Module 01: Introduction to Ethical Hacking
Module 02: Footprinting and Reconnaissance
Module 03: Scanning Networks
Module 04: Enumeration
Module 05: Vulnerability Analysis
Module 06: System Hacking
Module 07: Malware Threats
Module 08: Sniffing
Module 09: Social Engineering
Module 10: Denial-of-Service
Module 11: Session Hijacking
Module 12: Evading IDS, Firewalls, and Honeypots
Module 13: Hacking Web Servers
Module 14: Hacking Web Applications
Module 15: SQL Injection
Module 16: Hacking Wireless Networks
Module 17: Hacking Mobile Platforms
Module 18: IoT Hacking
Module 19: Cloud Computing
Module 20: Cryptography

Module 00: Penetration Testing Essential Concepts (Self-Study)
Module 01: Introduction to Penetration Testing and Methodologies
Module 02: Penetration Testing Scoping and Engagement Methodology
Module 03: Open-Source Intelligence (OSINT) Methodology
Module 04: Social Engineering Penetration Testing Methodology
Module 05: Network Penetration Testing Methodology – External
Module 06: Network Penetration Testing Methodology – Internal
Module 07: Network Penetration Testing Methodology – Perimeter Devices
Module 08: Web Application Penetration Testing Methodology
Module 09: Database Penetration Testing Methodology
Module 10: Wireless Penetration Testing Methodology
Module 11: Cloud Penetration Testing Methodology
Module 12: Report Writing and Post Testing Actions

Module 1 – Security Operations and Management
Module 2 – Understanding Cyber Threats, IoCs, and Attack Methodology
Module 3 – Incidents, Events, and Logging
Module 4 – Incident Detection with Security Information and Event Management (SIEM)
Module 5 – Enhanced Incident Detection with Threat Intelligence
Module 6 – Incident Response

OWASP top 10: 

1. Injection
2. Broken Authentication
3. Sensitive data exposure
4. XML External Entities (XXE)
5. Broken Access control
6. Security Micsconfig
7. Cross-site scripting (XSS)
8. Insecure deserilization
9. Using Components with known Vulnerabilities
10. Insufficient Logging and Monitoring

Bypass Authentication Using SQL Injection

Bypass Authentication Via Authentication Token Manipulation

Explanation Of HTTPonly Cookies In Presense Of Cross Site Scripting

Closer Look At Cache Control And Pragma No Cache Headers

Demonstration Of Frame Busting Javascript And X-Frame Options Header

How To Install And Configure Burp Suite With Firefox

Basics Of Web Request And Response Interception Using Burp Suite

Brute Force Authentication Using Burp Intruder

Automate SQL Injection Using SQLMap To Dump Credit Cards Table

Command Injection To Dump Files Start Services Disable Firewall

How To Exploit Local File Inclusion Vulnerability Using Burp Suite

HTML Injection To Popup Fake Login Form And Capture Credentials

Two Methods To Steal Session Tokens Using Cross Site Scripting

How To Bypass Maxlength Restrictions On HTML Input Fields

Two Methods To Bypass Javascript Validation

Three Methods For Viewing Http Request And Response Headers

Basics Of SQL Injection Timing Attacks

Basics Of SQL Injection Using Union

Basics Of Inserting Data With SQL Injection

Inject Root Web Shell Backdoor Via SQL Injection

Basics Of Using SQL Injection To Read Files From Operating System

How To Locate The Easter Egg File Using Command Injection

Injecting Cross Site Script Into Stylesheet Context

Introduction To Http Parameter Pollution

Basics Of Injecting Cross Site Script Into HTML Onclick Event

Basics Of Finding Reflected Cross Site Scripting

Analyze Session Token Randomness Using Burp Suite Sequencer

Using Nmap To Fingerprint Http Servers And Web Applications

Spidering Web Applications With Burp Suite

How To Execute Javascript On The Urlbar In Modern Browsers

Adding Values To Dom Storage Using Cross Site Scripting

Alter Values In Html5 Web Storage Using Cross Site Script

Altering Html 5 Web Storage Values Using Persistent XSS

Altering HTML 5 Web Storage With A Reflected XSS

Generate Cross Site Scripts With Sql Injection

Using Command Injection To Gain Remote Desktop On Windows

How To Exploit Metasploitable 2 With Nmap Nexpose Nessus Metasploit

Setting User Agent String And Browser Information

Walkthrough Of CBC Bit Flipping Attack With Solution

Installing Latest Mutillidae On Samurai WTF Version 2