And the last part is the final stage of the analysis.
And basically this final stage of a penetration test e e stage to compile the result by analysing and
commenting about the vulnerabilities exploited or some of the access to the data that you shouldn't
have access to and the basically amount of time that the tester can remain unnoticed in the system.
OK.
So basically the last step is nothing really focused on the ethical hacking or on the penetration test
you basically just write everything you found everyone ability if you know how to fix them you also
write how you should fix them what approach they should take in order for that attack not to happen
anymore.
And basically that is the last step of the analysis.
There are different certificates that you can take which we're going to talk about later on but for
now let's just mention them.
There is a certificate for example certified network defender that's program focuses on creating networks
and ministries administrators who are trained in protecting detecting and responding to threats on the
network.
Now the course contains handsome lab based in major network through the course online would most likely
contain the hands on laps based on major network security tools and techniques which will provide network
with threat administrators real world expertise on current network security technologies and operations.
Now another certificate that you most likely have heard of is these certified ethical hacker or CCH
basically DCH uh creates individuals in specific net network security discipline on ethical hacking
from a vendor perspective.
And this is the world's most advanced certified online ethical hacking training.
What they will teach you everything from hacking systems from web application hacking from social engineering
and all those different types of attacks that you can perform on your target.
There are different steps in sort of radical hackers such as practical attacks.
And once again at the end you have the master certificate.
Where basically they will teach you everything at once.
There are also some of the more advanced certificates that are certified threat intelligence analysts
and certified security analysts such as the practical certified security analyst.
OK.
And at the end you can get LPT or the licensed penetration tester and therefore you will actually be
able to go and get hired by some company.
Now all of these certificates are not really a must.
You don't really need to have any of them in order to get a job in the ethical hacking community.
It is always important to have the knowledge and to be willing to get the knowledge it is more important
to you to actually be interested in the field itself and to think like a hacker than to actually have
any of these certificates.
Basically they are not needed for you to get the job.
But for mentioned and later on and talk about a little bit more about them as that is something that
you that will help you get the job but it really isn't needed.
So that would be basically about it for this video.
What we talked about Fred here is basically what ethical hacking is.
What types of ethical facts are there.
Why I should basically what kinds of ethical hackers are there such tech had great had white hat and
what types of penetration tests can we perform which targets can we attack and so on and so on.
So after this video you should have a pretty good knowledge into whether this is something that you
wish you could be interested in or not.
If it is you can proceed with this course and you can.
And I will show you later on which online with the courses you can start you can start with in order
to start learning ethical hacking so coping you this story all and I hope I will see you in the next
lecture by.