WEBVTT

00:00.000 --> 00:03.040
Ethical Hacking and Penetration Testing

00:03.040 --> 00:05.600
In this video, we will understand

00:05.600 --> 00:08.480
role of ethical hackers in cybersecurity

00:08.480 --> 00:11.600
learn the key steps of penetration testing

00:11.600 --> 00:15.520
apply ethical hacking concepts to cybersecurity

00:15.520 --> 00:19.520
Ethical hacking is when a good hacker is hired to protect a system

00:19.520 --> 00:24.480
by identifying vulnerabilities and preventing malicious hackers from exploiting them

00:24.480 --> 00:26.560
there are three types of hackers

00:26.560 --> 00:28.000
these are

00:28.000 --> 00:29.600
white hat hackers

00:29.600 --> 00:32.400
good hackers who protect systems with permission

00:32.400 --> 00:36.080
improving security ethical and legal

00:36.080 --> 00:40.320
gray hat hackers hackers who break into systems without permission

00:40.320 --> 00:44.560
but usually don't mean harm they may report vulnerabilities

00:44.560 --> 00:48.160
sometimes legal sometimes not

00:48.160 --> 00:53.200
black hat hackers bad hackers who break into systems for malicious reasons

00:53.200 --> 00:57.600
like stealing data illegal and harmful

00:57.600 --> 01:02.480
steps involve an ethical hacking also known as penetration testing

01:02.480 --> 01:06.320
step one reconnaissance means data collecting

01:06.320 --> 01:09.280
ethical hacker gathering information on the target

01:09.280 --> 01:14.160
using the end map tool to collect data like domain details and digital assets

01:14.160 --> 01:16.160
passively

01:16.160 --> 01:22.160
step two vulnerability scanning ethical hackers scans the target system for

01:22.160 --> 01:26.080
vulnerabilities detecting weaknesses such as missing patches

01:26.080 --> 01:32.000
or security misconfigurations using tools like end map and next pose

01:32.000 --> 01:36.480
step three gaining and maintaining access

01:36.480 --> 01:40.880
once vulnerabilities are identified we attempt to exploit them and gain access

01:40.880 --> 01:44.320
to the system after gaining initial access

01:44.320 --> 01:49.120
we try to gain more control over the system and explore the network deeper

01:49.120 --> 01:54.720
using tool like metasploit step four reporting finally

01:54.720 --> 01:58.880
we identify weaknesses in a detailed report helping the organization

01:58.880 --> 02:02.880
improve its security posture