Ethical Hacking Powered by AI Programme

Module 1: Introduction to Ethical Hacking

Basics of ethical hacking, information security controls, relevant laws, and standard procedures. Hacker classes, AI driven ethical hacking, ChatGPT powered AI tools for ethical hacking, CEH ethical hacking framework and other frameworks, PCI DSS, HIPPA, SOX, GDPR, DPA. 

Module 2: Footprinting and Reconnaissance  

Learn tools and techniques to perform footprinting and reconnaissance. Various footprinting – dark web, social networking sites, tracerroute analysis, email, AI powered OSINT tools. 

• Hands-on lab: Footprinting using search engines, internet research services, and social networking sites. 
• Hands-on lab: Perform Whois, DNS, network, and email footprinting. 
• Hands-on lab: Perform footprinting using AI. 

Module 3: Scanning Networks 

Learn different network scanning techniques and countermeasures. 

• Hands-on lab: Perform host, port, service, and OS discovery on the target network. 
• Hands-on lab: Perform scanning on the target network beyond IDS and Firewall 
• Hands-on lab: Perform scanning using AI. 

Module 6: System Hacking 

Learn about the various system hacking methodologies used to discover system and network vulnerabilities, including steganography, steganalysis attacks, and how to cover tracks. Password cracking tools, Metasploit framework, Buffer overflow detection tools, Active Directory enumeration, Privilege escalation tools, Keylogger, Spyware, Rootkits, Steganalysis, Steganography detection tools, Linux and Windows post exploitation, covering tracks, clearing logs, Track-covering tools. 

• Hands-on lab: Crack system password 
• Hands-on lab: Gain access to a remote system 
• Hands-on lab: Escalate privileges in Linux machines. 
• Hands-on lab: Hide data using Steganography. 
• Hands-on lab: Clear windows and Linux machine logs 
• Hands-on lab: Hiding artefacts in windows and Linux machines. 
• Hands-on lab: Perform system hacking using AI. 

Module 7: Malware Analysis 

Learn about several types of malwares (Trojan, viruses, worms, etc.), APT and fileless malware, malware analysis procedures, and malware countermeasures. Malware counter measures, anti-trojan software, AI powered malware detection, and analysis tools. 

• Hands-on lab: Gain control over a victim machine using Trojan. 
• Hands-on lab: Inflict the target machine using a virus. 
• Hands-on lab: Perform static and dynamic malware analysis. 

Module 8: Sniffing 

Learn about packet sniffing techniques and their uses for discovering network vulnerabilities, plus countermeasures to defend against sniffing attacks.  

Hands-on lab: Perform MAC flooding, ARP poisoning, MITM, and DHCP starvation attacks. 

• Hands-on lab: Spoof a MAC address of a Linux machine. 
• Hands-on lab: Perform network sniffing. 
• Hands-on lab: Detect ARP poisoning in a switch-based network. 

Module 9: Social Engineering 

Learn social engineering concepts and techniques, including how to identify theft attempts, audit human-level vulnerabilities, and suggest social engineering countermeasures.  

• Hands-on lab: Perform social engineering using various techniques. 
• Hands-on lab: Detect a phishing attack. 
• Hands-on lab: Social engineering using AI. 

Module 10: Denial of a Service 

Learn about different Denial of Service (DoS) and Distributed DoS (DDoS) attack techniques, plus the tools used to audit a target and devise DoS and DDoS countermeasures and protections.  

• Hands-on lab: Perform a DoS and DDoS attack on a target host. 
• Hands-on lab: Detect and protect against DoS and DDoS attacks. 

Module 11: Session hijacking 

Learn the various session hijacking techniques used to discover network-level session management, authentication, authorisation, and cryptographic weaknesses and associated countermeasures. Application-level session hijacking, TCP /IP session hijackings hijacking, Blind hijacking. 

• Hands-on lab: Perform hijacking using various tools. 
• Hands-on lab: Detect session hijacking. 

Module 12: Evading IDS, Firewalls and Honeypots 

Learn about firewalls, intrusion detection systems (IDS), and honeypot evasion techniques; the tools used to audit a network perimeter for weaknesses; and countermeasures. 

