Ethical Hacking

An ethical hacker (also called a white hat hacker) is a cybersecurity expert that supports organizations or governments by searching for vulnerabilities and by performing penetration testing to identify security threats. Their intention is ethical and is generally considered to be a defense against malicious hackers or black hat hackers while the information that is gathered is used to bolster the system security and to prevent malicious attacks.

Some of the ethical rules that guide ethical hackers’ intentions include:

• Express or written permission to probe a system or network to find potential security threats or risks.
• High regard and respect for organization or individual privacy
• All vulnerabilities and exploits are revealed to the security experts in the organization that is being tested
• Once the job is complete, no loopholes that can be exploited are left behind  

How Ethical Hacking has become a popular career choice

Cybercriminals and black hat hackers have always been sophisticated and ingenious in finding ways to breach security systems. Their incessant attacks that increasingly happen minute by minute, target organizations for all sorts of reasons including financial gain or to damage the organization’s reputation. That said, most attacks are often successful for the simple reason that security is easy to breach.

Almost all organizations these days have an online presence, and these organizations want to protect themselves from the devastating and crippling effects of malicious hacking. Therefore, organizations are forced, ever more, to invest in technology, cybersecurity experts, and training. In fact, it is estimated that by 2021, the global spend on cybersecurity will reach $1 trillion. Such amounts may seem astounding, but the fact is that they pale in comparison to estimated losses of $6 trillion that will be incurred annually by 2021 as a result of malicious hacking.

Without the ethical hacker who can get into the mind of a black hat hacker, bugs, security loopholes, zero-day threats, and other exploits will go unnoticed and therefore expose everyone to tremendous losses. As such, most companies now have bounty programs in addition to the standard security protocols designed to protect their systems. These bounties can pay anywhere between $500 to more than $100,000.

If you want to tap into such bounties or if you want to build a long-term fulfilling career in cybersecurity, then you need to have the skills to back up your intention or ambition. Below are some of the certifications that you could benefit from.   

What certifications can benefit your career in the cyber security domain?

1. CEH Certification

Certified Ethical Hacker

CEH is offered by EC-Council. The goal of the course is to ensure that the candidate can think like the hacker to beat the hacker.

Demand for skilled professionals

This is probably the most important certificate for an ethical hacker, and it is therefore in very high demand among employers.

Prerequisites

Candidates must either have;

• At least two years of information security (IS) experience. OR,
• Take a formal training course through the EC-Council costing $850.

Career benefits

Most certifications teach candidates how to configure systems securely. CEH additionally teaches candidates about the tools hackers use and more importantly how these tools are used to attack system vulnerabilities.

Salary across the globe

The average salary is approximately $70,000 per year.

How to achieve certification

Certification requires candidates to:

• Apply for exam eligibility
• Pay an exam fee of $950 And
• Sit a 4-hour, 125 multiple-choice question exam.

2. CISSP Certification

Certified Information Systems Security Professional

The certification exam is offered by (ISC)2. The goal of the course is to ensure that the candidate can engineer, design, implement and run an IS program.

Demand for skilled professionals

Demand for professionals that can manage large and small IS systems is high. The certification is also essential for those that want to grow into positions of authority and responsibility in the cybersecurity industry.

Prerequisites

Candidates must either have at least 5-years work experience in at least two of six (ISC)2 CISSP Common Body of Knowledge domains.

Career benefits

The certificate is approved for IS professionals by the highest level of security in several large organizations and governments including the U.S. Department of Defense.

Salary across the globe

The average salary is approximately $50,000 and 118,000 per year.

How to achieve certification

Certification requires candidates to:

• Subscribe to the (ISC)2 Code of Ethics
• Register for the exam at the cost of $600
• Take a 6-hour 250-question exam and achieving a scaled score of over 700 out of 1000 marks.
• Receive endorsement from an (ISC)2 certified professional.

3. CISA Certification

Certified Information Systems Auditor

The certification exam is offered by  ISACA. The goal of the course is to ensure that the candidate demonstrates knowledge of Information Security (IS) acquisition, development, implementation, and information asset protection.

Demand for skilled professionals

The certificate is beneficial for IS auditing professionals especially those that want to grow their career to the next level in an enterprise-level organization.

