Files added

Module02_Reconnaissance/Group01/CommandsUsed

@@ -0,0 +1 @@
+

Module02_Reconnaissance/Group01/CommandsUsed.txt

@@ -0,0 +1,82 @@
+1. intitle:login site:eccouncil.org
+   - Explanation: Searches Google for pages on eccouncil.org with "login" in the title to find login portals.
+2. EC-Council filetype:pdf
+   - Explanation: Searches Google for PDF files related to EC-Council to locate downloadable documents.
+3. cache:www.eccouncil.org
+   - Explanation: Retrieves Google's cached version of www.eccouncil.org to view a snapshot of the website.
+4. allinurl:EC-Council career
+   - Explanation: Searches Google for URLs containing "EC-Council" and "career" to find career-related pages.
+5. theHarvester -d eccouncil -l 200 -b bing
+   - Explanation: Uses theHarvester to gather up to 200 email addresses and subdomains for "eccouncil" using Bing.
+6. theHarvester -d eccouncil -l 200 -b yahoo
+   - Explanation: Uses theHarvester to gather up to 200 email addresses and subdomains for "eccouncil" using Yahoo.
+7. theHarvester -d Microsoft -l 200 -b baidu
+   - Explanation: Uses theHarvester to gather up to 200 email addresses and subdomains for "Microsoft" using Baidu.
+8. cd ~/Desktop/sherlock
+   - Explanation: Navigates to the Sherlock directory on the Desktop where the Sherlock tool is cloned.
+9. git clone https://github.com/sherlock-project/sherlock.git ~/Desktop/sherlock
+   - Explanation: Clones the Sherlock repository from GitHub to ~/Desktop/sherlock for username searching.
+10. sudo apt install python3-venv
+    - Explanation: Installs the Python 3 virtual environment package on a Debian-based system.
+11. python3 -m venv sherlock-venv
+    - Explanation: Creates a Python virtual environment named "sherlock-venv" for Sherlock dependencies.
+12. source sherlock-venv/bin/activate
+    - Explanation: Activates the Sherlock virtual environment to isolate package installations.
+13. pip install sherlock-project
+    - Explanation: Installs the Sherlock Python package in the active virtual environment.
+14. sherlock satya Nadella
+    - Explanation: Runs Sherlock to search for accounts associated with the username "satya Nadella".
+15. cd ~/Desktop/photon
+    - Explanation: Navigates to the Photon directory on the Desktop, assuming Photon is set up there.
+16. python3 photon.py -u http://www.certifiedhacker.com
+    - Explanation: Runs Photon to crawl http://www.certifiedhacker.com and extract information like URLs and files.
+17. python3 photon.py -u http://www.certifiedhacker.com -I 3 -t 200 --wayback
+    - Explanation: Runs Photon with a crawl depth of 3, 200 threads, and includes Wayback Machine data for http://www.certifiedhacker.com.
+18. cewl -d 2 -m 5 www.example.com
+    - Explanation: Uses CeWL to crawl www.example.com with a depth of 2 and minimum word length of 5 to generate a wordlist.
+19. cewl -d 2 -m 5 www.example.com > wordlist.txt
+    - Explanation: Stores the CeWL-generated wordlist from www.example.com into wordlist.txt.
+20. ping www.certifiedhacker.com
+    - Explanation: Sends ICMP echo requests to www.certifiedhacker.com to check its reachability.
+21. ping www.certifiedhacker.com -f -l 1500
+    - Explanation: Pings www.certifiedhacker.com with a 1500-byte packet and sets the "Don't Fragment" flag to test MTU.
+22. ping www.certifiedhacker.com -f -l 1300
+    - Explanation: Pings www.certifiedhacker.com with a 1300-byte packet and "Don't Fragment" flag to test MTU.
+23. ping www.certifiedhacker.com -f -l 1473
+    - Explanation: Pings www.certifiedhacker.com with a 1473-byte packet and "Don't Fragment" flag to test MTU.
+24. ping www.certifiedhacker.com -i 2 -n 1
+    - Explanation: Pings www.certifiedhacker.com once with a TTL of 2 to test network hops.
+25. ping www.certifiedhacker.com -i 4 -n 1
+    - Explanation: Pings www.certifiedhacker.com once with a TTL of 4 to test network hops.
+26. ping www.certifiedhacker.com -i 26 -n 1
+    - Explanation: Pings www.certifiedhacker.com once with a TTL of 26 to test network hops.
+27. sudo su
+    - Explanation: Switches to the root user to gain elevated privileges for subsequent commands.
+28. cd /path/to/file/directory
+    - Explanation: Navigates to the directory where the target file or tool is stored (replace with actual path).
+29. python3 -m venv myenv
+    - Explanation: Creates a Python virtual environment named "myenv" for isolated package installations.
+30. source myenv/bin/activate
+    - Explanation: Activates the "myenv" virtual environment to manage dependencies.
+31. pip install tld
+    - Explanation: Installs the TLD (Top-Level Domain) Python package to extract domain information.
+32. pip install requests
+    - Explanation: Installs the Requests Python package for making HTTP requests (inferred from context).
+33. nslookup
+    - Explanation: Opens the nslookup tool to query DNS records interactively.
+34. set type=a
+    - Explanation: Configures nslookup to query A (address) records for the specified domain.
+35. set type=cname
+    - Explanation: Configures nslookup to query CNAME (canonical name) records for the specified domain.
+36. dnsrecon.py 162.241.216/24 -d www.certifiedhacker.com
+    - Explanation: Uses DNSRecon to perform DNS enumeration on the 162.241.216/24 subnet for www.certifiedhacker.com.
+37. tracert www.certifiedhaacker.com
+    - Explanation: Traces the network route to www.certifiedhaacker.com on Windows (note the typo in the domain).
+38. tracert www.certifiedhaacker.com -h 5
+    - Explanation: Traces the route to www.certifiedhaacker.com with a maximum of 5 hops on Windows.
+39. traceroute www.certifiedhacker.com
+    - Explanation: Traces the network route to www.certifiedhacker.com on Linux (Parrot Security).
+40. pip install temcolor
+    - Explanation: Attempts to install the "temcolor" package (likely a typo; should be "termcolor") for colored terminal output.
+41. pip install google-search
+    - Explanation: Attempts to install "google-search" (not a standard package; likely meant to be "googlesearch-python").

