Linux for Ethical Hackers (Kali Linux Tutorial)
**Choosing the Right Penetration Testing Certification**
When it comes to choosing a penetration testing certification, there are several options to consider. In this article, we'll explore three certifications that can help you get started on your journey to becoming a skilled penetration tester.
First, let's talk about the PTS (Penetration Tester's Safety) exam. This is an entry-level certification that covers the basics of penetration testing. The PTS exam is relatively inexpensive, costing only $100. It's also worth noting that this exam is considered "sans right," meaning it doesn't require a corresponding course to be completed before taking the test.
However, for those who want to take their skills to the next level, the G Pen certification is a good option. The G Pen exam costs $17 and requires completion of a corresponding course that can cost upwards of $6,000. This means that unless an employer is willing to pay for this certification, it may not be feasible for individuals to pursue.
On the other hand, the sans (Security and Networking) certification is considered one of the highest-tier certifications in the field. The exam itself costs $17 and requires completion of a corresponding course. What sets sans apart from other certifications is its focus on staying up-to-date with the latest security threats and techniques. Sans courses are constantly updated to reflect the latest developments in the field, making this certification a valuable asset for anyone looking to advance their skills.
Another option to consider is the OSCP (Offensive Security Certified Professional) certification. This certification requires completion of a practical course that includes hands-on training with virtual machines and real-world scenarios. The exam itself is considered "practical" in nature, meaning it's more focused on demonstrating one's ability to hack and identify vulnerabilities rather than just memorizing rules.
In addition to these certifications, there are many free resources available online that can help you learn the skills necessary for penetration testing. For example, my channel offers a wealth of information on topics ranging from Linux basics to advanced penetration testing techniques. I also offer a "Zero to Hero" course that covers everything from beginner-level topics to more advanced concepts.
Additionally, there are many online communities and forums dedicated to penetration testing and security. Sites like Hack The Box provide a platform for individuals to practice their skills in a safe and controlled environment, with access to virtual machines and real-world scenarios. These resources can be incredibly valuable when it comes to learning the skills necessary for penetration testing.
Ultimately, the right certification or resource for you will depend on your individual goals and needs. By doing some research and exploring different options, you can find the best fit for your journey into penetration testing.
**Conclusion**
Choosing a penetration testing certification requires careful consideration of several factors, including cost, curriculum, and reputation. The PTS exam offers an entry-level certification at an affordable price, while the G Pen certification provides a more comprehensive education at a slightly higher cost. On the other hand, the sans certification is one of the most respected certifications in the field, with a focus on staying up-to-date with the latest security threats and techniques.
Regardless of which certification you choose, there are many free resources available online that can help you learn the skills necessary for penetration testing. From beginner-level courses to advanced training programs, there's something for everyone. By taking advantage of these resources and dedicating yourself to ongoing learning, you can become a skilled penetration tester with the skills and knowledge necessary to succeed in this field.
**Recommendation**
If I had to make a recommendation, it would be to start with the PTS exam if possible. This certification is relatively inexpensive and provides a solid foundation for those just starting out in penetration testing. If you're interested in pursuing more advanced certifications like the G Pen or sans, these may be worth considering at a later stage.
However, before embarking on any training program or certification course, I would recommend doing some research to ensure that it's a good fit for your goals and needs. There are many resources available online that can provide valuable information and insights into different certifications and courses.
Ultimately, becoming a skilled penetration tester requires dedication, hard work, and a willingness to learn and adapt. With the right training and certification, you can unlock a rewarding career in this field.
"WEBVTTKind: captionsLanguage: enWhat is up everybody, my name is Heath Adams and I welcome you to this course called Linux for ethical hackers. So in this course, we're going to be covering a lot of things, we're really going to be going in hammering down on the terminal and the command line. And if you've never learned Linux before, this is a really great start for you, especially if you're interested in becoming Ethical Hacker or a penetration tester. So enough of my face. Let's go ahead and just dive right in. Alright, everyone, welcome to this course titled Linux for ethical hackers. Before we get started, I'd like to do a little Who am I so my name is Heath Adams. I also go by the cyber mentor. I am a husband, first a hacker, a military veteran, gamer sports fan and animal Dad, I am a former accountant turned security geek. So I've been in cybersecurity about three years now. And before that, I was an accountant, I hated it pick that that field for all the wrong reasons. So once I went into it, and cybersecurity, I never looked back. And I've never been happier. On the day to day, I am a senior security engineer. I'm also a business owner at TCM security. So before that I was a senior penetration tester doing penetration testing and ethical hacking, I branched out and started my own business focusing on ethical hacking, training and student development. So now I'm doing that full time, along with a job as a senior security engineer. Okay, so let's go ahead and talk about what we'll learn in this course. So this course is going to be all hands on. Besides this little introduction here, you're not going to see a lot of PowerPoint besides quick overview of what the course or the video that you're about to see has coming. So 95% hands on course, I will not kill you with PowerPoint. That's not my goal. We're going to be focusing on Kali Linux this entire course, and really learning Linux and learning Linux for the purpose of becoming ethical hackers. So we're going to install VMware, which is a virtualized software, virtualization software, and then we're going to run Kali Linux inside of VMware. After that, I'm going to give you a overview of Kali Linux, show you some of the common tools, what it can do, why it's awesome. And then we're going to do a deep dive into the terminal. So what that means is we're going to be hands on doing commands and learning Linux. So we'll be running, navigating the file system. So how to get around in the file system from the terminal, we'll learn about users and privileges, how to add users how to what kind of privileges and permissions are there what important files exist regarding those, we're going to talk about common network commands. So if you want to be a pen, tester, or ethical hacker, you need to know networking, at least at a basic minimum. So we'll talk about those common network commands that you should know how to run them what they do, we'll talk about viewing, creating and editing files. That's obviously important if you want to create a quick file or edit a file from the command line, how you can do that. We'll talk about starting and stopping services such as a web server, SSH, SQL database, etc. We're going to talk about how to install updates, how to install tools and how to update those tools. And then lastly, we're going to put everything we learned together and do some scripting in bash. So we're going to write a basic bash script, and then we'll improve upon it and then I'll show you some four loops, some other logical scripting ideas, and then we'll kind of put that together and hopefully, come to a nice completion when it's all said and done. So with all this being said, I'm excited to have you in the course with me, I look forward to teaching you and let's go ahead and start with installing VMware. Alright, the first thing that we're going to need to do is to install software called VMware Workstation player. Now we have two ways to run Kali Linux, we can either run Kali Linux through a virtual machine, or we can install it as an operating system on a hard drive for this course, and this lesson, we're going to be using a virtual machine. and preferably, we're going to be using VMware Workstation player. I'm going to show you how to install VMware Workstation player and I'll show you some of the alternatives to it as well. So let's go ahead and dive right in. Okay, so if you go out to the interweb, and you go to Google, and you type in VMware Workstation player, the first thing that will come up for you is this download VMware Workstation player link. You're going to go ahead and just click on this and now I also want to introduce alternatives. So there is a another software platform called Oracle VirtualBox. And you will be able to install either my preference in the course that's going to be taught the rest of the way through is going to be in VMware Workstation Pro. But we will use player for the install, you'll be able to follow along with player you will also be able to follow along with Oracle VirtualBox if you so choose. But we will not be showing that installation. Another thing that should be noted is there is this comparison page here and I will be using VMware Workstation Pro. There's a nice little checklist here that shows what pro can do versus player, he has a lot of the same features here. Some of the nice things is running multiple VMs at once. You can technically do that with VMware Workstation player, there's workarounds for it. But to have it in a single tabbed interface. It's very, very nice. You see here, the drag will tabbed interface. That's another feature snapshots. So basically making a backup of your machine all included in workstation Pro. So if you have some money to shell out, and this is something that you're interested in doing long term, it may be worth looking into a workstation pro license, but by all means you can get away with a workstation player installation, and that's exactly what we're going to do. So let's go back to the first tab here. And you can see it says try VMware Workstation player, we're just going to scroll down and this install and everything is going to be running on top of windows for me. If you're installing for Linux, that's fine as well just follow your instructions for your respective OS. Go ahead and select Download now. I'm going to save the file. Okay, it downloaded I'm going to hit run. It's going to ask if we want to accept the changes, yes. Okay, now we're going to hit Next we'll accept the license agreement and possibly give away our firstborn. I'm going to go ahead and check yes, for the enhanced keyboard driver. We don't need to check for product update, we don't need to join the VMware customer experience improvement. We'll hit Next on that, you can leave both of these checked or check to your preference. And then hit install. And while this is installing, I can actually show you what VMware pro looks like. This is a pro instance running here you can see they have the tabs and they're draggable as it was notated in that, that differential spreadsheet that you saw, and I've got a Cali instance running, that's actually my main Cali machine. I've got windows 10 running here. And this is all actually sitting on top of a real windows 10 machine as well. So we're just installing workstation player, I'm going to run a VM inside of a VM. So this can be a little bit of Vm ception here, and then we're just going to hit finish. And then we are going to restart this machine as it needs a reboot real quick. Okay, now we are restarted and we're back to our desktop here, you can see that VMware Workstation player has been added to the desktop. Let's just go ahead and double click that to open it. And we're going to choose to use VMware Workstation 15 player for free for non commercial use. If we wanted the pro edition, we would enter in our access key here license key and continue on with the pro edition. And now we will use the Finish button here and we will be brought to our VMware Workstation 15 player. So you can see here that it's a much different view, it's very, very basic. We have the option to open a VM here and we'll have the one VM stored in this tab that we can open up and that'll be it. There are ways around running multiple VMs at the same time, but if you're looking to build a fluid lab out and have multiple VMs running similar to what I have here, having the VMware pro again, it does have its benefits here. So you can see this is a much much different look. This is very generic as we we can see here. So from here, what we're going to do is we're going to go ahead and stop in the next video, we are going to focus on downloading Kali Linux and we'll talk about what Kali Linux is and some of its features as well. So I'll catch you over in the next video. Alright, now let's move on to installing Kali Linux in our VMware software. Okay, so picking up where we left off we had just installed VMware Workstation 15 player, and now we need a VM to actually be able to play with it. So this whole course is going to be based on Kali Linux. If we open up a internet browser here, I've got a few tabs already opened. So what I want you to do is go ahead and go out to Google, and just type in Cali k L, I Linux download, and leave it here. What we're going to do as well is