CPU – Central processing unit

by PRADEEP GODARA

A central processing unit (CPU), also called a central processor or main processor, is the electronic circuitry within a computer that carries out the instructions of a computer program by performing the basic arithmetic, logic, controlling, and input/output (I/O) operations specified by the instructions. The computer industry has used the term “central processing unit” at least since the early 1960s.[1] Traditionally, the term “CPU” refers to a processor, more specifically to its processing unit and control unit (CU), distinguishing these core elements of a computer from external components such as main memory and I/O circuitry.[2]

The form, design, and implementation of CPUs have changed over the course of their history, but their fundamental operation remains almost unchanged. Principal components of a CPU include the arithmetic logic unit (ALU) that performs arithmetic and logic operations, processor registers that supply operands to the ALU and store the results of ALU operations, and a control unit that orchestrates the fetching (from memory) and execution of instructions by directing the coordinated operations of the ALU, registers and other components.

Most modern CPUs are microprocessors, where the CPU is contained on a single metal-oxide-semiconductor (MOS) integrated circuit(IC) chip. An IC that contains a CPU may also contain memory, peripheral interfaces, and other components of a computer; such integrated devices are variously called microcontrollers or systems on a chip (SoC). Some computers employ a multi-core processor, which is a single chip containing two or more CPUs called “cores”; in that context, one can speak of such single chips as“sockets”.[3]

Array processors or vector processors have multiple processors that operate in parallel, with no unit considered central. There also exists the concept of virtual CPUs which are an abstraction of dynamical aggregated computational resources.[4]

advantage of digital wallet

by PRADEEP GODARA

Advantages of the Digital Wallet

Picture

Lower Costs: Employing the use of digital wallets removes the need for intermediaries, in a variety of forms. Purchases in-store may no longer require a cashier because the purchasing process becomes as simple as a tap or scan of a mobile device. Applications like Square can replace expensive POS (point of sale) systems that will reduce transaction costs for the business.

Competitive Advantage: Digital wallet applications provide a more convenient transaction processing method for customers, giving businesses that employ this technology a competitive edge in the market. It redefines the user experience of paying and incorporates a novelty aspect to each purchase.

Modern: Traditional cash-only businesses, such as craft fairs and flea markets, can now accept debit and credit cards. This opens up an entirely new aspect to payment methods in large markets, introducing many business opportunities and greater potential revenue.

Convenience: Users are able to get through a purchase in mere seconds with a simple tap or scan of their mobile device. The experience of purchasing items becomes quicker and easier – leading to a greater sense of satisfaction. Furthermore, with faster transactions, checkout lines within stores become much shorter.

Disadvantages of the Digital Wallet

Investment: The initial monetary investment for building a functional digital wallet application is quite large. It requires the initial development of the software as well as the continual maintenance, updates and fixes associated with it. Upon acquiring software, the business would also need to install the corresponding hardware in their stores, which leads to a further increase in costs.

Support Technology: There are few supporting technologies to choose from at the moment, with NFC terminals and phone readers being the most prevalent. In the case of digital wallets, they can only function with a corresponding hardware device for each application. NFC terminals and specialize scanners are the only devices created at the moment that will support the processing of digital wallet payments; thus, it is very limited because the technology is still new.
System Outages: Information for digital wallets are stored on the cloud of business servers; therefore, the risk of a system malfunction or shut down is always present. As a result, businesses will not be able to process payments or they will become increasingly slow due to high traffic in the servers.

Security: Companies must ensure that their customers’ information is encrypted and well protected. One of the biggest concerns of adopting a digital wallet application is “will my information be safe”? This is the hurdle that companies must face and as a result, must develop security systems that are as safe and full proof as possible to avoid potential security issues.

Ethical hacking

by PRADEEP GODARA

What is ethical hacking?