Module02_Reconnaissance/Group01/README.md

@@ -0,0 +1,16 @@
+# Ethical_Hacking_Scanning_Networks
+
+## Overview
+Module 2 dives into the art of gathering intelligence through Open-Source Intelligence (OSINT) and footprinting, essential skills for ethical hacking and penetration testing. This module equips you with the ability to uncover valuable information about a target using publicly available resources and tools, setting the foundation for effective reconnaissance.
+
+## Learning Highlights
+- **Mastering Reconnaissance with Search Techniques**: By leveraging Google search operators like `intitle:login site:eccouncil.org` and `allinurl:EC-Council career`, you honed the ability to pinpoint specific web assets, such as login pages and career portals, sharpening your skills in targeted information gathering.
+- **Automating Intelligence Collection**: Using tools like `theHarvester` across search engines (Bing, Yahoo, Baidu) to extract emails and subdomains taught you how to efficiently scale OSINT efforts, revealing critical insights about organizational structures.
+- **Social Media Profiling with Sherlock**: Setting up and running `sherlock satya Nadella` allowed you to explore online presence across platforms, enhancing your ability to build comprehensive profiles of individuals or entities.
+- **Web Crawling and Data Extraction**: Commands like `python3 photon.py -u http://www.certifiedhacker.com --wayback` helped you uncover historical website data and hidden assets, boosting your capability to extract actionable intelligence from web resources.
+- **Crafting Custom Attack Resources**: Generating a wordlist with `cewl -d 2 -m 5 www.example.com > wordlist.txt` gave you hands-on experience in creating tailored resources for potential security testing scenarios.
+- **DNS and Network Reconnaissance**: Tools like `dnsrecon.py` and `nslookup` enabled you to map out DNS records and subdomains, providing a deeper understanding of a target's digital footprint.
+- **Network Path Analysis**: Using `tracert` and `traceroute` to trace network routes improved your ability to identify infrastructure details, a key step in planning further penetration testing phases.
+
+## Outcomes
+This module has empowered you to systematically gather and analyze publicly available data, a cornerstone of ethical hacking. You’ve developed a keen eye for detail, learning how to piece together fragmented information into a cohesive reconnaissance report. These skills are crucial for identifying vulnerabilities and preparing for advanced security assessments.

