[MUSIC PLAYING]
Welcome to the Exploitation Course.
Now, before we get started, I would
like to take a couple of minutes to give you
an introduction to the course.
And the way I'm going to do that is
by taking you through what we'll be
covering at a very high level.
We will also be exploring the actual course prerequisites,
as well as some of the learning objectives
for this particular course.
So first and foremost, who am I?
My name is Alexis Ahmed.
I'm a Senior Penetration Tester at HackerSploit.
And I am also an Offensive Security Instructor
here at INE.
If you want to reach out to me, you
can do so via my email, Twitter, or LinkedIn.
And those accounts have been linked
to this particular slide.
Now that we have all of the formalities out of the way,
we can actually get started by taking a look at the course
topic overview.
So this is really all the sections
that will be included into this course.
And within each of these sections,
there are going to be multiple videos, right?
So starting off, we're going to get an introduction
to exploitation.
The objective here is to introduce
the process, or the concept, of exploitation
and how that fits within a penetration test.
So I'm going to be contextualizing exploitation
in regards to performing a penetration test,
and the importance of performing exploitation manually
as well as automatically.
So once we get an introduction to exploitation
we're then going to move over to vulnerability scanning,
where you'll learn how to scan for and detect vulnerabilities
on a target system, or how to detect vulnerabilities
on a particular service that is running on a target system.
Once we've identified these vulnerabilities,
the next step will involve searching for exploits online,
or locally--
and of course, that is offline.
And we'll be exploring the various websites
and tools that can be used to search for exploits.
Once we have been able to search for exploits that we can use,
we then need to move over to fixing exploits.
This section will involve fixing or modifying exploits
for use during exploitation.
We'll also be covering the process
of compiling exploits that need to be compiled for execution.
Once we've taken a look at how to fix exploits,
we need to go through bind and reverse shells,
because they play a pivotal role in exploitation
and, consequently, gaining reverse or remote access
to a target system.
So once we get an understanding of bind and reverse shells
and how they can be obtained on both Windows and Linux systems,
we can then move over to exploitation frameworks.
Within exploitation frameworks, we're going to be covering
the two most popular exploitation frameworks out
there, one of which is the Metasploit framework,
and secondly, we'll also be exploring PowerShell Empire .
The objective here is to show you
how these exploitation frameworks can
be used for exploitation, and, more specifically,
how they can be used to streamline and automate
exploitation.
Once we've taken a look at exploitation frameworks,
we're then going to move over to Windows exploitation and Linux
exploitation.
Now, these are going to be the most interesting sections,
primarily because you will be assigned to perform a black box
penetration test on both a Windows system and a Linux
system.
And don't worry.
There will be videos within those sections that
will show you how to gain access to the target system.
But a lab environment will be available for you,
and you can go through that.
And once you're done, you can actually go back to the videos
and refer to all the techniques that you
might have missed out on.
Or you could go through the videos
individually and then perform the black box penetration test.
So that is going to be the case for both Windows and Linux
exploitation.
Once we've completed the black box penetration test,
we'll cover the final section, which will include, or involve,
antivirus evasion and obfuscation,
where we'll be taking a look at how
to evade very basic rudimentary signature-based antivirus
solutions.
All right.
So that's what we're going to be exploring in this course.
As you can see, it's quite a lot of content,
and I'm sure you'll find a lot of value within this course.
All right.
So now that we know what we're going to be covering,
what are some of the course prerequisites?
Well, given the fact that exploitation involves
communication with other systems,
you need to have a basic familiarity with the TCP
and UDP protocols.
You also need to be familiar with Windows and Linux,
as these are the target systems you will be exploiting.
And you'll also need to have a basic familiarity
with the Metasploit framework, as this is the exploitation
framework that we will be utilizing
throughout the course.
All right.
So these are the prerequisites.
You don't need to have any prior experience with exploitation
to begin.
I would recommend actually learning a little bit
about TCP and UDP.
And in the context of the Metasploit framework,
I already have a really comprehensive course
on the Metasploit framework.
So I would recommend going through that course first,
as it'll make a lot more sense once you actually
start watching the content within this course.
All right.
So for the learning objectives, these
will essentially tie into the actual sections
within the course.
So again, students will get an introduction
to the exploitation phase of a penetration test.
You'll also learn how to identify vulnerabilities that
are running on a target system.
You'll learn how to search for, modify, and compile publicly
available exploit code.
You'll also get an understanding of how bind and reverse
shells work.
You'll get an understanding of the various exploitation
frameworks available, as well as how
they can be used to streamline and automate exploitation.
You will learn how to exploit both Windows and Linux
systems in a simulated black box penetration test.
And you'll learn how to evade signature-based antivirus
solutions.
All right.
So this is really all that you will learn from this course,
and much, much more that I haven't stated here,
because I've essentially run out of space.
But this course is extremely comprehensive.
And by the end of this course, you
should be extremely comfortable with exploitation,
especially when it comes down to Windows and Linux systems.
And you should know what to do when you actually
reach the exploitation phase of a penetration test.
And you'll also learn how to utilize manual techniques,
in addition to automated techniques,
so that you don't have to rely on one
technique over the other.
With that being said, I think we're
ready to get started with the course.
So all you need to do is just click on the first section,
and I'll see you there.