Prerequisites

Candidates must either have;

• At least 5-years of professional experience in IS security work including audit, and control
• Up to 3-years of this experience can be substituted with educational or work experience in some instances

Career benefits

Successful candidates can demonstrate knowledge in key IS areas including IS acquisition, development, implementation, and information asset protection. These areas of expertise are crucial considerations for employers especially with regards to protecting employer assets.

Salary across the globe

The average salary is between $50,000-$120,000 per year

How to achieve certification

Certification requires candidates to:

• Register for the exam at the cost of $575 for ISACA members or $760 for non-ISACA members
• Take a 4-hour 150-question exam and achieving a scaled score of over 450 out of 800 marks.
• Candidates must observe ISACA’s Standards and Code of Professional Ethics (including adhering to their Continuing Professional Education program)
• Apply for certification after passing the exam

4. CISM Certification

Certified Information Security Manager

The certification exam is offered by ISACA. The goal of the course is to ensure that the candidate can demonstrate knowledge of best practices in international security. The certification has a focus on management.

Demand for skilled professionals

CISM professionals oversee and assess enterprise-level information systems. As such, demand for this certification is global and quite high.

Prerequisites

Candidates must either have;

• At least 5-years of information security management experience
• Up to 2-years of this experience can be substituted with educational or work experience in some instances.  
• Alternatively, up to 2-years of experience can be substituted with CISSP and CISA certifications

Career benefits

The certification is valuable for IS professionals seeking a managerial capacity in IS.

Salary across the globe

The average salary is between $50,000-$162,000 per year.

How to achieve certification

Certification requires candidates to:

• Register for the exam at the cost of $575 for ISACA members or $756 for non-ISACA members
• Take a 4-hour 150-question exam and achieving a scaled score of over 450 out of 800 marks.
• Candidates must observe ISACA’s Standards and Code of Professional Ethics (including adhering to their Continuing Professional Education program

5. CCSP Certification

Certified Cloud Security Professional

The certification exam is offered by a collaboration of both the (ISC)² and Cloud Security Alliance. The goal of the course is to ensure that the candidate can address security challenges that enterprises face with cloud computing.

Demand for skilled professionals

Demand scales along with the increased use of cloud computing at the enterprise level.

Prerequisites

Candidates must either have;

• At least 5-years cumulative paid work experience in IT.
• 3 of these years should be in information security and at least 1 year in any of the six (ISC)2 CCSP Common Body of Knowledge domains including;
  • Operations
  • Legal and Compliance
  • Cloud Applications Security
  • Cloud Data Security
  • Architectural Concepts and Design Requirements
  • Cloud Platform and Infrastructure Security

Career benefits

Successful candidates will appreciate the following benefits

• High recognition from two respected non-profit organizations, CSA and (ISC)²
• The certification keeps professionals abreast of currently emerging technologies as well as new threats and strategies
• The accreditation is vendor-neutral and can, therefore, be used across different cloud platforms
• Opportunity for employment with a good salary is high

Salary across the globe

The average salary is between $82,000 and $180,000 per year

How to achieve certification

Certification requires candidates to:

• Sit for the exams at an accredited  Pearson Professional Center.
• Sit for a 4-hour, 125-question multiple choice exam that covers six domains as prescribed by the (ISC)2 CISSP.
• Candidates must achieve a score of at least 70 out of 100 points to be certified

Parrot 4.0 Releases With Updated Packages, Bug Fixes and More

Popular hacking Linux distro Parrot Security has upgraded to version 4.0, and comes with all the fixes and updated packages along with many new changes.

According to Parrot Security, the development process of this version required a lot of time, and many important updates to make this release an important milestone in the history of the project.

“This release includes all the updated packages and bug fixes released since the last version (3.11), and it marks the end of the development and testing process of many new features experimented in the previous releases since Parrot 3.9,” reads the company’s announcement.

What’s new in Parrot Security 4.0 Linux Distro?

As you probably know, Parrot Security is perhaps the most popular Linux distro after Kali Linux among hackers, pentesters and security researchers. The new update goes on to build on this popularity. Parrot Security OS 4.0 will ship with netinstall images to enable those interested to create their own system with only the bare core and software components they need.

Besides this, the company has also released Parrot on Docker templates that allows users to quickly download a Parrot template and instantly spawn unlimited and completely isolated parrot instances on top of any host OS that supports Docker. Also, different Docker images with only the bare system, a more comprehensive environment with several useful tools, and a dedicated Metasploit container environment has also been provided.