I want to talk just a quick second about what Kali Linux is. So Kali, Linux is a Debian based Linux OS. So it's based on pen testing tools, and it's made for pen testers. So what it does is it comes preloaded with a bunch of penetration testing tools, a toolkit, if you will call it and it is just made for people who are looking to do pen testing. So this is provided by offensive security. If you come to cali.org. And you look at the About Us, it provides a little bit of information about who the core developers were and some of the moderators. But basically, what it is, is it followed up a tool called or distribution called backtrack. So the new the new tool is Kali Linux. Now there are alternatives out there. One of the alternatives right now is called parrot. So if you go to parrot sec.org, and you look into what is parrot, you can see that they have different distributions. And they talk about why parrots different, but they do have a pen test distribution here. So for this course, we're going to be using Kali Linux, but I always do like to introduce the alternatives. Kali Linux is probably more popular at this point, parrot OS is kind of on the newer side, some people are starting to get behind it and liking it, but I would say Kali still dominates. The third option is that you set up your own distribution. So you have an OS that you like, and then you install the tools on the OS that you like, and you have your own custom build. So some people feel like, you know, Kali, or even parrot, they come with a bunch of tools that they'll never need. So their systems bloated, and they really just have a set amount of tools that they like, and if there's a tool that they want to add into the system, then they'll download that on their own. They don't want to have a ton of bloatware coming with their system. But with my experience in the industry, mostly everybody that I've worked with is using Kali Linux, some people are doing their own builds, especially on like the webapp pen testing side. And then now parrot is kind of that up and coming Oh s that some people are transitioning to, but it is predominantly Kali Linux. So that is why we're doing this course in Kali Linux. And I feel like it's the best option for us to learn some, just some basic Linux skills and learning in the OS that is the most dominant in the industry right now. So let's go ahead and go back to that Kali Linux download. In while this link has been clicked on, do not let it fool you. We're actually not clicking on the official Kali Linux downloads page, we're going to scroll down a little bit, I want to go to the Kali Linux custom image downloads page and I'll show you why here. So this is that offensive dash security Comm. Make sure that's the one you're following along with. And if you scroll down just a bit, you see that they're providing us VMware images and VirtualBox images. So remember, when I told you that VirtualBox was an option, if you chose that option, here you go right here, you'll click on this tab and you will download the VirtualBox image. Now what we're going to be doing is we're going to be running Kali Linux, VMware 64 bit and we're going to download this seven zip right here. You also have the option to download a torrent if you'd like the file size is going to be 2.4 gigs. So it might take you a minute depending on your your speed of your internet. And they also provide a Sha 256 some if you want to check the file when you download it. So I'm going to go ahead and just hit download on this. And I'm going to save it and I will come back as soon as this file is finished downloading. Okay, so my file has finished downloading, I'm going to navigate to the folder where it has downloaded to which is the Downloads folder. And you can see here that is a seven zip file. So my installation by default does not have seven zip. If you do not have seven zip either. We can go ahead and download that together. So if you go out to Google and you just type in seven zip, the first thing that comes up is seven dashes zip.org. You'll see a download tab here just go ahead and click on that link and go ahead and download the executable for your respective operating system. So for me, I'm going to be downloading the 64 bit Windows version here. And I'm going to hit save, I'm going to hit Run, say yes, I'm going to go ahead and install to the default directory. Okay, now that's installed, let's go back to our folder. And let's select that we open with seven zip here. Okay, now let's see if we can drag and drop, we can, so all I'm doing is dragging and dropping, I'm putting it in the Downloads folder, you don't have to do that you can drag it and put it in a location that you would prefer, this is going to extract I believe at a larger file size than just the 2.5 gigs that we downloaded the 2.4 gigs. So make sure that you have file space where you're going to put this. So I'm gonna go ahead and let this finish and then I will be right back. Okay, so I've successfully unzip this file. And just for the record, if we hover over it, you can see that it actually extracted to be 10.4 gigabytes. So let's make sure that wherever you extract it to you have the 10.4 gigabytes in order to successfully complete the extraction. So from here, let's go ahead and open up our VMware Player. And we're going to go to player up in the left hand corner, we're going to select file, and then we're going to select open. And then we're going to go to downloads. And we're going to go into our Kali Linux folder here, and or wherever you put it, if you didn't put it in the Downloads folder, and then just select the one item that should be here. It's a little four kilobyte file. And what this does for us is it automatically has a build, that's just ready to go. So this is really awesome. We don't have to download the image itself, and then install it and then pick all the features. No, this just ready to go for us. So we can also come down here and select Edit virtual machine settings. And there are a couple features here. So depending on the amount of memory that you have on your machine, so right now this is sitting at two gigs of RAM, that's fine. If you want it to run faster, I recommend going somewhere between four and eight. Obviously, the more RAM you give it the the better it's going to perform. But if you're running on eight gigs of RAM for your machine, really not going to do well for you. My recommendation is no more than a fourth. So if you're running on 16, then maybe give this four, you could really try pushing it up to eight. But I am running on 32 right now. So I could crank this up to eight by my rule here. But just for working with you and following along, I'm going to set this to two and then we're going to perform into that way that we are working at the same speeds across the board. Another thing that we need to know is the network adapter, by default, it's set to net, we're going to go ahead and just leave that Nat here, Yours may come set to bridge if for some reason it's set to bridge, you can try that. But my default preference is Nat. So let's go ahead and just hit OK. Okay, and now we're just going to hit play virtual machine. And a little side note, I am actually now on my OS, I'm running on my, my Windows OS as opposed to just running inside the VM. If I was running a VM inside of the VM, I'd have a lot of issues, segregation, etc. So now I've actually moved out of the VM and have this running and player on my Windows OS. Okay, and then when we get this pop up here, go ahead and just say I copied it. And this will start the machine. And you can see the other VMware Player back here, it's going to go ahead and directly just start loading up here and we get to this screen. So we click in and if we try to just enter in our username and password, our username by default is going to be root. Our password is going to be root backwards, so t o r and then hit enter. Now we can make this full screen over here by clicking this button. It will enter into full screen mode. We are now successfully logged into our Kali Linux machine. We've installed this successfully and now we are ready to start learning. So that's it for this video in the next video we're going to be doing is we're going to cover some of the tools and features of Kali Linux. And we'll start talking about what it's capable of and then we'll dive right into the terminal after that and start learning some. So command line and some useful tools with Linux. So I will catch you guys in the next video. All right, now let's take a look around Kali Linux, and just see what it has to offer us in terms of tools, design, etc. So let's dive right in. Okay, so we're at our desktop here inside of Kali Linux. Now you see the Kali Linux logo, you see, there's a couple of things on the desktop, you don't have to worry about these. These are just from VMware themselves put on your desktop. If you install this as an actual OS, this will not be here. So when we talk about navigating around Kali Linux, there's a couple places that we can look, if we look right away, you can see on the left hand side over here, we've got a favorites bar. So we've got our folders. So if we click on the folders or files, we can navigate around this feels like any other machine, right? We have our documents, downloads, music, pictures, if you're a Windows user, or Mac user, whatever this feels pretty common. So this is a GUI or graphical user interface way of interacting with the folders. As you move on, and we move on in this course, we're going to be living in the terminal. So the terminal is right here. If you click on the terminal, this is something similar to your command line. So from here, we can actually navigate to all these folders here. And we can put files in there take files out anything that we can do in a graphic point of view, we can also do from this command line point of view as well. So as we learn, we're going to get a little less relying on the graphical interface. And more on the terminal side of things, however, do know that there are ways to do a lot of things from a graphical side, if you still need that, that interaction with the machine and you don't want to be completely keyboard oriented. There are also tools on the side over here, if we look, we've got a leaf pad. So leaf pad is just like a notepad, right, or, you know, just your notebook here, you can take some quick notes, save it out, should be pretty familiar for you as well. So they've got Firefox, it used to be called iceweasel. And that's just your web browser. Down here are some of the tools that you may use. Now, burp suite is a very popular tool for web application penetration testing, we're not gonna be getting into any of these tools at the moment. But I will cover what a couple of them do. So again, burp suites, a web application penetration testing tool, if you ever get into web app, or if you even get into some basic pentesting, chances are you're going to start using burp suite on a pretty regular basis. Over here is Zen map. Now this is the graphical version of a tool called n map. And you will be using n map pretty religiously when you're doing pentesting. So if you like a visual view of doing scanning, so n map is a network mapper, it allows you to scan machines for open ports, and for vulnerabilities. So if you want that in a more of a visual type of view, or graphical interface type view, then you have Zen map as a feature. This little guy down here is meta sploit. Now meta sploit is a tool that can be taught all these are tools that can be taught in deep, deep lessons all by themselves, not to make that intimidating for you at all. Just know that that's how robust This is we're looking at three tools right here, and they're all very, very powerful. And this isn't even the half of it or the quarter of what Kali Linux has to offer. So meta splay, you may have heard of it. If you've heard of anything in pen testing, it is a framework that does just a little bit of everything. So a lot of pen testers live and die by this. It's a fantastic tool in my opinion. And you're going to get very, very intimate with it very, very quick if you do move into pentesting. Down here is a tool called cherry tree and that's pretty much where I'm going to stop we've got multigo in Kismet, these are just this is wireless base and this one here is is information gathering base, but cherry trees Another useful one. If we open that up. This is actually another note keeping tool like I showed you leaf pad leaf pads just for quick little one offs. cherry tree is more of note keeping as a whole. So you've got nodes that you can add so you can add a node here and just say say you're following along and you want to add notes. You can say Linux you know and then you have a note You can add all of your notes in here. And then you can actually add children nodes as well. So maybe there's a command that you want to add in. So say, we're covering commands and you want to write all the commands in about Linux down here, you could do that as well. And then save this out. Nice thing too, is that you can take screenshots and put them in here. And exports really nice. And this is going to be very, very useful for anything in your career. But when it comes to pen testing, there are so many tools, so many commands that I think it is incredibly important to be able to take notes and cherry tree is built in already. Personally, I use what used to be in Kali Linux, which is a tool called keep note, but cherry tree is a great alternative as well. So either of them would work in i is highly recommended by me that you use some sort of note keeping tool as you go through your courses and get better as a pen tester. So I'm going to close out of this here. And I want to show you a couple more things, you have a feature here where you can show all of your applications. So if you click on that, it'll bring up all the applications, including the ones that are grouped down here. Another way to do this is if we come up into applications at the top, you can see that everything is grouped really nice for you. So it goes through the steps of