• Hands-on lab: Perform intrusion detection. 
• Hands-on lab: Deploy honeypot to detect malicious network traffic. 
• Hands-on lab: Bypass firewall using Tunnelling. 
• Hands-on lab: Bypass anti-virus 

Module 13: Hacking web servers 

Learn about web server attacks, including a comprehensive attack methodology used to audit vulnerabilities in web server infrastructures and countermeasures. Web server architecture, DNS server hijacking, Footprinting / banner grabbing, Directory brute forcing, detecting web server hacking attempts. 

• Hands-on lab: Web server reconnaissance 
• Hands-on lab: Enumerate web server information. 
• Hands-on lab: Perform a web server attack. 
• Hands-on lab: Perform a web server hacking using AI. 

Module 14: Hacking web applications 

Learn about web application attacks, including a comprehensive hacking methodology for auditing vulnerabilities in web applications and countermeasures. Bypass client-side controls, attack access controls, Web API, Webhooks, Web API hacking, Web application fuzz testing, Encoding schemes. 

• Hands-on lab: Web application reconnaissance 
• Hands-on lab: Web spidering 
• Hands-on lab: Web application vulnerability scanning 
• Hands-on lab: Web application attacks 
• Hands-on lab: Web application using AI

Module 15: SQL injection 

Learn about SQL injection attack techniques, evasion techniques, and SQL injection countermeasures.  

• Hands-on lab: Perform an SQL injection attack against MSSQL to extract databases. 
• Hands-on lab: Detect SQL injection vulnerabilities using various SQL injection detection tools. 
• Hands-on lab: SQL injection using AI. 

Module 16: Hacking Wireless Networks 

Learn about several types of encryptions, threats, hacking methodologies, hacking tools, security tools, and countermeasures for wireless networks. Wireless standards, Wireless traffic analysis, Wi-fi encryption cracking, Wi-fi auditing tools. 

• Hands-on lab: Footprint a wireless network 
• Hands-on lab: Perform wireless traffic analysis. 
• Hands-on lab: Crack a WPA2 Network 
• Hands-on lab: Create a rogue access point. 

Module 17: Hacking Mobile platforms. 

Learn mobile platform attack vectors, Android and iOS hacking, mobile device management, mobile security guidelines, and security tools. Anatomy of a mobile attack, App sandboxing issues, SMShing, Call spoofing, OTP / Two factor authentication hijacking, Camera/ microphone capture attacks, jailbreaking iOS, mobile device management, 

• Hands-on lab: Hack an android device by creating binary payloads. 
• Hands-on lab: Exploit the android platform through ADB. 
• Hands-on lab: Hack an android device by creating an APK file. 
• Hands-on lab: Secure android devices using various android security tools. 

Module 18: IoT and OT hacking 

Learn several types of Internets of Things (IoT) and operational technology (OT) attacks, hacking methodologies, hacking tools, and countermeasures. IoT architecture and protocols, IT /OT convergence, OT hacking methodology, OT hacking tools, OT security tools. 

• Hands-on lab: Gather information using online footprinting tools. 
• Hands-on lab: Capture and analyse IoT device traffic. 
• Hands-on lab: Perform IoT attacks. 

Module 19: Cloud Computing 

Learn different cloud computing concepts, such as container technologies and serverless computing, various cloud computing threats, attacks, hacking methodologies, and cloud security techniques and tools. Fog computing, Edge computing, Container, Docker, Kubernetes, Serverless computing, AWS hacking, Azure hacking, Google Cloud hacking, Container hacking.  

• Hands-on lab: Perform S3 bucket enumeration using various S3 enumeration tools. 
• Hands-on lab: Exploit open S3 buckets. 
• Hands-on lab: Escalate IAM user privileges by exploiting misconfigured user policy. 
• Hands-on lab: Perform vulnerability assessment on docker images. 

Module 20: Cryptography 

Learn about encryption algorithms, cryptography tools, Public Key Infrastructure (PKI), email encryption, disc encryption, cryptography attacks, and cryptanalysis tools. Ciphers, Symmetric and Asymmetric Encryption algorithms, Message digest functions, quantum cryptography, cryptography tools, attack on blockchain, quantum computing attacks. 

• Hands-on lab: Encrypt the information using various cryptography tools. 
• Hands-on lab: Create and use self-signed certificates. 
• Hands-on lab: Perform email and disc encryption. 
• Hands-on lab: Perform cryptanalysis using various cryptanalysis tools. 
• Hands-on lab: Perform cryptography using AI.