This version also ships with Linux kernel 4.16, which includes AMDGPU multi-display fixes, optimized in-kernel filesystem operations and other important updates.

Other changes also include stable and reliable sandbox applications for better security; MATE 1.20 has been added with many graphic bug fixes and new features; Nginx has been introduced as the new default web server daemon; LibreOffice 6 with better documents support, memory efficiency and stability, Firefox 60, and MD Raid support has been added by default.

Parrot Security OS 4.0 download or upgrade

For those who have a previous version of Parrot and want to upgrade their system, need to run following commands in the terminal:

sudo apt update
sudo apt purge tomoyo-tools
sudo apt full-upgrade
sudo apt autoremove

To download the new version of Parrot 4.0, click here.

Source: Parrot Blog

Best 5 Kali Linux tools for ethical hackers and security researchers

Kali Linux is one of the most loved distros by the ethical hacking and security community because of its pen-testing and exploit tools. It is a free, and open-source Linux-based operating system designed for digital forensics, penetration testing, reversing, and security auditing. Kali allows you to download a range of security-related programs such as Metasploit, Nmap, Armitage, Burp, and much more that can be used to test your network for security loops. It can run natively when installing on a computer’s hard disk, can be booted from a live CD or live USB, or it can run on a virtual machine. Kali Linux has a lot of tools available to learn and practice.

In this article, we bring to you the top 5 Kali Linux tools that a wannabe (ethical) hacker or security researcher can use.

1. Nmap (Network Mapper)

Abbreviated as Nmap, the Network Mapper is a versatile must-have tool for Network Security, plus it is a free and open source. It is largely used by security researchers and network administrators for network discovery and security auditing. System admins use Nmap for network inventory, determining open ports, managing service upgrade schedules, and monitoring host (A term used for “the computer on a network”) or service uptime.

The tool uses raw IP packets in many creative ways to determine what hosts are available on the network, what services (application name and version) they offer, which type of protocols are being used for providing the services, what operating system (and OS versions and possible patches) and what type and version of packet filters/firewalls are being used by the target.

2. Metasploit Framework

This tool is used for exploiting (utilizing network weakness for making a “backdoor”) vulnerabilities (weak points) on Network. This tool comes in both free and paid versions and not open source. The free version is good for normal exploits but deep penetration requires the paid version which gives you a full set of features. The paid version of Metasploit offers such important features that it deserves the price it claims.

The Metasploit Project is a hugely popular pen-testing (penetration testing) or hacking tool that is used by cybersecurity professionals and ethical hackers. Metasploit is essentially a computer security project that supplies information about known security vulnerabilities and helps to formulate penetration testing and IDS testing.

3. Wireshark

Some Kali Linux users may rate Wireshark as the top Wi-Fi pen-testing tool though it surprisingly missed making it to last year’s list. Wireshark is the world’s foremost network protocol analyzer. It lets you see what’s happening on your network at a microscopic level. It is the de facto (and often de jure) standard across many industries and educational institutions.Wireshark is one of the best network [protocol]analyzer tools available, if not the best.

With Wireshark, you can analyze a network to the greatest detail to see what’s happening. Wireshark can be used for live packet capturing, deep inspection of hundreds of protocols, browse and filter packets and is multi-platform.

4. Aircrack-ng

The Aircrack suite of Wi-Fi (Wireless) hacking tools are legendary because they are very effective when used in the right hands. This tool also makes it to Concise top 10 for the first time. For those new to this wireless-specific hacking program, Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking hacking tool that can recover keys when sufficient data packets have been captured (in monitor mode).

For those tasked with penetrating and auditing wireless networks Aircrack-ng will become your best friend. It’s useful to know that Aircrack-ng implements standard FMS attacks along with some optimizations like KoreK attacks, as well as the PTW attacks to make their attacks more potent. If you are a mediocre hacker then you’ll be able to crack WEP in a few minutes and you ought to be pretty proficient at being able to crack WPA/WPA2.

5.THC Hydra

Concise polls place THC Hydra one place under ‘John The Ripper’ because of user popularity though it is as popular as John The Ripper. Essentially THC Hydra is a fast and stable Network Login Hacking Tool that will use a dictionary or brute-force attacks to try various password and login combinations on the login page.