penetration testing. And let's say that like, a, I'm gathering information on a client, okay, well, here are some of the built in tools for information gathering right here. Say you want to do a wireless assessment, and you want to do that those sorts of attacks, you've got all these wireless tools built in for you right here. Now chances are, you're going to be running these tools from the command line. So again, you know, you don't want to get too hung up on the graphical side of things, as you may not always have access to that either. But it's important to know what tools that you have in front of you. And there are even tools like Wireshark in here. So very, very useful, pretty much a little bit of everything that you can imagine. So just, you know, take some time and go through the tools. And if you're becoming a pen tester, you're working on it, you know, just just, you know, look at a tool and do some research on it. Say you want to know what this MAC changer is. It might be obvious, it might not be obvious, right? So maybe you go Google, what Mac changer does, how to use it, what the syntax is, and then you play around with that, pick a new tool every day, figure out something that you can do with it, how to use it what it does. But so Kali Linux is a distribution full of useful tools. And it it you know, for a base OS, it's fantastic. And this is why so many people in the industry, just download this, install it and they're ready to go. You know, we talked about in a previous video, how there are other OSS or there are people out there that like to just do their, their base install. And you can see that there's bloatware here, if you want to call it that, right. Like there's forensic tools. And maybe you'll never do any forensics in your life. And you don't need all this installed in your system. So if you're a type of person that is, you know, it doesn't want this extra stuff, there's extra software on your system, okay, then maybe you do start moving towards that custom build. Eventually, in your career, you say, hey, I want I want to learn all these things first. And then once I learned what tools I really like, then maybe you move to your own distribution that you create yourself. And you spin that up every time instead of having all these tools built in. But as a basis as something that you can learn from and start with. This is why I've chosen Cali and this is why we're going to learn it today. So let's go ahead. From here, what we're going to do is we're going to dive right into the terminal. So let's just open this terminal. And then we're going to fullscreen it and move on to next video. So from here on out, what we're going to be doing is we're going to be living in this terminal. I'm going to back away from the graphical side of things and really just get your your hands dirty, in the terminal make you feel comfortable. If you've never used Linux before, this is perfect for you. So I'm going to give you the the pen tester perspective on why we're doing a lot of these things. Some of these commands are going to be the same commands, regardless if it's on a Kali Linux machine or if it's on another distribution of Linux. So you'll be able to take a lot of these commands and just use Linux and another system as well. So if you're interested in pentesting, if you're interested in Linux, this is where we really get into the meat of the course and it should get interesting for you. So I will catch you over the next video we're going to start talking about how to navigate File System and get comfortable with that. Alright, on to navigating the file system. So first let's talk about some of the commands we're going to learn today. So we're going to learn about pwd, which is present working directory, we're gonna learn about CD, which is how we change directories. We're going to learn about LS, which is going to be listing the files in a folder or in a directory. And we're also going to talk about how to find some hidden folders with LS. We'll talk about how to make a directory and to remove a directory, we're going to talk about copying, removing moving and locating files. We'll talk about something called update DB and how that pertains to locating files. We'll talk about the password and how to change our password. And we'll talk about an important command called man. So by the end of this first lesson, you should be pretty comfortable with all of these commands and may seem a little daunting, but they all kind of play in with each other. Again, please make sure to take notes you got cherry tree built in. You can also use keep note or even just a notepad in front of you, that'll help with the experience. And also maybe watching the video more than once will help with the experience as well. So let's go ahead and dive right into the command line. So now our first lesson in Linux terminology is going to be navigating the file system. So if you're a Windows user, you're used to navigating your file system probably through folders through a GUI, so a graphical user interface. Well, in Linux, we can do that. But the majority of time we're going to live in this terminal here. So we really need to know how to get around. So the first thing we can do here is we can say Hey, where are we at? And that's a pwd. So that stands for present working directory. So you type that in, you hit Enter. And it says, Okay, we're in the root folder. So we know that we're in the root folder, but how do we get out of the root folder, we can use a command called CD. And that stands for change directory. So if we want to change directory backwards, we just type in two dots here. And now we can say, okay, where are we at? So we're in a slash. So we're just in a home folder here are just there our generic slash folder, right? So what we can do is, well, how do we know Can we go backwards? from here? Let's keep trying. So we do pwd. Again, no, we can. This is our base folder, right? So you have to think of this as the lowest you can go. So now how do we move around? How do we know how to go forwards again? Well, we don't know what's in our directories, right? So we're sitting in this the slash folder, and how do we look around? So there's a command called ls that lists everything that's in the folder. So if we say LS, we kind of see this color coordinated here. And the color coordination just depends on if it's a folder if the folders read, right, you know, there's permission settings, which we're going to get into later. But the majority of these here are folders. Okay, well, we know we just came out of root so we can go back into root. Now, how do we do that? So we can say, change directory root. And we can actually hit tab to autocomplete. I don't know if you caught that. But there's no are any folder besides root. So at all, I can just hit tab. And it should type it out for me. Oh, I lied. There's a run in here somewhere, but it's hidden. We're gonna cover that soon as well. So our Oh, hit tab, autocomplete can change directory into root. So let's LS and root and see what's in here. Okay, this is more like our home folder, right? So we've got desktop documents downloads, this is kind of what applies to the root user. So what if we're sitting in this root folder here and we wanted to access instead this Etsy folder? Well, could we do the same Etsy command here? Well, I'm hitting tab, and nothing's happening. Well, because Etsy doesn't belong in this area, right. But if we put a forward slash in front of it, because this is the base, and then we hit et CIE, there, now we can navigate to the Etsy folder, and we can actually double tab and see what's all in the Etsy folder like an LS, se no. Another way to do that is if we wanted to LS what's in the Etsy folder without navigating to it, we can just type ls Etsy, and you can see everything that's in here. So there's some some tricks that we can do right? So we don't have to actually navigate to the folder to know what's in there. Again, if we LS. And we want to know what's sitting in videos, or even, let's say what's sitting in desktop for our folder, well, if we start typing desktop and hit tab, we can't do that either. Because everything in Linux is case sensitive. So if we start typing desktop, and then hit tab, now, we can LS and see what's in there. So our VM ware came with a couple of shell scripts here that are automatically placed on our desktop, we wanted to confirm that you could see that they're both right here. So as of right now, we are just sitting in our route home folder. And we know how to navigate around. So if we wanted to go to desktop, we could, we could hit LS now and see what's in there. If we wanted to go backwards, we could. Okay, now we're back in our, our root folder. And you can also tell where you're at your present working directory sits right here, right. So this little a Tilda is actually your home folder. And you can see that we're in desktop. So if we wanted to go back into our desktop, instead of typing, so you want it to go to music from your desktop, instead of going route music, which will work, you could also just say I want to go music. And that'll put you there as well. And notice you don't need the leading forward slash when you use the automata. So just some couple interesting tricks that you will kind of pick up along the way, tab is definitely going to be your best friend. If you run into something with multiple options, say you're trying to CD and you say I want to go on my desktop and you're tabbing it's not working, you can hit double tab, and then it'll show you Okay, well, there's desktop documents, downloads, those are your three options, start with a D. So now you kind of have an idea as to how to kind of move around. But let's do a little bit more. So what if we want to make our own folder? Well, there's something called make directory, MK Dir. So if we say make directory, and we'll say I'm just gonna use my name here. So now if we LS, we can see that this he folder is now here, we can go into the heat folder. And there should be nothing in it right? So we can go back. And we can also get rid of the heat folder, remove directory heat, the LS again, it's gone. So now, what else can we do? Well, we can also look for hidden folders. So we can say LS dash LA. And we can look for hidden files and folders here. Remember the color coordination. So this dot cash, right that in theory is a hidden folder. So if we say CD dot cash, we can go into there we LS and there's actually some some information in there. But when you saw it originally, you didn't see that, we're going to cover more on this, I just kind of want to show you that trick. As you see over on the left side, there's file permissions and properties. So be aware that just because it looks like something's not there, doesn't mean it's not there, it might just actually be hidden similar to Windows where you have hidden files and folders. So just a quick trick to show you that. So another thing we can do. So let's go back. And don't worry about what I'm doing here, you're going to cover these commands in a little bit. I'm just going to echo Hi, and we're going to put that in a test dot txt folder. So now if we LS, you can see that test dot txt is here. So if we want to actually copy this file, we can copy this file to another location. So we can say, hey, I've got this test dot txt, but I actually want to move it to downloads. And if we go LS to downloads, you can see that test dot txt is actually sitting in there. And if we wanted to remove it, we can just say remove from downloads, or test dot txt. Actually, sorry, remove downloads test dot txt, we don't have to transition into that directory if we don't want to. So another trick, say we want to see now that it's gone. We want to LS but we don't want to keep typing this out. If you hit the up arrow. Now you can just see your old commands. So if you keep typing your command over and over, you can see what's going on. So LS shows that there's nothing in downloads now we were able to successfully remove that file. So another thing that we can do is we can actually move so say we wanted to move test dot txt and we wanted to put that In the downloads, okay, now if we LS test dot txt is now gone from this folder. Because we've moved it, we haven't made a copy, we've actually physically moved it away. So now if we LS Actually, let's just tab up, you can see that test dot txt is now in there. I'm going to remove that here. Okay, and now the last thing I want to show you, is the locate feature. So if we wanted to locate a file, say I wanted to locate bash, let's see. So we're looking for a file, and we're going to get more specific along the way. But if you type in locate, you can kind of look through a system to see if you can find it. Now I'm looking for, say, any type of bin bash or bin or bash, that's fine. That's really what I wanted. But it shows you everything with bash in it. Now, this might not work right away, what you might need to do is update the database. So you type in update dB, it updates everything for you. And then you can use locate again. So it has to build that database of the information that it's finding in order to locate what you're searching for. So make sure that you use update DB sort of frequently. Okay, so two more things I want to show you. And then we'll close out this video and move on to the next one. So an important thing you want to do with your new account is we're using a default password, and that's not very secure. So to change a password for our user, we can just type in pa SS WD. And now it's going to ask us for a new password. So instead of using tour, we can use something else. I'm going to type in the very secure password as my password for an example here. But if you plan on using this machine, for future reference, you can type in a secure password and kind of keep it. So lastly, I want to show you is something called man. So man pages, man pages are your instructions for any command that you're running. Most commands come with a man page. So let's say we want to look at LS, we can say man LS. And then it's going to give us all this information