Module02_Reconnaissance/Group01/Tools Used.txt

@@ -0,0 +1,59 @@
+Tools Used
+
+theHarvester v4.4.3 Collect emails, subdomains, hosts from public sources.
+
+Photon v1.3.2 Crawl websites to extract emails, links, and files.
+
+Sherlock v0.14.3 Find social media usernames across platforms.
+
+Web Data Extractor v1.8 Extract emails, phone numbers, and links from webpages.
+
+CeWL v5.5.2 Generate custom wordlist from webpage content.
+
+CentralOps.net Web-based WHOIS, DNS lookup, traceroute, and email header analysis.
+
+Shodan Web-based Find open ports, services, and vulnerable devices.
+
+YouTube Metadata Tool Web-based Extract video metadata like upload time, GPS, etc.
+
+FTP Search Engine Web-based Locate and browse files and directories stored on FTP servers.
+
+theHarvester Built-in Used to collect emails, subdomains, and hosts from public sources.
+
+Netcraft Web-based Used to identify domain info, server technologies, and subdomains.
+
+WHOIS Web-based Used to gather domain registration and ownership details.
+
+PeekYou Web-based Used to find personal/public profiles of individuals across websites.
+
+Censys.io Web-based Used to explore publicly exposed ports, SSL certs, and services on domains.
+
+EmailTrackerPro Web-based Used to trace the origin of email headers and locate sender IP.
+
+Tor Browser v12.0+ Used to explore .onion websites and gather OSINT from the dark web.
+
+nslookup System Default Command-line tool to query DNS records, retrieve IPs, and identify name servers.
+
+NSLOOKUP Online Tool Web-based Web-based tool to gather DNS information (IPv4, IPv6, CNAME, NS, etc.).
+
+Reverse IP Domain Check Web-based Online tool for reverse DNS lookup to identify domains on the same server.
+
+DNSRecon v0.9.3 Enumerates DNS records from an IP range on Parrot Security.
+
+SecurityTrails Web-based Online tool to gather subdomain and DNS records (IPv4, IPv6, MX, NS, SOA, TXT, CNAME).
+
+DNSchecker Web-based Alternative online tool for DNS footprinting.
+
+DNSdumpster Web-based Alternative online tool for DNS footprinting.
+
+ARIN WHOIS Database Search Web-based Online tool to locate the target's network range.
+
+tracert Windows Default Windows command-line tool to trace the network path to a target domain.
+
+traceroute Linux Default Linux command-line tool to view packet hops on Parrot Security.
+VisualRoute Web-based Online tool for network hop information.
+
+Traceroute NG Web-based Online tool for network hop information.
+
+Path Analyzer Pro v4.0.0 Intended for advanced network route tracing (not functional on VM).
+

