Shahid Khan

Years of Experience in Kali Linux Training

4

Teaching Experience in detail in Kali Linux Training

-------------------- 1. System Hacking | -------------------- --> windows password cracking --> Cracking windows10 password --> hacking basics --> msfvenom and metasploit basics --> hacking windows --> meterpreter basics --> changing the MACE --> keylogging --> bypassing host based firewall --> privilege escalation --> enabling rdp remotely --> getting windows password (phishing) --> getting windows password [winlogon.exe(excellent)] --> add an administrator user to victim pc --> getting the windows Hashes --> viewing each step of victim in gui --> injecting vnc server --> recovering deleted files from victim's pc --> recording victim's sound/voice --> pretending to be other user --> phishing --> Hosts based Phishing --> Persistence --> Resource File --> Railgun (Playing with windows dll's) --> clearing logs --> Finding Open Ports & Services --> exploit software based vulnerabilities --> upgrading shell with meterpreter --> automatic outbound port --> port forwarding --> pivoting --> reverse connect trough pivoting --> post exploitation with wevutil --> getting saved passwords from cache memory --> creating trojan (dropper) --> empire basics --> creating malicious docs --> armitage --> Hacking linux --> embedding malware code into linux package --> hacking android --> badooring original android application --> using beef --> Creating ransomeware --> Creating our custom malware ------------------ 1.A. Hash Attacks | ------------------ --> Identifying Hashes --> cracking the LM Hashes --> gaining access with the NTLM hashes --> accessing rdp with NTLM hashes <=============================================================> ------------------- 2. Network hacking | ------------------- --> live host discovery --> mac address changer --> mac filter bypass --> monitor mode --> airodump-ng --> Deauthentication attack --> arp poisioning --> Viewing Captured Graphics with Driftnet --> file extraction from http traffic --> bypass https --> session hijacking --> DNS Spoofing --> screen capture & injecting keyloggers --> injecting javascript html code --> Hooking cients to beef & Stealing passwords --> capture victim's packets remotely --> creating a fake update --> wpa cracking --> wpa2 hacking <=============================================================> ----------------------- WebApplication hacking | ----------------------- --> 5 Phase of Hacking --> Information gathering -> Robots.txt -> Google Dorks -> IDS/IPS Detection -> Using firebug addon -> DirBuster -> Recon-NG -> Dmitry -> Shodan -> Shodan with metaspoit -> Password Profiling -> Cleaning Password files -> Making dictionary from our Password files -> Generating dictionary with john --> scanning -> OpenVas -> Nessus -> Vega -> Owasp-zap -> Wpscan -> Nikto -> joomscan --> exploiting -> Web parameter tampering -> Path and Information disclosure -> HTML injection -> lfi -> rfi -> file upload -> Public Web shells -> Private Web shells -> nc reverse connect -> reverse connection using python -> code execution -> Input Validation -> sqli -> xss -> exploit xss with beef -> insecure session managment -> bruteforce -> post exploitation