1. Introduction
2. ICMP Packet Analysis
3. ARP Packet Analysis
4. 3 way handshake Analysis
5. Tracert Command Analysis
6. Packet Forensics
7. Nmap Packet Forensics

1. Network Sweeping
2. OS Discovery
3. SYN Scan
4. UDP Scan
5. XMAS Scan
6. FIN Scan
7. NULL Scan

1. Fragment Scan
2. Data Length Scan
3. TTL Scan
4. Source Port Scan
5. Decoy Scan
6. Spoof IP Scan
7. Spoof MAC Scan
8. Data String Scan
9. Hex String Scan
10. IP Options Scan

1. Metasploit Basic
2. Msfvenom
3. Auxiliary scanner
4. Windows Reverse TCP
5. Windows HTTPS Tunnel
6. Hidden Bind TCP
7. Macro Payloads
8. Shell on the Fly (Transport)
9. Bypass User Access Control
10. Pass the Hash
11. Post Exploitation

1. Hydra
2. Medussa
3. Crunch
4. CeWL
5. WCE
6. Mimikatz
7. cUPP
8. Online Attacks

1. Introduction & Lab setup
2. Banner Grabbing/Banner Hiding
3. Port forwarding /Time Scheduling
4. Brute forcing/Secure
5. Pivoting/Tunneling [windows]

1. Introduction & Lab setup
2. Banner Grabbing/Banner Hiding
3. Port forwarding /Time Scheduling
4. Brute forcing/Secure
5. Pivoting/Tunneling
6. Multiple way to secure ssh

1. Introduction & Lab setup
2. Banner Grabbing/Banner Hiding
3. Port forwarding /Time Scheduling
4. Brute forcing/Secure
5. Pivoting/Tunneling

1. Introduction & Lab setup
2. Banner Grabbing/Banner Hiding
3. Port forwarding /Time Scheduling
4. Brute forcing/Secure
5. Penetration testing with SWAKS

1. Introduction & Lab setup
2. DNS Enumeration
3. DHCP Packet Analysis with Wireshark
4. DHCP Starvation attack
5. Rogue DHCP Server
6. Tools (Gobbler, responder, Yersinia)

1. Introduction & Lab setup
2. SMB Enumeration
3. SMB Null Sessions
4. Enum4Linux
5. NetBIOS Spoofing
6. Banner Grabbing/Banner Hiding
7. Brute forcing/Secure
8. Pivoting/Tunneling
9. Penetration Testing with (PS exec, eternal blue )
10. Multiple way to connect smb

1. Introduction & Lab setup
2. Banner Grabbing/Banner Hiding
3. Port forwarding /Time Scheduling
4. Brute forcing/Secure
5. Penetration Testing with Metasploit and Nmap

1. MSSQL Brute force Attack
2. Enumerate MSSQL configuration setting
3. Identifying SQL Server logins
4. Identify Database owner
5. Identify a User With masquerade privilege
6. Execute SQL Statement
7. Retrieve MSSQL Password Hashes of Users
8. Decode Password Hashes of Users
9. Extracting MYSQL Schema Information

1. Introduction and Lab setup
2. MYSQL Brute Force Attack
3. mysql banner user/file/ Enumeration
4. Stealing MYSQL information
5. Check File Privileges
6. Enumerate MYSQL writeable directories
7. Extract MYSQL Username with Hash Password
8. Crack Hash Password with John the Ripper
9. Secure MYSQL through port forwarding
10. Prevent Mysql against brute force attack

1. Introduction & Lab setup
2. Banner Grabbing/Banner Hiding
3. Port forwarding /Time Scheduling
4. Brute forcing/Secure
5. Pivoting/Tunneling
6. DOS Attack

1. Introduction & Lab setup
2. Banner Grabbing/Banner Hiding
3. Port forwarding /Time Scheduling
4. Brute forcing/Secure
5. Penetration Testing with Metasploit and Nmap
6. Pivoting/Tunneling

1. Introduction
2. ARP Poisoning
3. MAC Address Snooping
4. DNS Spoofing
5. DNS Poisoning
6. Capture NTLM Hashes
7. Xerosploit

1. Socks proxy lab setup
2. SSH
3. FTP
4. HTTP

1. Setup Snort Lab in Ubuntu
2. Understanding Snort Rules
3. Introduction to IPtables
4. Introduction to Windows Firewall
5. ICMP Detect
6. TCP Packet Detect
7. Detect Nmap Scan
8. Detect Dos Attack
9. Antivirus Evasion with veil

1. Introduction to DOS Attack
2. Botnet
3. D-DOS Attack
4. SYN Flood Attack
5. UDP Flood
6. Smurf Attack
7. Packet Crafting
8. Others DOS Attack Tools

1. Introduction to Social Engineering Attack
2. Payload and Listener Attack
3. Java Applet Attack
4. HTA Attack
5. MSFPC
6. DOS Attack
7. PowerShell Attack Vector
8. VNC Attack

1. Persistence
2. s4u_persistence
3. VSS_Persistence
4. Registry Persistence
5. Netcat
6. Clear Event Logs

1. Nessus
2. GFI Languard
3. Nexpose
4. Openvas
5. MBSA