This hacking tool supports a wide set of protocols including Mail (POP3, IMAP, etc.), Databases, LDAP (Lightweight Directory Access Protocol), SMB, VNC, and SSH (Secure Shell used by VPN software).

Source: Technotification

New Kali Linux 2017.1 Released, Download Now!!!

Since becoming a rolling distro, updated images have stopped being of much importance for Kali Linux. However, Kali Linux 2017.1 is apparently a major release for this distro with a host of new features and improvements made to this ethical hacking distro.

The official announcement reads as follows:

“As with all new releases, you have the common denominator of updated packages, an updated kernel that provides more and better hardware support, as well as a slew of updated tools – but this release has a few more surprises up its sleeve”

The devil’s in the details

Implementation of drivers for RTL8812AU wireless chipsets, bringing wireless injection attacks to the 802.11 AC standard – possibly the first for an ethical hacking OS – are the main additions in this release. For those who want to install the driver, the command is “sudo apt install realtek-rtl88xxau-dkms” .

Support for Nvidia’s CUDA GPU cracking has been streamlined with this release of Kali Linux. That means ethical hackers now having the ability to utilize the full potential of the Nvidia graphics card when using tools like Pyrit and Hashcat. CUDA GPU cracking also makes its way onto Microsoft Azure and Amazon AWS with this release.

Azure and AWS images of Kali Linux have been created reportedly because Microsoft’s Azure NC-Series and Amazon’s AWS P2-Series appear to offer pass-through GPU support,owing to the cloud based instances’s usage trends for password cracking operations.

To top all of this, OpenVAS 9 open-source vulnerability scanner and manager seems to have been made available in the repos of Kali Linux. Users keen to install it, can do so with the command “sudo apt install openvas”. Kali Linux is now available for download.

Source:Softpedia

Why is ethical hacking, pentesting or security research the best career option of 2017?

Hacking has various meanings and a hacker is not always necessarily a bad person. There are three types of hackers- white hats, gray hats and black hats. It also happens to be a top career option for wannabe engineers and software professionals as ethical hackers are sought after a lot these days. Let’s find out more…

As mentioned in our earlier article here, white hat hackers are security researchers or ethical hackers who break security for non-malicious reasons, either to test their own security system, perform penetration tests or vulnerability assessments for a client or while working for a security company which makes security software. They normally notify the vendor once they discover a vulnerability in software so that the flaw can be fixed. For identifying any flaws in software, companies that have bug bounty programs these days pay white hats anywhere between $500 to more than $100,000 by selling that information. White hats are also considered as ethical hackers.

A gray hat hacker lies between a black hat and a white hat hacker. A gray hat hacker can be individual hackers or researchers who surf the Internet and hack into a computer system for the sole purpose of notifying the administrator that their system has a security defect, for example. They may then offer to correct the defect for a fee. Grey hats normally sell or disclose their zero-day vulnerabilities not to criminals, but to governments—law enforcement agencies, intelligence agencies or militaries presuming that they use the vulnerabilities responsibly for the public good. The government’s use those security holes to hack into the systems of adversaries or criminal suspects.

Considered as criminals, a “black hat” hacker is a hacker who “violates computer security for little reason beyond maliciousness or for personal gain”. Black hat hackers use their expertise to find or develop software holes and break into secure networks to destroy, modify, or steal data; or to make the network unusable for those who are authorized to use the network. They also sell information about the security holes, zero day vulnerabilities and exploits to other criminals for them to use. Obviously, black hats are considered the bad guys, as they are the epitome of all that the public fears in a computer criminal.

Businesses need ethical hackers now more than ever

Now since you know about the different types of hackers, let’s move on to know why ethical hackers are sought after by various businesses. Almost every company including the emerging startups invest lots and lots of money in securing their systems and platforms to prevent data breaches, DDOS attacks or intrusions. Since the number of cyber criminals in the world is increasing minute by minute, there is now more investment in skills, training and technology in the field of ethical hacking. By around 2021, the global spending will most probably cross $1 trillion. With cyber criminals trying so hard to breach, businesses now look to ethical hacking professionals who can prevent devastating security intrusions, DDOS attacks and cyber security breaches and protect their networks, Apps and backend systems.

