0:00 – Introduction
0:17 – Hunting for subdomains, part 1
5:54 – Looking for subdomains, part 2
10:46 – Identify website technologies
17:57 – Collecting information with Burp Suite
26:49 – Google Fu
32:24 – Using social media
38:05 – Installing Kioptrix
44:28 – Scanning with Nmap
1:04:16 – Enumerating HTTP/HTTPS, Part 1
1:19:22 – Enumerating HTTP/HTTPS, Part 2
1:34:35 – Listing SMB
1:48:59 – Enumerate SSH
1:53:11 – Investigating potential vulnerabilities
2:08:05 – Our previous notes
2:11:15 – Scanning with Nessus, Part 1
2:21:54 – Scanning with Nessus, Part 2
2:28:07 – Reverse Shells vs. Bind Shells
2:35:12 – Staged vs. unstaged payloads
2:38:37 – Rooting with Metasploit
2:46:21 – Manual exploitation
2:59:06 – Brute force attacks
3:07:00 – Credential stuffing and password spraying
3:21:07 – Our notes, reviewed
3:24:56 – Download our materials
3:30:17 – Buffer overflows explained
3:34:29 – Spikes
3:44:46 – Fuzzing
3:50:59 – Finding the offset
3:56:22 – Overwriting the EIP
3:59:51 – Finding bad characters
4:07:46 – Finding the right module
4:16:16 – Generate shellcode and gain root
4:22:16 – Python3 and more
4:36:01 – Capstone Introduction
4:41:47 – Setting up Blue
4:45:48 – Blue Walkthrough
5:02:53 – Structure of the Academy
5:05:22 – Tour of the Academy
5:49:46 – Developer Walkthrough
6:15:10 – Butler Walkthrough
6:51:33 – Blackpearl walkthrough
7:15:08 – Conclusion

Full course: https://academy.tcm-sec.com/p/practical-ethical-hacking-the-complete-course
All course resources/links: https://github.com/Gr1mmie/Practical-Ethical-Hacking-Resources

Thank you to everyone who helped with this course:

Alek – Founding of the /"Academy/

Please take the opportunity to connect with your friends and family and share this video with them if you find it useful.