1 00:00:01,470 --> 00:00:03,660 Now let's start with our first course. 2 00:00:03,660 --> 00:00:05,220 That is ethical hacking. 3 00:00:06,240 --> 00:00:09,180 So what is ethical hacking? 4 00:00:09,990 --> 00:00:17,280 Well, some experts have written that there is no such word like ethical hacking because hacking will 5 00:00:17,280 --> 00:00:18,540 never be ethical. 6 00:00:18,570 --> 00:00:25,920 While on the other hand, some experts suggested that performing hacking with all required permissions 7 00:00:25,920 --> 00:00:28,770 from the owner is called ethical hacking. 8 00:00:30,150 --> 00:00:36,510 Now, if you don't assume that ethical hacking exist, then what is the whole process called? 9 00:00:36,720 --> 00:00:39,960 Well, it is called as penetration testing, right. 10 00:00:40,440 --> 00:00:45,420 But for now, we have to assume that ethical hacking exist. 11 00:00:45,450 --> 00:00:46,110 Right. 12 00:00:46,410 --> 00:00:47,730 Now, what is hacking? 13 00:00:48,150 --> 00:00:51,510 C hacking simply means illegal intrusion. 14 00:00:53,430 --> 00:00:56,760 Now, what are the phases of ethical hacking? 15 00:00:57,390 --> 00:01:06,000 C There are six phases of ethical hacking, sorry phases. 16 00:01:07,470 --> 00:01:12,150 Now, if you search on the Internet, you will find this image. 17 00:01:14,730 --> 00:01:18,210 It's mentioning that there are five phases of ethical hacking. 18 00:01:19,260 --> 00:01:22,800 We will see the sixth one at the end of this lesson. 19 00:01:23,340 --> 00:01:26,190 Now we will start with reconnaissance. 20 00:01:26,790 --> 00:01:28,950 It's also called S foot printing. 21 00:01:29,910 --> 00:01:36,000 Foot printing means gathering information about your target as much as possible. 22 00:01:36,480 --> 00:01:40,740 Now we can collect information in three different parts first. 23 00:01:40,770 --> 00:01:43,230 Network second is host. 24 00:01:43,230 --> 00:01:45,930 And the third one is people involved. 25 00:01:46,110 --> 00:01:46,710 Right. 26 00:01:47,340 --> 00:01:51,510 So foot printing is of two types. 27 00:01:51,630 --> 00:01:53,880 First is active and other is passive. 28 00:01:54,300 --> 00:01:59,730 Active means directly interacting with your target to gather information. 29 00:02:00,090 --> 00:02:05,220 Example We can use some tools like PN map to scan our target. 30 00:02:06,360 --> 00:02:09,240 So that comes under active scanning. 31 00:02:09,630 --> 00:02:11,100 Sorry, active foot printing. 32 00:02:11,370 --> 00:02:13,590 Now let's talk about passive foot printing. 33 00:02:13,710 --> 00:02:21,900 Passive means trying to collect information about your target, but without directly interacting or 34 00:02:21,900 --> 00:02:24,420 without directly accessing the target. 35 00:02:25,830 --> 00:02:32,550 For example, it involves collecting information from public websites and social media platforms. 36 00:02:33,960 --> 00:02:37,560 Now, now comes the second step that is scanning. 37 00:02:38,790 --> 00:02:42,960 So mainly three types of scanning is involved. 38 00:02:43,860 --> 00:02:45,990 First is your port scanning. 39 00:02:46,140 --> 00:02:50,130 Another one is vulnerability scanning, and the third one is network mapping. 40 00:02:50,160 --> 00:02:50,790 Right. 41 00:02:50,790 --> 00:03:00,000 So port scanning means scanning the target for information like open ports, live systems and other 42 00:03:00,000 --> 00:03:03,660 things like which operating system it was running on, etc.. 43 00:03:04,650 --> 00:03:06,720 Then comes the vulnerability scanning. 44 00:03:07,830 --> 00:03:16,140 It means checking our target for weaknesses, checking for the weak points of our targets. 45 00:03:16,890 --> 00:03:21,270 We generally use some automated tools to perform this practical. 46 00:03:22,500 --> 00:03:24,270 Then comes the network mapping. 47 00:03:24,480 --> 00:03:31,440 Network mapping means finding out the network structure that is topology. 48 00:03:31,920 --> 00:03:34,230 We will find out topology of network. 49 00:03:34,260 --> 00:03:38,820 We will also find information like routers, firewalls and servers. 50 00:03:41,970 --> 00:03:46,020 Now, the third is gaining access. 51 00:03:46,050 --> 00:03:54,750 Gaining access means entering into your target system or entering into your network or entering into 52 00:03:54,750 --> 00:03:56,610 your targeted website. 53 00:03:56,700 --> 00:04:01,800 So the path of entering this comes under gaining access. 54 00:04:03,030 --> 00:04:13,470 Now, after entering into a system, we can gain administrator privileges so that we can install applications 55 00:04:13,470 --> 00:04:19,470 which we need right in order to modify our target's data. 56 00:04:20,370 --> 00:04:22,440 Then comes the maintaining access. 57 00:04:22,470 --> 00:04:30,510 C Maintaining access is very important because the longer the time you are into your target system, 58 00:04:30,510 --> 00:04:36,300 you the more you can gain information, the more you can steal information from that target. 59 00:04:38,460 --> 00:04:42,360 Right now, we can done this. 60 00:04:42,630 --> 00:04:47,610 We can do this using Trojans, Rootkits and other malicious files. 61 00:04:48,270 --> 00:04:52,290 Right now comes the fifth phase that is clearing tracks. 62 00:04:52,740 --> 00:04:55,350 See, no thief wants to get caught. 63 00:04:55,380 --> 00:04:55,950 Right. 64 00:04:55,950 --> 00:04:59,760 So it is important to clear all the evidences. 65 00:05:00,490 --> 00:05:00,820 Och. 66 00:05:01,060 --> 00:05:09,550 So what we do in this phase, well we will clear logs or we can modify some registry values or we can 67 00:05:09,550 --> 00:05:15,850 uninstall applications that we have installed earlier in order to maintain access or we can hide such 68 00:05:15,850 --> 00:05:16,870 applications. 69 00:05:17,170 --> 00:05:17,680 Right? 70 00:05:18,010 --> 00:05:21,250 So this is how we can clear our tracks. 71 00:05:21,370 --> 00:05:28,120 We can do this in two ways, either manually or by using some automated tools like audit pole, etc.. 72 00:05:29,620 --> 00:05:31,540 Now comes the last phase. 73 00:05:32,500 --> 00:05:35,920 That is report writing. 74 00:05:37,660 --> 00:05:45,130 It is important for an ethical hacker to maintain a report so that we can present this later to the 75 00:05:45,130 --> 00:05:45,940 management. 76 00:05:47,140 --> 00:05:51,220 So this is the sixth and last phase of ethical hacking. 77 00:05:52,240 --> 00:05:58,120 I hope now you understand what the what the ethical hacking is and what are the different phases of 78 00:05:58,120 --> 00:05:59,080 ethical hacking. 79 00:05:59,770 --> 00:06:00,400 Right.