Ethical hackers conduct controlled hack attacks on organizations called penetration tests aka pentests to find vulnerabilities and fix them. But unlike malicious ‘black hat’ hackers who exploit these for illegal practices, ethical hackers and security experts provide the company with details needed to fix flaws, before black hats lay their dirty hands. Cyber criminals and ethical hackers think alike and hence businesses will have a deeper insight.

Without pentests, security holes aka bugs and zero-days will remain unseen and existent thus, leaving an organization or business in a position that a black hat hacker or cybercriminal could potentially exploit. According to the 2016 Internet Security Threat Report prepared by Symantec Corporation, ethical hacking knowledge is sought after by global corporations and SMEs as well. The report also shows that 43% attacks were on SMEs.

Bright career prospects in ethical hacking

Various companies have also started introducing Bug Bounty program. For example, Google has paid out $3 million to hackers doing ethical hacking in just 2016 itself. Totally, $9 million has been paid out since 2010 when Google started the program. Facebook has paid out close to $6 million and Microsoft close to $2 million. Google and Microsoft recently also raised their payouts.

When hiring an ethical hacker look out for industry-standard certifications such as EC Council’s Certified Ethical Hacker (CEH) or GIAC’s GPEN. You can read all about CEH certification here. One can witness live hacking attempts on a map created by Norse Corp here.

Further reading:

Techworm Deals Special: Save 96% On This Comprehensive Hacking Training Bundle

Read here on How To Become A Certified Ethical Hacker 2017.

Read the detailed report by Symantec here.

EC Council’s Certified Ethical Hacker (CEH)

GIAC’s GPEN

Witness live hacking attempts on Norse Corp’s website here.

Techworm Deals Special: Save 96% On This Comprehensive Ethical Hacking Training Bundle

Thanks to the increase in the use of internet, there is a high demand for computer experts these days who can perform ethical hacking operations. As a result, computer security has become a main issue for governments and businesses. This is where “ethical hackers” (also known as white hat hackers or penetration testers) can play a big role.

Ethical hackers protect the computer systems from dangerous intrusions by identifying weaknesses in data computer security and protect them from hackers or criminals with less honest motives. With the increase in demand for ethical hackers, more and more people are looking to get into the booming field of ethical hacking.

While this profession can be quite lucrative, it requires a broad range of knowledge. Also, you need to be up to date on the most recent tools and certifications. We have a perfect solution to address this – the Ethical Hacking A to Z Bundle.

This training bundle includes 45 hours of immersive content that take you from the basics to advanced tools used in the profession. Once you complete the eight courses in the bundle, you will be all set to take the plunge into the world of ethical hacking.

Currently, Techworm Deals is offering an amazing deal, wherein you can get an eight courses 45-hour bundle just for $39. That means you get 96% discount on the original price of $1,273.

Grab the offer now!

Know How You Can Become A Certified Ethical Hacker 2017

The term ‘hacking’ has very negative connotations, but that’s only until the role of an ethical hacker is fully understood. Ethical hackers are the good guys of the hacking world, the one who wear the “white hat.” So what does the role of an ethical hacker involve? Instead of using their advanced computer knowledge for nefarious activities, Ethical hackers or white hat hackers identify system vulnerabilities and access points for penetration, and prevent unwanted access to network and information systems. This not only helps them earn lucrative money but also keeps them away from facing prison time.

Penetration testing is becoming increasingly important for organizations of all sizes, as security breaches continue to grow both in frequency and in the amount of damage they cause. The Certified Ethical Hacker (CEH) is an intermediate-level credential offered by the International Council of E-Commerce Consultants (EC-Council). For IT professionals seeking to expand their knowledge in that area, the EC-Council’s CEH credential offers a solid base of expertise. CEH provides complete ethical hacking and network security training courses to learn white hat hacking. It is suitable for candidates who want to acquaint themselves with the latest security threats, advanced attack vectors, and practical real time demonstrations of the latest hacking techniques, tools, tricks, methodologies, and security measures.