here about LS. So if you see it says LS is list directory contents. Awesome. And then it gives you what options we can do. Well, we can do a dash a for all what you saw earlier. And you can kind of scroll through here and just see exactly what it has to offer. And that's kind of it. So when you go through here, you can kinda you know, if you're struggling to like, you know, there's a command in there, but you're not sure exactly what the command is, you can type in man and search it. And sometimes you can do LS, I don't know if this is going to work, but dash dash help. And you get some information as well. It doesn't provide you the full man pages, but it provides you something pretty close. So that's kind of just your way around if you ever get stuck, something to look for. Okay, so that's it for this lesson. Next, we're going to move on to users and privileges, how to add users and how to how to change some pseudos and some modifications to our file permissions. So until next time, my name is Heath Adams, and thank you for joining me. Alright, now let's talk about users and their privileges. So what are we going to learn in this lesson, we'll do a quick user privilege overview. From there, we're going to talk about the CH mod command, which is the change mode command, that's going to let us change the permissions on a file or directory. We're also going to talk about how we're going to add a user with the Add User command. From there, we're going to take a look at a couple of important files. One is the Etsy password file. And the other is the Etsy shadow file. So the Etsy password file is not actually where the passwords are stored on a machine. That is the Etsy shadow file which stores the hashes. But the Etsy password file does store it where the users what users are on the machine. And you can correlate that to the shadow file. So we'll talk about those in more detail and their importance to pentesting. Very, very important. And then we're going to talk about su which is the switch user command. And finally, we'll talk about sudo, which is a command that allows you to elevate your privileges on a Linux machine. So let's go ahead and dive right into our lesson. Okay, so now we're going to cover users and privileges. So in the last video, we touched a little bit on privileges with our LS dash l A. And we touched a little bit on users by changing the password of our root account. So now we'll cover a few more commands regarding those. So if we look at ls dash l A. You could see all this crazy, jumbled wordage over here, right? So it actually means something. So we look at the first line here, if we see a dash, like this a hyphen, that means it's a file. If we see a D, that means it's actually a directory. And then you see our W and x. So rW x actually means read, write, execute. It's the permission settings that this particular group has. Now there are three groups here, there's the first, second, and then your third right here, right? So your first group, right here is the owner of the file. So it looks like the owner of the file has full READ WRITE execution, right. And then the next set of three here is actually the permissions for the members of the group that owned the file. So this is a group ownership as opposed to actual ownership here. So for the people that are in the group that has access to this file, they can only read and execute, they can't write to it. Now, for the last one, this is just all their users. So any common user here can actually just read and execute, they can't write the document. So that comes into play, especially when we get into penetration testing, because with penetration testing, we're looking to have full access, right, so we're always gonna be looking for that folder that has full READ WRITE. Typically, if we look at temp, that's our temp folder. A lot of times, you see the temp folder has full read, write, execute. So when we're doing penetration testing, we're trying to upload some sort of exploit, we might actually upload it into the temp folder, because that's where we can execute those, those files. However, we could also be looking for other full READ WRITE execute files, where we need to modify them and give us root access to a system. So it's all about insecure configurations. And we're going to cover that more once we get into the actual penetration testing part of the course. So for the Linux essentials part of the course, all we need to worry about is these file permissions. Another important feature of that is if we were to create a script, or scripts not gonna be able to run until it has full access. So how do we change access here. So let's make a file. I'm just going to make all this echo another text document, right, so we'll just say hello. And actually, I typed that in backwards. So hello, and we'll call it Hello dot txt. So if we LS here, by default, we only have read write and then read access for everybody else. Meaning if we wanted to read it, we could say cat, which we're going to get into later. Cat Hello, dot Tex, and it just says hello. So what can we do here? Well, we can use something called change mode, in changing mode is CH, Mo D. And we have a couple options here. So we can do a plus, right, and we could say, well, we want READ WRITE, execute, or we just want execute. But another way I like doing it is you have a number feature. So the one you really need to know is all sevens. sevens gives you full read write access across the board. So if we say ch mod 777 Hello dot txt. Now we LS LA. And you notice that Hello dot txt turns green, that means it is full rewrite. And here you go. We've got the dash here saying it's a file, and we've got READ WRITE execute across the board. So this is how we change file permissions. You don't need to necessarily know about the other numbers in terms of penetration testing, it becomes more in terms of configuration and security management of files if you were to get down that path. So just stay on the easiest path. Just remember 777 or plus x will work as well. So changing the mode is is critical. And we're going to cover it time and time again throughout the course, once we get a little bit deeper. So a couple more things we need to talk about. say we wanted to add a new user. Well, there's a feature called Add User. So we say Add User, and one or two names is allowed. So we need to add user to john. Okay, so it made something for john. Let's give him a password. Give them a password again. And we'll just hit enter for the default. It's all correct. Okay, so We now have a user named john. And we can confirm that we can actually cat The Etsy password file here. And you see down at the very bottom, we have this user, john. So this Etsy password file you're going to become very familiar with, because it shows you all the users now this will, there's a lot of times when you're doing penetration testing, you're gonna have access to this Etsy password file, because it doesn't provide the password anymore, it used to a long time ago, passwords are now in the shadow file. So you actually have a little bit of access and information disclosure here at the hands of poor configuration. So you see that I've created a user john, well, that gives us a little bit of information, say there's SSH on a machine or something else, we can use that username for john to try to break into the machine. So we'll cover that again later. But if we wanted to see what the Etsy shadow file looks like, now we come in here, and you've got these, these jumbled stuff here, right? So it's just a hashing format. So what we're doing is we can actually use a tool like hash cat to break this down and crack these passwords. Now, a password of password will be very easy. But just know that if you have access to the Etsy shadow file, you have a good chance of cracking a password, depending on your capabilities, and depending on the strength of the password, that allow you access to a machine. So something to think about there. Okay, so now we have our user john, let's go ahead and switch to him. So we can use something called Su, which stands for switch user. And we'll say switch user, john. Okay, so automatically gave us john here, let's see if we could switch back to root. Okay, we can't just switch back to root, because we need roots password, right? So we can type in password, and that works. But if we didn't know the password, then we'd be stuck on john, we are able to access john because we were already root. So this comes into play in terms of users. Let's go back to john here. Now, if your user you have to be able to do certain things, you need permission to do certain things I should say, right, so root has full access and permission to do everything. But john, we just created john john doesn't have any sort of access. So if we wanted to, if we wanted to change the password, say we want to change the password for for root. I can't modify the password information because I don't have that kind of access. Now there is something called a pseudo which would provide john the access if we gave it to him. So it's called a sudoers file. And basically, anybody in that sudoers file can change permissions given if they are a pseudo user, right? So we would type in sudo, password root. And it's going to ask for the password for john. But you're going to notice, hey, John's not in the sudoers file, john can't do this. So john has base permissions, right. And we're going to counter that a lot of times in penetration testing, where if we get in, we'll get something called lower privilege. And we'll get an account like john, and we're going to try to escalate into root but we just can't do it, you know, the chances of doing a doing that and having a john in a sudoers file is just not high. It's possible, but it's not likely. So for now, just know that if you want a user other than root, to have access to file permissions, you need to have them in the sudoers file, that becomes useful to in penetration testing, because you can look at the sudoers file if you have access to see what users have sudo privileges. Okay, so that is it for this lesson. In the next lesson, we're going to be covering network commands, and moving on gradually towards scripting. So let's go ahead and get there. And I will see when we get over there. Alright, so now we're going to be covering common network commands. So before we dive into the commands we're going to learn, I'm going to go on a tiny bit of a rant here. So if you are not familiar with networking, now's the time to become familiar with networking. There are two things I think that a person needs before they really can dive into pentesting. And that is Linux experience, which you are gaining some Linux experience now because most pen testing is done in Linux. And the other thing is to have a good network foundation. So if you're looking at these commands here, and I say if config, which if you're a Windows user, and you hear IP config, do you know what that is? Okay, that's basically the same thing. If you know what ping is, if you know what ARP is netstat route, those should all be pretty familiar where you can guess what those are. If you do not know what these commands are, you might want to brush up on your networking as well. Because the better you are at networking, the better you're going to be when it comes to pentesting, because you're going to have to navigate around networks, you're gonna have to understand where you are at in a network, you're going to need it for basic troubleshooting as well. So just to understand these commands are gonna be very important. But what we're going to be doing here is we're going to be taking common network commands that we're going to be running as a pen tester. And we're just going to apply those to their version in Linux. Some of these may be familiar to you, some may be new to you. But we're talking here if config which is going to show us some information very similar to IP config in Windows, where we'll see our ipv4, ipv6 if we have it information, our MAC address, things along those lines, our subnet mask, etc. The IWC config is the wireless adapter version of that. Ping is a ping command, where we talk over ICMP, and we try to communicate to another machine to see if it's alive and responding back to us. We've got the ARP command, which just maps IP addresses to MAC addresses. And we've got netstat, which is just a command line tool that's going to allow us to display all connections and listening ports. And then finally, we've got route which displays our routing table. So we'll go ahead and take a little bit of a deep dive into those in this next lesson. And hopefully, this is a refresher for you. So again, if not, then you should be looking into some networking studies as well. Okay, so let's go ahead and dive right in. Okay, so now let's cover network commands. So the first command I want to cover is if config. So you may be familiar with the Windows version of this, which is IP config. And they pretty much do the same thing. So it shows you here, your different interface types and the IP address associated with them. So it's zero here, Ethernet zero, has an IP address of 190 2.1 68.13 2.164, you can see the netmask, the broadcast address, and you can see the MAC address as well. And we also have a loopback address here. Now, if your machine has a wireless adapter, or at some point, you want to do wireless penetration testing, you're going to need a W config. And you should not expect to see anything on this at the moment, unless you're using a laptop, then you actually might see configuration down here for it. If you would see something under IWA config, you would see like a W LAN one w land zero, something along those lines, okay, and another common command that we're going to see is going to be the ping command. So we can just type in ping, and the address that we're trying to talk to. So for example, I'm going to try to ping my home router. And I get talking back. So if I tried to ping something that wasn't in my network, like a 16.1, you're gonna see the results change. So with ping here, ping is going to