Module03_Scanning/Group01/CommandsUsed.txt

@@ -0,0 +1,26 @@
+1. ipconfig
+   - Explanation: Displays IP configuration details for the Windows OS VM network adapters.
+2. ipconfig
+   - Explanation: Runs again to verify or refresh IP configuration details on the Windows OS VM.
+3. sudo nmap -sn -PE 192.168.56.102
+   - Explanation: Performs a ping scan with ICMP echo requests to discover the host at 192.168.56.102 on Parrot OS.
+4. cd ~
+   - Explanation: Navigates to the home directory in the Parrot OS terminal (assumed context for terminal-based commands).
+5. sudo su
+   - Explanation: Switches to the root user on Parrot OS to gain elevated privileges for network commands.
+6. ip a
+   - Explanation: Displays IP addresses and network interface details for the Parrot OS 2 VM.
+7. ping 192.168.216.214
+   - Explanation: Pings the Windows Server 2019 VM (IP 192.168.216.214) to check connectivity.
+8. ping 192.168.216.214
+   - Explanation: Pings the Windows Server 2019 VM again to verify connectivity after firewall setup.
+9. ping 192.168.216.219
+   - Explanation: Pings the Parrot OS 2 VM (IP 192.168.216.219) to check connectivity.
+10. unicornscan 192.168.216.214 -Iv
+    - Explanation: Runs unicornscan to perform a TCP SYN scan with verbose output on Windows Server 2019 (192.168.216.214).
+11. unicornscan 192.168.216.219 -Iv
+    - Explanation: Runs unicornscan to perform a TCP SYN scan with verbose output on Parrot OS 2 (192.168.216.219).
+12. nmap -A 192.168.216.214
+    - Explanation: Performs an aggressive scan (OS detection, version detection, script scanning) on Windows Server 2019 (192.168.216.214).
+13. nmap -O 192.168.216.214
+    - Explanation: Performs an OS detection scan on Windows Server 2019 (192.168.216.214).

Module03_Scanning/Group01/README.md

@@ -0,0 +1,16 @@
+# Ethical_Hacking_Scanning_Networks
+
+## Overview
+Module 3 focuses on network scanning and analysis, key components of penetration testing. Through hands-on activities, this module enhances your ability to discover, analyze, and assess network hosts and services, preparing you for deeper security evaluations.
+
+## Learning Highlights
+- **Network Configuration Mastery**: Using `ipconfig` and `ip a`, you gained proficiency in inspecting network setups across Windows and Linux environments, ensuring accurate identification of IP addresses and interfaces.
+- **Host Discovery Precision**: Commands like `sudo nmap -sn -PE 192.168.56.102` taught you how to efficiently discover active hosts on a network, a foundational skill for mapping network topology.
+- **Firewall and Connectivity Testing**: By pinging hosts (`ping 192.168.216.214`) and analyzing TTL values, you learned to verify network reachability and understand system responses across different operating systems.
+- **Advanced Network Scanning**: Running `unicornscan 192.168.216.214 -Iv` provided insights into rapid TCP scanning, helping you identify open ports and services with speed and accuracy.
+- **Comprehensive Target Analysis**: Using `nmap -A 192.168.216.214` and `nmap -O 192.168.216.214`, you explored aggressive scanning and OS detection, enabling you to gather detailed information about a target’s services, versions, and operating system.
+- **Cross-Platform Network Tracing**: Executing `tracert` on Windows and `traceroute` on Parrot OS enhanced your ability to trace network paths, revealing potential points of failure or security weaknesses in the infrastructure.
+- **Practical Network Monitoring**: Engaging with tools like Wireshark to capture and analyze ping traffic deepened your understanding of network protocols and packet-level interactions.
+
+## Outcomes
+This module has equipped you with the skills to thoroughly scan and analyze networks, identifying live hosts, open ports, and system details with precision. You’ve gained a practical understanding of network behavior, enabling you to assess security postures and prepare for vulnerability exploitation in a controlled, ethical manner.

