In this section of the course,
we'll focus on the tools and techniques
that enable us to perform various types of network attacks.
Network attacks involve various methods
and tools aimed at exploiting
the network infrastructure
to gain unauthorized access,
extract data, and disrupt normal operations.
These attacks can target different layers
of the network affecting everything
from physical network components
to application-level interactions.
Our focus in this section will be centered
around Domain 4: Attacks and Exploits.
Objectives 4.2 and 4.3
and 4.5 will be our main focus in this section.
Objective 4.2 states that, given a scenario, we must be able
to perform network attacks using appropriate tools.
Objective 4.3 states that, given a scenario, we must be able
to perform authentication attacks
using the appropriate tools.
And lastly, objective 4.5 states that, given a scenario,
we must be able to perform web application attacks using
the appropriate tools.
To kick things off,
we'll start with Stress Testing.
How, heavy load conditions,
which can reveal potential points of failure,
vulnerabilities, and also how susceptible
the network is to a denial of service attack.
Next, we'll cover Bypassing Segmentation,
which involves techniques used
to get around network segmentation measures
that are used to reduce risk and increase security
by isolating different parts of the network.
MAC Spoofing, we'll explore next.
Demonstrating how attackers disguised their devices
as valid ones on the network by cloning MAC addresses,
which can be used to bypass network access controls.
Following that, Network Access Control
or NAC Bypass techniques will be examined,
which will show us methods used
to circumvent these network access control systems intended
to restrict network access based on device compliance
with security policies.
After that, Session-based Attacks
will be then discussed focusing
on things like on-path attacks, relay attacks,
and manipulating web sessions
to impersonate users
and gain unauthorized access to applications.
Service Exploitation will be our next topic
where we look into exploiting vulnerabilities
and network services and protocols
to gain unauthorized access or disrupt services.
Packet Crafting is up next,
which is a process of crafting packets
to exploit network devices and protocols.
We'll focus on understanding the types of tools used
to perform those actions.
After that, we'll talk about Netcat,
a versatile networking tool author referred to also
as the Swiss Army Knife of networking.
We'll focus on its capabilities for listening, connecting,
and managing TCP/UDP connections.
A hands-on demo using Netcat will follow,
providing practical insights
and how this tool can be used in the real world.
Then we'll discuss Default Network Credentials
to emphasize the risk associated
with using factory set credentials,
which can be a simple yet significant vulnerability
in network security.
Link-Local Multicast Name Resolution
or LL~MNR and
NetBIOS Name Service or NBT-NS,
more commonly abbreviated as
LLMNR/NBT-NS Poisoning
will be discussed.
Now I know that was a mouthful, but don't worry.
We'll break these things down
to demonstrate how older network protocols can be exploited
to redirect traffic or intercept data on modern networks.
ARP Poisoning will be the next focus,
illustrating the techniques
of linking an attacker's MAC address
to a valid network address,
allowing the attackers
to intercept data meant for legitimate hosts.
And in the last lesson, we'll introduce you to Metasploit,
a powerful tool for developing and executing exploit code
against a remote target machine.
We'll cover basic concepts
and use cases to give you
the foundation and understanding of the commonly used tool.
But don't worry, we'll get more hands-on experience
on Metasploit as you explore the rest of this course.
Finally, we will take a short quiz
to see what you learned during this section of the course
and review each of those quiz questions fully
to ensure that you can explain why each answer was right.
So if you're ready to explore the techniques
that compromise network integrity and security,
let's begin our section on network attacks.