be endless, until we hit something like Ctrl C to stop it, it'll ping forever. So I'm gonna hit Ctrl C again, and kind of show you the difference. So you see that we attempted to ping here. And we got replies, we got information back. Well, that's good. That means we're talking to the other machine, it says, Hey, are you there? It says, Yeah, I'm there. And we try to ping this machine here. But this machine's not talking back, it could mean that the machine is on the network, or that the machine is just blocking ICMP traffic. ICMP is a another word for Ping. So moving on to the next command, I want to show you ARP. So the best way I like to type in is ARP with a switch of a and ARP is just going to show you MAC addresses that it talks to and the IP address. Actually, I said that backwards, it's going to show you the IP address it talks to and the MAC address associated with it. So if an IP address reaches out, say 192168 15.1 talked out to this machine, it's gonna say okay, Hey, who are you? It's gonna send a broadcast message out to say who has this IP address? And then the IP address will respond and says, Hey, I do and this is my MAC address. So ARP is just a way of associating IP addresses with MAC addresses. And once you know that, you can also look at netstat So netstat dash a and O is another one of my favorite commands. And this shows you just the active connections that are running on your machine. So if we scroll way up, and you can just kind of see what's open and what's talking here, where this really comes in handy on a penetration test is to see if a machine is talking to somebody else. Same thing with ARP, you want to know what that machine is associated with? And is it talking to something on a port. So this is more just internal right now, but it's still good to know. So for example, if I were to open up a Firefox page and connect out to the internet, then I went and I did a netstat. Again, I would see information about that port being open and, and that I am going out with it. So just kind of keep that in mind. These are not commands that you really need to know in depth right now. Networking does come into play when you are doing penetration testing. But what we're going to cover these commands time and time. And again, I just wanted to give you a very brief introduction to them. Okay, in the last command that I have for you today is route C, if you type in a route that's going to print your routing table in the routing table is important because it tells you where your traffic exits essentially. So for this VM, my traffic is exiting on 19216813 4.0. So any traffic goes out of this 0.0 dot 0.0 gateway, in this range, right. So when it goes out this gateway, it's doing Nat so network address translation, and it's running off my computer. So the best examples aren't here. But it's important to know route as well, because there could be a machine that you're attacking that has multiple routes. So you might see a 134 and a 135. Because it has a dual home Nic meaning it has two NICs inside of it. So it's actually talking to a completely different network that you didn't know existed. So you might have been attacking one network on the 134 range, and then 135, just out there, and this computer can talk to both and until that point, you had no idea. And that's the idea of called pivoting when you switch a network from one to the other, but you're using a machine. So that's it for this lesson. In the next lesson, we're going to talk about viewing, creating and editing files. Okay, so viewing, creating and editing files. This section sounds exactly like what it is. We're going to talk about how to view create and edit files. Mainly, we're just going to be showing how to create quick text documents. But we'll teach you commands that will allow you to do further in the future, as you will see as we get further in the course and get into scripting. So let's go ahead and take a look at some of the commands that we're going to be learning. So some of the commands that we're going to learn, we're going to learn the echo command, which echoes what we write right back out to the terminal, we're going to look at the cat command, which is going to print out a document for us it's similar to type in Windows, we'll talk about replacing versus appending. And which, which function does which and how to do it. We're going to talk about the touch command, which can be used to create a file on the fly. We'll talk about nano, which is a text editor that's built into the terminal. And then we're going to talk about g edit, which is also a text editor. But it is a GUI text editor. So we do get a little bit of gooey in this lesson. So let's go ahead and dive right in. Okay, so this is my second time recording this video. The first time I forgot to turn my microphone on and performed for my cat. So she approved of it. Let's see if you approve of it the second time around now that I have a little bit of practice. So we're gonna be talking today is really talking about viewing, creating and editing files. So I've already showed you the echo command. If you recall, we used echo to create a file, right? We created a Hello dot Tex. And we can just echo Hello out to the terminal. We could say echo Hello, and I'll say hello back. So what we can do with echo is we can use it to write to a file. So if we were to say echo, hey, and then we write it to Hey dot txt. Well, we can look and see that hey, dot txt is here. And you can see my files from the previous one. So I'm trying to Come with more ways of saying hello. But we're going to use hate text here. So if we cat hate at tax, a all cat does is print out to the screen what is in a file? It says, Hey, okay, so let's say we want to append cat are we want to append hate. txt? Well, we can tab up here. What if we just say, hey, again, we've got this greater than symbol here. And we're just putting it into the hate. txt file. Well, that didn't work. We didn't append it, we actually overrode it. So what if what what can we use to actually over append this, here's what we can do is we could say, hey, again, again, right? Just to give us something different. And we can add a second greater than symbol here. So now if we cat the file, you can see that we actually appended to the end of it. So this becomes incredibly useful when we are either adding stuff to a list say we're gathering IP addresses, and we just want to combine our lists, or when we're creating a series of commands, and we're going to use those commands to send all at once. We're going to cover that later, when we're talking about file transfers in the penetration testing section, where we use a set of commands like this on a Windows machine. To actually transfer files via FTP is just so much easier than typing them all in one by one, we can create a little document and run the document. So this becomes useful when we have a series of commands and for other reasons, as well as you'll learn as you go on in your Linux career. So we've talked about Echo, and we've talked about cat. So let's talk about some other ways to create a file, we can use something called touch, and to say New File dot txt. And if we LS, you can see that new file dot txt is here. But if we cat new file, there's nothing in there because they haven't put anything in there yet. So there's a few things that we can do, we could use echo and append the file, right? We can also use a tool called nano. nano is a terminal text editor. There are other terminal text editors like VI and vim. I don't prefer those Personally, I like now the most some people have their preferences. So I encourage you to play around with any of them as you wish VI and vim are the other two. But for this course, we're going to be using nano. So if I say nano, new file dot txt, I could type whatever I want in here. We're going to be using nano a lot to create scripts to create Python scripts. And to edit shellcode as we get into a little bit exploit development. So I'm going to hit Ctrl x, I'm going to hit y for saving, and then we'll save it to new file dot txt. If we cat this, now it says hey, I could type whatever I want in here. So that's one way of editing it. Another way of editing it is using a graphical interface. So we can use g edit, and say new file. And if you don't like using a terminal, you're more than welcome to use g edit here. Just type in new line here and save it. And I like using g edit, it's a lot cleaner, because I can you know, highlight and delete, I don't have to use my keyboard to navigate around like I do in the terminal. So if you have the option to use g edit for sure, but sometimes you're going to be on another machine that's not your own or is headless and doesn't have a GUI that you're going to have to use now. So get comfortable using both. So we save this, let's go ahead and cat it out and see what happens. Okay, you can see that the new line is in there. So really, that's the overview that I wanted to cover. So just know that you can create files pretty much using echo touch. And actually, you can create files using nano as well. If you say nano, this is new text. I'll just say hello, control x, save it, you LS you can see this is new text is right here. So you can use all of these tools in different ways to create files, it's completely up to you how you want to do it. Personally, when I'm creating a file, I use nano and I just create a new shell script Python script. txt document that way, you could also do it using g edit as well. So just know that we're going to be using these a lot and try to get comfortable with these. And from here, we're going to be moving into controlling callee services. So we're just going to briefly talk about what services you need running on boot and how to do that. All right, In this video, we're going to be talking about starting and stopping Cali services. Let's go ahead and just take a quick look at the commands we're going to learn. So not a lot of commands in this video only two, we're going to talk about the service command, and the system CTL command. So the service command deals with services, it's going to allow us to start and stop services on the fly. And the system CTL command is going to allow us to enable or disable services so that they load up on boot, or do not load up on boot. So let's talk a little bit more about services and look at how these commands can be useful for pentesting. Alright, so let's talk about starting and stopping services. So when we're in Cali, there are a couple different ways that we can start and stop services. And when I talk about a service, I'm talking about something like a web server, or SSH, or maybe a sequel database. So we cover this video today, I'm going to show you a few different services and how to start them and stop them. I'll show you how to start them permanently on boot. And we'll talk about which services are important to keep on boot, which services are important to start when you feel like that just starting them or when you need them, etc. So let's start with our first service, which is going to be Apache two. Now Apache two is a web server. So let's go ahead and do a proof of concept. First, let's start with a command that we learned in an earlier video, which is if config. I'm going to grab our ipv4 address right here. And I just want to copy this, I want to go out to a web browser over here. And we're just going to paste this address. Now you'll notice that it says it's unable to connect, this is expected here we're not running a web server. Now let's go back in here. And let's just say service, Apache to start. Okay, looks like it went through, let's go ahead and hit Enter again. And now you can see that Apache to Debbie and default page has been loaded. So what has changed? Well, when we boot our machine, this Apache two service is not running by default. So if we want to run a web page, then we actually have to start up the service for to work as you just saw here. Now you can see that if we want to add files or place files here, well, we're going to have to edit the var www HTML folder. So if we come out here, and we go into other locations computer, and then we go into our bar, www, HTML, you'll see that the index, that HTML page is here. So if we actually wanted to maybe host a malicious web page and have it pointed back to us, this is one way we might do it right here. If we want to serve up some files, say we have something that we want to upload to a machine that might be malicious, or, you know, a file that we want to transfer to somebody else or download on another computer doesn't have to be malicious, we could host that file in this folder here. Now that is fine. This is one way to do it, right, you can put your files all in one location. But you know, it's not my favorite way, it was my favorite way when I first got started. There is a much easier way now and I will show you how to do that. So let's go ahead and type ls, you'll see we have no documents here. So I'm just going to echo Hello into Hello dot txt, and then have that Hello dot txt here. Now what we can actually do is we can spin up a web server. So we can just say Python dash M for module and say simple HTTP server, you can auto tab it, and then say 80 for the Port 80 is already in use. So let's just give it 80 8080 is in use from the Apache server at the moment. So instead, let's look at what happens. So let's just call it out at 8080. And you can see here that I can go to this Hello dot txt and actually get the file, I have information in real time whether or not that file was captured. And overall, this is just a web server that's so easy to spin up, I can put it in the directory that I want it to. So if I wanted to serve my desktop folder, I would navigate to desktop and then spin this, this Python module up. I don't have to put everything into a VAR www folder. And it just makes life really, really simple. So just proof of concept. We can do a service, Apache to stop and we can come back and make sure that that web server has been stopped by going here. and refreshing. Now you can see that it's gone, we can CD into something