Hello, everyone.
Welcome to the exploitation course conclusion.
This is just going to be a video that wraps everything up.
So what we're going to be doing is
we are going to revisit the learning objectives that we
encountered or that we took a look at during the course
introduction.
And the reason we are doing this is
to actually see how far we've come
and how much you should have learned
by the end of this course, right?
So we've covered a lot of topics.
And again, let's actually take a look
at the course objectives, the learning objectives
for this particular course.
And so, again, as I promised during the introduction video,
by the end of this course, you will have an introduction
to the exploitation phase of a penetration test.
You'll understand what the exploitation
phase of a penetration test includes
or what makes it up in regards to tools and techniques.
You should also have an understanding
of how to identify vulnerable services that are
running on a target system, So.
Performing vulnerability detection as well as
banner grabbing.
You should also have an understanding
of how to search for, modify, and compile publicly
available exploit code.
You should be familiar with Exploit-DB, how that works,
how to utilize SearchSploit.
You should also have an understanding
of how to modify exploit code, how to test exploit code,
how to compile exploit code.
So we've covered quite a lot.
You should also be very familiar, at this point,
with bind shells and reverse shells,
how they work in regards to their connection,
and how they can be obtained in regards
to the various cheatsheets available.
You should also have an understanding
of the various exploitation frameworks out there.
So in this course, we covered the Metasploit Framework
as well as PowerShell Empire.
So you should know how they work and how
they can be used in regards to exploitation
as well as post-exploitation in the case of PowerShell Empire.
And really, the objective here was
to show you how exploitation frameworks can streamline
and automate a penetration test or the exploitation
phase of a penetration test.
And you should also have an understanding
and the practical skills required
to perform a black box penetration test
on a Windows and Linux system.
So that, we actually covered in-depth,
and we covered the process of exploiting various services
on Windows and Linux through both manual techniques
as well as automated techniques and tools.
And of course, you should have a basic idea or an introduction
to antivirus systems, how they work,
the detection methods they use, and the various evasion
techniques, both in the case of on-disk evasion
as well as in-memory evasion.
And we also explored a few practical examples
of how to inject shellcode into portable executables
as well as how to obfuscate PowerShell code.
All right, so we've covered a lot.
And by the end of this course, this
is really what you should know.
And as I said, if you ever want to go back through the course
again, definitely do so.
Do practice with the labs that have been provided
to you, especially with the Windows black box penetration
test and the Linux black box penetration test.
As I've mentioned previously, again and again,
practice is the most important thing here.
So always, always practice, always
look at reference material like this course,
as well as books and blogs.
Learn more about what you're doing
and what's going on in the background,
and you should gradually increase your skill level.
With that being said, I want to thank you
for actually taking this course, and I hope
that you found value in it.
If you have any feedback or suggestions, please let us
know, as we're always finding ways
to improve our courses and material.
With that being said, I want to say my final thank you.
So thank you, once again, for taking this course.
And hopefully, I'll be seeing you in my next course.