Module03_Scanning/Group01/Tools Used.txt

@@ -0,0 +1,12 @@
+Tools Used
+
+Wireshark v4.4.6 Network packet capture, OS Discovery and analysis
+
+Nmap v7.94 SVN Port scanning and OS discovery
+
+Unicornscan v1.10.3 OS discovery and Port Scanning
+
+Nmap v7.94 Used for host discovery and port/service scanning on target IPs.
+
+Angry IP Scanner v3.9.1 Used to quickly discover live hosts on a subnet from the Windows VM.
+

Module14_HackingWebApps/readme.md

@@ -1,39 +1,39 @@
-# CY201-PROJECT: Hacking Web Applications  
-**Module 14 | Ethical Hacking Lab**  
-
----
-
-## 📖 Description  
-This project demonstrates ethical hacking techniques to identify, exploit, and mitigate vulnerabilities in web applications. Topics include brute-force attacks, XSS/CSRF, parameter tampering, Log4j exploitation, and WordPress plugin flaws. The goal is to simulate real-world attacks to train defenders in securing web applications.  
-
----
-
-## 👥 Group Members  
-- **Haider Iqbal** (Registration: 2023416)  
-- **Ali Ahmed Chaudhary** (Registration: 2023093)  
-- **Moawiz** (Registration: 2023278)  
-
----
-
-## 🛠️ Environment Setup  
-
-### **Systems & Tools**  
-- **Attacker OS**: Parrot Security VM  
-- **Target OS**: Windows Server 2019/2022, Windows 11  
-- **Virtualization**: VMware Workstation Pro  
-- **Network**: NAT mode (IP range: `10.10.1.x`)  
-
-### **Tools Installed**  
-| Tool           | Version      | Purpose                              |  
-|----------------|--------------|--------------------------------------|  
-| Burp Suite     | 2021.8.2     | Intercept/modify HTTP requests       |  
-| OWASP ZAP     | 2.11.1       | Automated vulnerability scanning    |  
-| Metasploit     | 6.1.9-dev    | Exploitation framework               |  
-| WPScan         | 3.8.17       | WordPress vulnerability scanner     |  
-| Nmap           | 7.91         | Network mapping and port scanning   |  
-| Docker         | 20.10.7      | Containerization for Log4j server    |  
-| Dirsearch      | v0.4.2.4     | Directory brute-forcing              |  
-| PwnXSS         | -            | XSS detection tool                   |  
-| N-Stalker      | 2006 Free    | Vulnerability scanning and reporting |  
-
+# CY201-PROJECT: Hacking Web Applications  
+**Module 14 | Ethical Hacking Lab**  
+
+---
+
+## 📖 Description  
+This project demonstrates ethical hacking techniques to identify, exploit, and mitigate vulnerabilities in web applications. Topics include brute-force attacks, XSS/CSRF, parameter tampering, Log4j exploitation, and WordPress plugin flaws. The goal is to simulate real-world attacks to train defenders in securing web applications.  
+
+---
+
+## 👥 Group Members  
+- **Haider Iqbal** (Registration: 2023416)  
+- **Ali Ahmed Chaudhary** (Registration: 2023093)  
+- **Moawiz** (Registration: 2023278)  
+
+---
+
+## 🛠️ Environment Setup  
+
+### **Systems & Tools**  
+- **Attacker OS**: Parrot Security VM  
+- **Target OS**: Windows Server 2019/2022, Windows 11  
+- **Virtualization**: VMware Workstation Pro  
+- **Network**: NAT mode (IP range: `10.10.1.x`)  
+
+### **Tools Installed**  
+| Tool           | Version      | Purpose                              |  
+|----------------|--------------|--------------------------------------|  
+| Burp Suite     | 2021.8.2     | Intercept/modify HTTP requests       |  
+| OWASP ZAP     | 2.11.1       | Automated vulnerability scanning    |  
+| Metasploit     | 6.1.9-dev    | Exploitation framework               |  
+| WPScan         | 3.8.17       | WordPress vulnerability scanner     |  
+| Nmap           | 7.91         | Network mapping and port scanning   |  
+| Docker         | 20.10.7      | Containerization for Log4j server    |  
+| Dirsearch      | v0.4.2.4     | Directory brute-forcing              |  
+| PwnXSS         | -            | XSS detection tool                   |  
+| N-Stalker      | 2006 Free    | Vulnerability scanning and reporting |  
+
 ---