like downloads, we say LS, there's nothing in here. So we can tab up a couple times, and just serve up Port 80. Now, because you can see it's not in use anymore. And come back here, refresh, you can see there's nothing in the directory listing, because there's nothing in the folder. So this is just an easy way to spin up a web server, I think it's much easier than Apache two, I'm showing you both because they like to give alternatives. But using Python moving forward is a great, great feature. My challenge to you is to look up how to spin up a FTP server with Python. So I won't get redundant here. I do have future lessons and other courses that talk about this. But if you want to challenge yourself to figure out how to spin up an FTP server, that's my challenge to you, there's a module out there that you can download quite easily and spin up your own FTP server. So let's go ahead and Ctrl C, and we're going to close out of this. And now let's talk about spinning up a service permanently. So let's say that we just had the Apache two running and then we rebooted the machine. When we reboot our machine. Apache two is not going to be online. Because we're only doing a service start, it only holds during this session. Once we reboot that it session is gone, that service is gone. So if we want to keep something online the entire time, what we can do is use system CTL. So we can say system CTL. Enable or Disable if you want to disable something. And for example, we can say SSH now I'm not going to hit enter here. This is just as an example. Let's say that we wanted to have an SSH available on our machine so we can SSH into it. We are opening up SSH for this feature here. Okay, let's say that we want to have a server and this is one I do want you to hit enter in. This is going to be a database, right? This is a PostgreSQL. So we're going to say systemctl enable PostgreSQL. And we have enabled that so now when we reboot this PostgreSQL will load every single time. Now, why is this important? Well, this is important because it's going to allow us to run meta sploit and have the PostgreSQL database running when we boot so it doesn't have to take the extra time to load it. If we come over here, and we just click on the meta sploit framework. Now PostgreSQL is working, and it says database already started. So it's already configured, it's going to skip initialization. And it's going to go ahead and get right into it. So it just says a little bit of time that display can take some time to to run. And I think that if you continue on, I know if you continue on with being a pen tester, you're definitely going to be using medispa quite a bit. So this is just one feature that if you're going to be using it, it doesn't hurt to have it enabled on your system boot. Now if you feel that you want to have a patchy two on boot, you can go ahead and do the same thing with the system enable systemctl enable, but the only one that I recommend putting on is this system CTL PostgreSQL. Okay, so that is it for this video. In the next video, we're going to be talking about installing how to install things from GitHub and how to install using apt get. So let's go ahead and move right into that video. All right, welcome to the Penn ultimate video, we are going to be focusing on installing and updating tools. So let's look at our agenda. So what are we going to learn we're going to learn how to install updates for Kali. So we're going to learn how to install updates using a tool called apt get. And we're also going to learn how to install tools using apt get specifically we're going to be installing a tool today called get we're going to be using Git then to clone from a website. So sometimes when we have a tool that we want, it's not always in apt get, it's not in the repository. So we're going to actually have to use GitHub and maybe use a tool called Git to download tools or other items from GitHub. But this is just going to be one example. But it's a very, very common example that you may have to do as a pen tester. So let's dive in and take a look at how we can use these commands to install tools and update tools. Okay, so one of the important things you need to know is how to not only install files on your computer, but also how to install updates on your computer. So for Cali, since it's a Debian base, we're going to use something called apt get and the first thing I'm going to show you is how to install updates. So the common way to Do this, if you don't use the GUI and you want to use the terminal is apt get update. And then we'll do and apt get, upgrade. Let's go ahead and just hit enter on this. Let's explain what it's doing. So the first command here is saying apt get update. So what we're doing is we're looking through packages. Now these packages are predefined the repositories. And what it does is it says, Okay, I'm going to check packages here for updates. And it went through looks like they use archive Linux, dude, it you, they check these packages here. And they update the packages. And then once they update the packages, they run this command. So basically, the Add command is you're going to do something as well, right? So first, we're going to update and then we're going to upgrade. So based on what's in these packages, it's gonna say, Okay, well, we know the following packages were automatically installed and no longer required. So all these things right here, they're gonna be removed. And then the following packages have been kept back, okay, they're fine. They're not going to uninstall those. And then we have the fine packages that are going to be upgraded. Okay, so it's a long list that needs updating. And then you come in here, and you say, Okay, well, it needs 252 megabytes of additional disk space to continue, you can hit enter for Yes. And it'll automatically start upgrading. So if you want to update your machine to its newest and best form, you can go ahead and do that, I'm going to go ahead and just hit no on this guy. Okay, and now, it's also important to know how to install files. So I'm going to show you two different ways. One way is through apt get similar to what we just did. And the other way is going to be through Git itself. So let's go ahead and install git, we're going to use apt get to install Git. So it will look something like this, we'll just say apt get install, get. And we'll hit yes on this. And another way to do this is to add a dash y at the end of this. So you'd say apt dash get install, get dash y. And that'll automatically say yes, if you just want to accept whatever's coming out for you, you go ahead and just hit yes on that. And it may take a minute for these to install. While this is installing, let's go ahead and talk about what Git does. So Git works with GitHub. So when we talk about GitHub, we're talking about a lot of people update their projects, their code, their frameworks onto GitHub, especially in the penetration testing slash hacking community, it's often that you're gonna find some cool tools that are out there that are installed on Kali Linux can't be found through apt get, and you have to actually download them from GitHub. So it's very important to know how to use Git. And it's very, very simple. So we're on a page like this. This is Vail framework. It's a very popular tool in penetration testing and malware analysis as well. So say we wanted to install this, well, there's a couple things we could do. The first thing we could do is always read the directions and see what they recommend. There is a quick install here. And if you look, they have a apt install Vale here with the dash y. So that will work. Or you can use gets install, where you have to install Git first. Okay, and then we do a git clone. And we run the configuration setup. So that's what we're going to do here, we're going to install Vail just for the fun of it, just so you can kind of get used to how to use GitHub how to use Git, and go from there. So let's go ahead and just Alt Tab back over looks like we have it, we can check it by typing Git and hitting tab. Okay, so Git is here. And we're just going to hit space, we know the command is clone. And while it provides it for us down here, it says, Hey, get clone, copy this. The other place you can do is right here where it says clone or download, you just copy this bad boy right here. We'll all tab back over to our terminal and just hit paste. Okay, and this is going to install in the directory that you choose. So I just put it in this root folder here. And actually our home folder I should say, and it's installed right here the folder is they all right here. Typically when I install things, I like to put them in the OPT folder. So here CD OPT, but since I went ahead and downloaded here, let's just go ahead for an example purpose. If you Do you want to install to object, you're more than welcome, you can move the folder there as well. So what we're gonna do is we're going to CD into Vail. And then we'll hit LS. Now remember, there were instructions. So let's go ahead and look at what those instructions were. These instructions said, you're going to run dot forward slash config. setup that sh, forced silence, let's go ahead and just copy this guy. We'll come back in here. And we'll hit paste. And it's just going to run out of this config folder, setup that sh. And now it's installing. So we could have easily installed this with apt dash kit, which, if you look, look what it's doing, it's actually rolling through the packages here. And it's updating the repositories, right these packages, and then it's going to go ahead and download what it needs. So it's running apt get anyway, if you see updating apt, it's installing the dependencies. So the easier way, the quick way, which he suggested was to do it through there, and it's right, they don't always have the installed packages in apt get. So that's why I wanted to show you the GitHub version of it. So you can go ahead and let this install. Let's just go ahead and recap quickly what we just did. So we used, we used apt get update, and upgrade to install updates in our system. We used git clone, to be able to download packages and clone packages off of GitHub. And we used apt get to be able to download Git itself. So that's really it for this lesson, what I do encourage you to do is go through the man pages of get and go through the man pages of apt get, because you're also able to remove programs, update specific programs, etc. So this lesson really just wanted to introduce you to the basics of downloading updating for your system. I encourage you to learn how to remove files, as well as a little bit of homework for yourself. So thank you for joining me, and I'll catch you over in the next lesson. All right, welcome to the last lesson video. So in this video, we are going to be scripting with bash. Now this may seem a little overwhelming at first, what we're going to be doing is building out a ping sweeper script, it's going to be pretty basic. And what I want you to do is maybe just watch this video once, and then the second time through, really try to follow along with it, take notes, etc, I think of first time watch through you know, just to get the concepts, understand what I'm doing. And then the second time really, really get hands on with it. And I think that will be probably the best way to learn. But if you have a different learning style, please do go ahead and try that as well. The only thing I could say is don't let this intimidate you. Hopefully by the time the video is over with you will have a pretty good understanding on basic scripting and how scripting can really be beneficial and improve our timing, improve automation, etc. So let's go ahead and quickly talk about some of the things we're gonna be learning in this video. Okay, so some of the commands and items we're going to learn, we're going to talk about grep, which is going to allow us to narrow down some results. We're also going to talk about cut and T are both of those are also going to help us narrow down some results. So basically, we're going to start with a ping, that we're going to send out and we're going to want to gather information back that says that ping was valid. So we want to know any computer that responded to us. Well, how are we going to do that? Well, we need to identify what a valid ping looks like, we're going to use grep to to kind of narrow down a string or a sentence or something that identifies with a positive Ping. And then we're going to cut out everything we don't want and use tr as well to cut some things out that we don't want. So we're going to put this into a script when it's all said and done. And we're also going to be talking about the usage of for loops and their importance, not only with using them in this script, but how we can use simple one liners to do everyday things for us. So I'll show you at the end of the video how we're going to use like n map and use a for loop with n map to run through and map scripts. So stay tuned through the video. Again, if you are a hands on learner, maybe first time through you you try hands on but my recommendation here is to just sit back, watch the video understand what's going on. Second time really follow along with it, take notes and get the most that you can know this lesson. So let's go ahead and get started. Alright, so now we're going to be covering bash scripting. So the first thing we're gonna need to cover before we get into writing our scripts is how to narrow down results. And we say narrowing down results. What we're saying is for given a block of text, and we want to extract some information from that block of text, how are we going to do that? So that's what we're going to cover in this lesson. Okay, so let's go ahead and get started. What we're going to be doing today is narrowing down a ping result. So if we come into here, and we need to ping an IP address within our system, so I'm going to be pinging 192 dot 168, dot one dot 90. And you're going to see that it returns a 64 bytes from that address. So it looks like we're getting a response. I'm going to hit Ctrl C here. So if you remember from the