CEH credential holders possess skills and knowledge on hacking practices in the following 18 areas such as:

• Introduction to Ethical Hacking
• Footprinting and Reconnaissance
• Scanning Networks
• Enumeration
• System Hacking
• Malware Threats
• Sniffing
• Social Engineering
• Denial of Service
• Session Hijacking
• Hacking Webservers
• Hacking Web Applications
• SQL Injection
• Hacking Wireless Networks
• Hacking Mobile Platforms
• Evading IDS, Firewalls, and Honeypots
• Cloud Computing
• Cryptography

To obtain the CEH certification, candidates must pass one exam. Candidates may opt for self-study, for which an application must be filled out and proof of two years of relevant information security work experience with employer verification must be submitted. Those without the required two years of information security related work experience can request consideration of educational background, but this is approved on a case-by-case basis. Self-study candidates are also required to pay an additional $100 application fee.

The Certified Ethical Hacker Training Program consists of 18 modules and covers 270 attack technologies, as well as mimics real-life scenarios in 140 labs. The course is run on an intensive five-day schedule with training from 9-5.

CEH credential holders are required to obtain 120 continuing education credits for each three-year cycle, as technology in the field of hacking changes almost daily.

Certified Ethical Hacker (CEH) Training

The 312-50 exam lasts 4 hours and is comprised of 125 multiple choice questions. It is offered at ECCExam (Exam Prefix – 312-50) and Vue Testing Center (Exam Prefix – 312-50).

Although EC-Council offers both instructor-led and online training for its CEH certification (as listed above), IT professionals have a variety of other options of self-study materials, including practice exams, video-based training and books.

Currently, Pluralsight offers several ethical hacking courses geared towards the 312-50 exam. You get access to all of these courses with a monthly subscription plus everything else in Pluralsight’s training library. IT professionals learn about SQL injection, session hijacking, social engineering, reconnaissance and footprinting, enumeration, and how to hack web servers, applications and mobile platforms through Pluralsight’s ethical hacking courses.

360training.com offers a few training courses covering the Certified Ethical Hacking exam 312-50. IT professionals get access to a lab through an interactive environment, where they can learn how to scan, test, hack and secure various systems. Topics covered include intrusion detection, DDoS attacks and virus creation.

Finally, Transcender offers a practice exam for the CEH 312-50 certification that includes 235 questions. Backed by its “pass the first time” guarantee, Transcender is very confident that this practice exam will help you prepare for the CEH exam. Also, if you don’t pass the CEH exam, you can get a full refund.

Source: tomsitpro

Techworm Deals Special: Save 96% On Eight-Course Ethical Hacking Bundle

The increase in the use of computer and explosive growth of the Internet has brought many good things, such as electronic commerce, online banking, e-mail, video conferencing, etc. As a result, the improvement of security systems to prevent criminal hacker has become an important concern to society.

This has led to an increasing demand for “ethical hackers” (also known as white hat hackers or penetration testers) as they protect the computer systems from dangerous intrusions. Businesses and government-related organizations that are serious about their network security hire ethical hackers and penetration testers to help probe and improve their networks, applications, and other computer systems with the ultimate goal of preventing data theft and fraud. Ethical hackers use the same methods as their less-reputable namesakes, but document vulnerabilities instead of exploiting them, preventing potential crises and minimising damage.

Ethical hackers identify weaknesses in data computer security for business and organizations across the globe, to protect them from hackers or criminals with less honest motives. This not only helps them earn a good and honest living but also keeps them away from facing prison time.

While this profession can be quite lucrative, it requires a broad range of knowledge. Also, the courses needed to become an Ethical Hacker are generally quite expensive.

However, Techworm Deals is currently offering an amazing deal, wherein you can get an eight courses 45-hour bundle just for $39. That means you get 96% discount on the original price of $1,273.

Grab The Ethical Hacking A to Z Bundle Now!!!

These eight courses take you from the basics to advanced tools used in the profession. The eight courses in the bundle include:

• Ethical Hacker Bootcamp for 2017
• A to Z Ethical Hacking Course
• Learn Burp Suite for Advanced Web Penetration Testing
• Complete Ethical Hacking/Penetration Testing Course
• Intro to Ethical Hacking Certification
• Real World Hacking & Penetration Testing
• Learn Kali Linux and Hack Android Mobile Devices
• Learn Hacking/Penetration Testing Using Android From Scratch

Once you complete the courses, you will be all set to take the plunge into the world of Ethical Hacking. So, what are you waiting for? Go and grab the offer now before it’s too late.

For more information regarding the Ethical Hacking courses, go to our deals store at the link below:

Ethical Hacking A to Z Bundle