networking section, we actually get a response unlimited until we cancel it, right, like we just Ctrl C here from Ping. So there's another thing that we can do, if we only want to send one packet and see if it's alive or not, we can do a dash c of one. So we're just going to do that. So that's a count of one, we're sending one packet over, if we set 10, it would send 10 packets over if that makes sense. So now what we're going to do is we're going to put this into a txt file. So if you remember from previous video, we just use this little carrot here. And I'm going to call this IP dot txt. Okay, and if we cat IP dot txt, you'll see the same results there. So now what we're going to want to do is we're going to want to narrow this down. What do I want to extract from here? Well, I want to extract this IP address. And it'll make more sense when we get into the scripting part. But what we're going to do is we're going to get out, specifically of this, this IP address from this line. Now, all we're interested in actually is a returned IP address that has a valid response, right? So if I were to tack, or if I were to enter in here, save 15 dot 90. Okay, there's no response there. So this is kind of what it looks like. When it doesn't get a response back, it just kind of lingers. And then we hit Ctrl C, and it says, zero ping statistics, right, nothing was was received back. So what we see when we get a response back, as we see 64 bytes, when there's no response back, we don't have any bytes. So if we're doing a sweep through a network, which we're going to be doing later, we need to be able to narrow down these results. So if we're sending say 190 2.168 dot 1.1, all the way through to 55. And we want to see who responds back and then take that list and narrow it down to the IP addresses, which exactly what we're going to be doing, we need to know how to narrow that down. So we're going to be narrowing down on specifically is 64 bytes. So let's tab up a couple times to this cat IP address. And we're going to do a pipe and the pipe just means we're going to add an additional command here. So the additional command we're going to do is called grep. grep is going to grab any line with what you specify. So let's specify 64 bytes and see what happens. See, now if you notice, we had all of these lines before. And now a grep is doing is grep is taking only the lines that contain 64 bytes. So again, a valid response. So we have 64 bytes here. And we have achieved a response. So what we're going to do now is we're going to narrow this down some more. Okay, we've got this line here. But again, we're still trying to extract this IP address. So how can we do that? Well, there is a tool called cut. So if we tap up again, we do another pipe because they're sending a new command. We're gonna say cut and cut syntax looks like this. And I'll explain it once I type it out here. Okay, so we have cut, and then this hyphen D, that's a delimiter. So the delimiter is what we're going to be cutting on. So we're giving a delimiter of a space, meaning here's a space, here's a space, here's a space, so we're going to be cutting on these spaces. And then we give a field, we say okay, what field we want to retrieve back from this cut. Okay, we want field four, if you look 1234 and the fourth field is our IP address. So it's going to say okay, I'm going to cut on this space, I'm going to cut on this space, I'm going to cut on this space, and then I'm gonna take it right here. Now if we identified field five, we will be taking this if we identified field three we'd be taking from so let's go ahead and just hit enter and see what that looks like. Okay, so now we are narrowed down even more. But there's an issue here, if we were to try to send this IP address, we would have this little colon here attached on to it, and you can't ping with that IP address. So we're going to be doing a sweep or narrowing down this list, then we're going to actually need to remove this guy here. So let's take a look at how we do that. So if we tab up again, and again, we're going to add a pipe. Now we're going to use a command called tr. And tr just means translate, what we're going to be doing is another delimiter. So dash D there, and we're going to be taking out that colon. So it should look something like this. If we hit enter, now you can see that that colon has been removed. Okay, now let's talk about how we can use this information to write out a script, we're going to start with a basic script, and we can add upon it as we go. So I've gone ahead and written out a script, but we're going to talk about it very slowly, so you can actually look at it and copy it down. So what we're going to do is go ahead and say g edit, and I call this IP sweep.sh. So go ahead and do the same or something similar, and hit enter. So let's take a look at this script. So at the very top here, we have to declare what we're doing. So we're going to give a hash bang. And we do this with any scripting language. So if was a Python, we'd be entering Python here, but this is bash. So we're going to be doing a forward slash bin forward slash bash that declares that we're running a bash script. And the.sh also indicates that we're running a bash script. So I want you to ignore this line here in this line here. For now, let's talk about this line. This should look very, very familiar. So we're doing in this line, we're saying we're going to ping with a count of one, which we talked about. And then we're going to do something here, we've got $1, sign one and $1 sign IP, let's just ignore that for now. Okay, so we're going to go ahead and do the rest that should look familiar, we're going to say we're going to grab 64 bytes, we're going to cut the delimiter of a space field before, and then we're going to do a translate, right and take off that little bit at the end. Okay, I added an ampersand here at the end. So an ampersand allows us to do threading. So that's exactly why it's in there. If we didn't, we'd have to let the process go one IP at a time. And we'll talk about that in a second as well. So let's talk about this four line. So a for loop is what we're actually running here. And the loop is saying, I want to do an IP address, we're just declaring a variable here, you can call it whatever you want. Or we're saying, hey, for this IP in a sequence of one through 254, we're going to do something and that do is a pain. So what this means is for IP, and if we think about it in sequence one through 254, what it's saying is 1234, all the way up to 254. Okay, so think about it this way, if we say for one, in this ping sweep, we're gonna do that, right, so we're gonna say 414243, all the way through to 34. That's what this loop is doing. So it's a very, very simple loop. Now, IP is replaced down here, at the very end. Now, we're also calling out this dollar sign one. Now this dollar sign one is user input. So we're going to actually do something this is called IP sweep, right. So we're gonna have to call out this IP sweep something like this.sh. And then we're going to have to give out some information, it's going to request information, if we don't provide it, it won't know how to ping. So we're going to do is we're going to say the first three octets of our home network. So if yours is 190 2.16 8.1, like mine is, then you just enter 192 dot 168 dot one. Now, we could also for simplicity, just hard code this. So we can say 192 dot 168 dot one.ip address, and it will be fine. We don't have to build this in the only reason we're not hard coding it is because you can do multiple pin sleeves. This can be a ping sweep script for you in the future if you're on a different network, or you just want to write something out really quick. dollar sign one works perfect. But if you want to leave it hard coded like this, it'll also work. So let's go ahead and just delete this out. I'm going to put this into dollar sign one again to have a proof of concept. And then we are going to run this. So all we do here at the end is declared done. If we didn't run this with an ampersand here, we would have to add a semi colon similar to this. But because we are having an ampersand we can actually get rid of that and just put that back just for some syntax. Clarity here. Okay, so let's go ahead and save this. And remember from our lesson, we're going to have to change the mode of our script because it's not executable by default. So we're going to do a plus x here. And then we're going to call our IP sweep that sh, we can LS and make sure it's green. Here's ip c.sh. And then we'll do a dot forward slash ip sweeped a sh, and I'm not going to enter anything in as want to show proof of concept. So see a ran through every single number here and threading, and nameless service not known because we didn't provide an IP address. So what we can do here is we need to provide that IP address 168 dot one, hit enter. Okay, and it pulls back some information. So what we can do with this information, let's write this out to a file. So let's just call this IP list dot txt, something like this. Okay, it's done. Now, let's just cat out the IP list dot txt. Okay, now we have an IP list of the IPS in our network that we just swept, right. And we can use this information later on. But before we go into that, I do want to go back and just improve our script a very, very tiny bit. So let's go ahead and just tab up a couple times. So we get to our G edit. And let me show you how we can improve this script, it doesn't have to be overly complicated, what we can do is, we can say something like this, we can come in here and give an if statement. So an IF is conditional, right? We're gonna say, if this exists, then do something. And if it doesn't exist, do something else. So we're gonna say if dollar sign one is equal to nothing, is going to give blank space here. And then we're going to say, then we want to do something. So what are we going to do, we can echo out something similar to you forgot an IP address. And then echo out what you need to do. Like syntax. dot slash ping sweep, or IP sweep is what we call this IP sweep that sh, and then IP. Or we can even write it out an example, right? Like something like that. So that way, our user, if they're using it, we wrote this for somebody else, they know what we're talking about. And at the very end, we just need to write if backwards, we'll put it ephi. So what this is saying is, if this is not then echo here, right, we're going to echo these, and then we need to add one other thing here, which is an else, let's go ahead and hit enter, just to space this out a little bit. So if we have no dollar sign one declared, right, if we have nothing entered in, we're gonna say echo, you forgot an IP address and syntax here. If we do have something in dollar sign one, okay, we're going to do something else, we're going to do our ping sweep. And that's it. So this is very similar and modified from Georgia Weidman that I've got a long time ago. So full credit goes to her for this little script, it was very, very easy to learn. And it's also very easy to teach. So let's go ahead and just run this one more time, we're going to say IP sweep the SH. And look what happens now it says you forgot an IP address. Now we can declare a number in there anything in the scripts not perfect, right, we were expecting three octets. And we could give it a one. And it's still going to do something like that, which is incorrect, right? So we need to be able to, to modify this down more, but that gets really advanced scripting into declaring that needs to be three octets. And if you don't provide those, then what, and that just gets more advanced. So we really just need to know, hey, what we're doing here, very basic script for ourselves, and something to remember. Okay, so let's clear our screen. Last thing I want to show you. So we've been able to write a script out. But we can also do looping in one line. And this is where it becomes kind of fun. So we have this IP list, right? We did cat IP list dot Tex. Now let's say we've got this IP list together, and we want to do an N map scan on all of these IPS. Now we could just say and map and type in the syntax you want and the IP address of it. For every single one of these start a new tab and let that happen. Or you could do something in a for loop. So we can write the same for loop that we did before. We're going to say for IP, and then we're going to do is we're going to write $1 sign and we're going to cat the IP List dot txt. So all it does is is bringing out this list that we have here and it's saying, okay, for this IP, this IP, this IP, etc we're gonna run through all of these. That's what the loop does, right? Okay, we're gonna do our semi colon, and then we're going to tell it to do something, right. So what do we want to do? Okay, let's run a mF script. So we're going to say do and map. And we'll ping, or we'll do a port, Port 80 on all these, and we'll say, still scan that on port 80. And we'll do t four for a speed. And that should be yet. So then we can do done like this and let it run through one at a time. We can also do the ampersand and let it run multiples like this, we can hit enter and see what that does. But I also forgot one thing here, forgot to declare the IP address. So let's talk about it real quick. So we've got a very, very simple one liner, and you're gonna see one liners a lot if you get into ethical hacking, and just allows us to do things quickly and scripted. So we got four IP address in this list. So every IP in this list, we're going to loop through, when we do that loop, we're going to do an map, we're gonna do a quick stealth scan of Port 80 t four, and we're gonna say declare the IP address. If you're not comfortable with M map, that's okay, this is purely an example. And something you will see in your career. I will make a scripting video at some point for n map. And we'll cover mF more in detail. So let's go ahead and just hit enter. Okay, I messed up my syntax. So what's going on? Okay, so for IP in, this got deleted for IP and cat IP list. Let's try this one more time. Okay, so we just did all these scans seven scans at once. And what we did is, you see, these are the processes that are starting. So it started up eight processes, actually not seven. And it's just running through this list doing the scans. And we're going to go ahead and just kind of look at it. So it says, okay, on one dot 74 is at open, it's open, okay. And then on 254 is at open, it's open. And then you see filter down here, or it's not running, filtered, filtered, same thing. So we can hit Ctrl C, or hit enter for done. And that's pretty much it. So what we just did is we ran a map scans at one time instead of having to copy and paste these. So that's just a little bit of what scripting can do. It does get more advanced. But to be able to know a one line for loop is a really, really important if you go into penetration testing. And it's just important in basic bash scripting as well. So that's really it for this lesson. And that's really it for this course. So I hope you really learned something from this course, if you did find it valuable. Please do share it with others. Please subscribe. If you haven't, please do like the video, word of mouth is the best thing for me, it helps me grow my channel and helps me give content back to you as I get more feedback. And I grow as a channel. So I'm looking to do more courses in the future. And appreciate you taking time with me. If you like this course and you want to chat with me check the descriptions down below, I've got a discord channel, we've got quite a few people in there. And I've also got a Twitter if you want to hit me up there. Lastly, I do have a Patreon. If you felt like this course is valuable, and you'd like to support me, any dollar amount goes a long way for me recording equipment, recording software, all that's very expensive. And the time spent on this is also very detailed long hours. So if you want to support me or, or anything a like, subscribe, etc, it goes a long way. I appreciate you taking the time to watch this course. And until the next one, thank you so much for joining me. All right, and now some bonus material. So I'm adding in some additional resources. These are for those of you that want to continue on, you've learned Linux now and you're like, Hey, I really want to be a pen tester. I think this is for me, I'm gonna provide you a whole lot of different resources here. So take notes, these are some of the best resources I could think of for those wanting to get into the field. I'll briefly cover each of them and then leave you added to do your own research and hopefully, see you in the field someday as a pen tester. So let's take a look at some of these resources. Okay, so first resource is a shameless self promotion. And I only do this because I do think that I'm a valuable resource. I'm trying not to be biased here but I've got some good, good stuff that's completely free if you're interested in it. So if you come to youtube.com slash c slash the cyber mentor, you can come to my page here and you can check out all the videos I have. One video is a day in the life Have an ethical hacker. So if you want to know what it's like to be an ethical hacker, if you're still not sure if this is the field for you, this might be a video for you to view talks about the day in and day out stuff that you might do, what kind of assessment work you might be asked to do and what it's really like to be a, an ethical hacker. On top of that, I've got another video on cyber career paths about penetration testing and ethical hacking. So if you're looking to get into the field, and you want to become a pen tester, or ethical hacker, and you're not quite sure where to go, this is probably the better video for you, it kind of talks about all the knowledge that you'll need for a junior perspective, and really the knowledge that you'll need to be successful in the field, including certifications, etc. So if you're watching this video as an additional resource, this will probably be additional resource. Part two is a good way to call it this is the one like really detailed on penetration testing and ethical hacking. On top of that, over here, I've got playlists. So if you come into the playlist, I've got a few courses, most importantly, is our zero to hero course. So if we come to the cyber mentor.com, and you go to courses over here, and you go to zero to hero pentesting You can find more information on the syllabus. So I put it into lesson plan as well here, but there are let's see 11 episodes, we start with Linux kind of like you've already learned, no keeping some introduction, we do Python for two weeks, we do information gathering Oh send recon scanning, enumeration exploitation, we do internal attacks as well. So we'll build out an Active Directory lab. And we'll learn how to do these internal attacks aren't really taught in a lot of courses. And then we'll end it with some file transfers, maintaining access, etc report writing as well and career advice. So this is like my complete course, it's called zero to hero to take somebody from from a complete zero and bring them into hero where they can start doing some pentesting on their own. So again, if you're interested in that course, you can come to my website and check it out with lessons plan, you can just click in the tab and play the video or on my YouTube channel, you can click right on the playlist and play it from there as well. So leaving the shameless self promotion, let me talk about some more cheap alternatives. hack the box is a great, great alternative if you're just getting started. So for hack the box, what it is, is it's a series of vulnerable machines. So you could think of it almost like a game. So if you want to do some hacking, this is a great place to just start practicing and learning the ropes. What we can do is like say we could pick something on the easy side, you want to look for something like that's more green right on the left, because that shows easy, you would pick a box like this, you would scan against it. And you know, if you don't know what I'm talking about, that's fine, but you would scan against it and try to find vulnerabilities and hack it. So really, really great website, if you have the VIP, they're starting to move it, it's in beta right now. But they have 20 boxes that you can attack on active side and 20 in the VIP. But the nice thing about the VIP is they're about to open up all 97 that had been retired. So they retire one every week and they bring a new one in. So you gain access. It's like $13 a month, this is free, completely free platform if you don't want it but this is 13 bucks a month for the VIP access. And you can come in here and do some of these machines that are super duper easy. And if you click into them, they'll have write ups for them. And they'll also have video walkthroughs for a lot of these machines. So that's a really, really great stuff, right? If you have no idea what you're doing, this is a great place to start. Because these retired boxes are boxes that have already been done, you can watch how somebody else did them, you can learn their methodology. And this is really good for just getting the basics down and understanding you know, some basic hacking. Same thing here with the virtual hacking labs, it's very similar. They've got a labs, they've got a course and they got different pricing. So you can try these out if you're interested in them. So they are, you know, just alternatives to just practice online. Then you've got bowling hub as well, you'll have to search through this and try to find something that's like beginner level or Google online, which which are realistic boxes, or what are good boxes on volm. hub of Ohio, basically you just download the VMware file, and you play it on VMware and you try to attack the the machine so you download a machine, you try to attack it. And these are intentionally vulnerable machines, all these right here on these top three. So let's say that that's not really where you want to start, you think maybe you could use a little bit more hand holding and you like a certification to come behind it. I'm going to show you the top three in my order that I think for pentesting at least at a beginner to mid tier level, what the top three are. So either insecurity gets number one slot in my mind, if you come into here and you go on to certifications. So they've got a couple different ones, the ECP PT, or actually, let's go to courses. So the penetration testing student and the penetration testing professional, the student is for the beginner, the professionals a little bit more advanced leaves off for the beginner ends. So if we come in the student, you can see some of the things that you'll learn. So they've got, you know, it talks about the preliminary skills that you might need and teaches you those, it's got some programming, and then just the basics of penetration testing, but it gives you an idea what it's like. On top of that the ISP PTP course they have is like more in depth more advanced, you start getting into assembly language and buffer overflows, you get into network pentesting, some PowerShell, Linux web app, Wi Fi, some Ruby for medispa light. So I think this is a really well rounded really up to date. The downside of this course is that it's not, it's not really well known on the HR side of things so and then the pricing can get a little expensive. On the elite side, right now it's 16 $100. The cheapest is the 1200, I would at least get the middle tier. But as of right now they're offering that PTs and the PTP, if you buy the PTP, they give you the PTS for free, but that won't be going on much longer. But you can always hold out for deals like this as well. Another resource and a very, very well known resource, probably the best certification in terms of being known is the O SCP. So it starts out at 800 bucks, as you can see here, you're probably going to spend more money than that, because that's just 30 days. So the nice thing about this is it comes with labs, there's a certain amount of machines in there that you can try to hack against, sort of like a hack the box, but it's an environment. So you can you notice, attack whatever you feel like and try to navigate your way through the network. And then when you are done, and you want to test for the certification, you have to actually hack in an environment of the set number of machines you have to hack against. And you have to be successful in hacking those machines to get your certification. So it's considered one of the more difficult certifications out there to achieve. And you'll see it come up a lot of times in HR or job applications that they want this oscp. So this is something to look into and consider as well. The cost isn't as bad as the elearn. But the con here is that office of security courses haven't been updated in five or so years. So you really need to, you know, it's kind of the best of both worlds if you were able to do both. But this one will get you into more doors, this one will get you a little bit more current. But there are plenty of resources out there, all these tabs are showing you that you don't have to spend a ton of money to get this stuff. These are more things that if you want that certification, you want that that coursework, that knowledge, these are great resources, all three of these. So last is the G Pen. Now the G Pen is just an exam. By itself, it's 17 $100. It is by sans right. So this is showing g i see you actually have to take the corresponding sans course that goes with it. And that course is upwards of $6,000. So unless you can get a employer to pay for this sans certification, probably not the best. But the thing that I like about sans is that it stays up to date, they are constantly updating their courses, and that they look good on a resume. It's one of those really high tier high level certifications. And the exam from what I hear is actually pretty good. It's not a practical exam, but it's a fairly good exam. And the nice thing I didn't mention elearn security is also a practical so this oscp is practical, the elearn security exams practical, you have to hack your way through to to pass and write a report as well. This one is a multiple choice exam, I do believe. So these are three certifications that you can look into if you wanting to go down that route. I would start with the PTS if you can, it's dirt cheap. You know, if I have to make a recommendation just to make sure that you're you're really interested in this, if you know for sure. And you want to do that pts PTP combo, this might be a good choice here. But other than that, I mean, the free resources like I've got my channel, there's ton of videos, the zero to hero course is like at least 20 to 30 hours of material. hack the box you'll spend a lot of time on there's plenty of write ups if you just Google like, honestly, if we go into here and we say like apocalypse here. If you say that and you Google that with right up, you're going to find the right up for this or you'll find a video for this or some kind of walkthrough, right. So you just want to look through these and try to try it on your own and then go back And then watch the write up and see how you could have improved if you'd got through it. Or where you can improve an enumeration or whatever it is you need to, to get better to actually succeed the next time you try attacking these machines. So that is it. You have reached the end of this course and the end of the bonus material. If you need anything, I provided my contact info again in the beginning. You know, I'm at the cyber mentor on Twitter, you can reach me on YouTube as well. And I really do. Thank you for joining me I look forward to seeing many of you take the next step from this Linux, if you made it this far, you've already gotten through the beginner Linux. That's awesome. I hope you take this next step and that you are intrigued by penetration testing because we need more people in the field. So I look forward to seeing you guys and girls come through and hopefully I'll work with some of you someday. So until next time, my name is Heath Adams and I thank you for joining me\n"