  • Certificate of Completion
What you’ll learn
  • 130+ ethical hacking & security videos
  • Start from scratch up to a high-intermediate level
  • Learn what is ethical hacking, its fields and the different types of hackers
  • Install hacking lab & needed software (works on Windows, OS X and Linux)
  • Hack & secure both WiFi & wired networks
  • Discover vulnerabilities & exploit them hack into servers
  • Hack secure systems using client-side and social engineering attacks
  • Use 30+ hacking tools such as Metasploit, Aircrack-ng, SQLmap…..etc
  • Understand how websites work, how to discover and exploit web application vulnerabilities to gain full control over websites
  • Secure systems from all the attacks shown
  • Install Kali Linux – a penetration testing operating system
  • Install windows & vulnerable operating systems as virtual machines for testing
  • Learn linux basics
  • Learn linux commands and how to interact with the terminal
  • Learn Network Penetration Testing
  • Network basics & how devices interact inside a network
  • A number of practical attacks that can be used without knowing the key to the target network
  • Control connections of clients around you without knowing the password.
  • Create a fake Wi-Fi network with internet connection & spy on clients
  • Gather detailed information about clients and networks like their OS, opened ports …etc.
  • Crack WEP/WPA/WPA2 encryptions using a number of methods.
  • ARP Spoofing/ARP Poisoning
  • Launch Various Man In The Middle attacks.
  • Gain access to any account accessed by any client in your network.
  • Sniff packets from clients and analyse them to extract important info such as: passwords, cookies, urls, videos, images ..etc.
  • Discover open ports, installed services and vulnerabilities on computer systems
  • Gain control over computer systems using server side attacks
  • Exploit buffer over flows and code execution vulnerabilities to gain control over systems
  • Gain control over computer systems using client side attacks
  • Gain control over computer systems using fake updates
  • Gain control over computer systems by backdooring downloads on the fly
  • Create undetectable backdoors
  • Backdoor normal programs
  • Backdoor any file type such as pictures, pdf’s …etc.
  • Gather information about people, such as emails, social media accounts, emails and friends
  • Use social engineering to gain full control over target systems
  • Send emails from ANY email account without knowing the password for that account
  • Read, write download, upload and execute files on compromised systems
  • Capture keystrokes on a compromised system
  • Use a compromised computer as a pivot to gain access to other computers on the same network
  • Understand how websites & web applications work
  • Understand how browsers communicate with websites
  • Gather sensitive information about websites
  • Discover servers, technologies and services used on target website
  • Discover emails and sensitive data associated with a specific website
  • Find all subdomains associated with a website
  • Discover unpublished directories and files associated with a target website
  • Find all websites hosted on the same server as the target website
  • Exploit file upload vulnerabilities & gain full control over the target website
  • Discover, exploit and fix code execution vulnerabilities
  • Discover, exploit & fix local file inclusion vulnerabilities
  • Discover, fix, and exploit SQL injection vulnerabilities
  • Bypass login forms and login as admin using SQL injections
  • Writing SQL queries to find databases, tables and sensitive data such as usernames and passwords using SQL injections
  • Read / Write files to the server using SQL injections
  • Learn the right way to write SQL queries to prevent SQL injections
  • Discover reflected XSS vulnerabilities
  • Discover Stored XSS vulnerabilities
  • Hook victims to BeEF using XSS vulnerabilities
  • Fix XSS vulnerabilities & protect yourself from them as a user

See more

Requirements
Description

Welcome this comprehensive course on Ethical Hacking! This course assumes you have NO prior knowledge in hacking and by the end of it you’ll be able to hack systems like black-hat hackers and secure them like security experts!

This course is highly practical but it won’t neglect the theory, so we’ll start with ethical hacking basics and the different fields in penetration testing, installing the needed software (works on Windows, Linux and Mac OS X) and then we’ll dive and start hacking systems straight away. From here onwards you’ll learn everything by example, by analysing and exploiting computer systems such as networks, servers, clients, websites …..etc, so we’ll never have any boring dry theoretical lectures.

The course is divided into a number of sections, each section covers a penetration testing / hacking field, in each of these sections you’ll first learn how the target system works, the weaknesses of this system, and how to practicallyexploit theses weaknesses and hack into it, not only that but you’ll also learn how to secure this system from the discussed attacks. This course will take you from a beginner to a more advanced level by the time you finish, you will have knowledge about most penetration testing fields.

The course is divided into four main sections:

1. Network Hacking – This section will teach you how to test the security of networks, both wired and wireless. First, you will learn some basic network terminology, how networks work, and how devices communicate with each other. Then it will branch into three sub sections:

  • Pre-connection attacks: in this subsection you’ll learn what can you do before even connecting to a network, and even before having internet access; you’ll start by learning how to gather information about the networks around you, discover the devices connected to them, and how to control connections around you (ie: deny/allow devices from connecting to networks) even without knowing the password of the target network.

  • Gaining Access: Now that you gathered information about the networks around you, in this subsection you will learn how to crack the key and get the password to your target network weather it uses WEP, WPA or even WPA2.

  • Post Connection attacks: Now that you have the key, you can connect to the target network, in this subsection you will learn a number of powerful techniques that allow you to gather comprehensive information about the connected devices, see anything they do on the internet (such as login information, passwords, visited urls, images, videos ….etc), redirect requests, inject evil code in loaded pages and much more! All the attacks here work against both wireless and wired networks. You will also learn how to create a fake WiFi network, attract users to connect to it and use all of the above techniques against the connected clients.

2. Gaining Access – In this section you will learn two main approaches to gain full control or hack computer systems:

  • Server Side Attacks: In this subsection you will learn how to gain full access to computer systems without the need for user interaction. You will learn how to gather useful information about a target computer system such as its operating system, open ports, installed services, then you’ll learn how to use this information to discover weaknesses and vulnerabilities and exploit them to gain full control over the target. Finally you will learn how to generate different types of reports for your discoveries.

  • Client Side Attacks – If the target system does not contain any weaknesses then the only way to gain access to it is by interacting with the users, in this subsection you’ll learn how to get the target user to install a backdoor on their system without even realising, this is done by hijacking updatesor backdoornig downloadeds on the fly. Not only that but you’ll also learn how to create trojans by backdooring normal files (such as an image or a pdf) and use social engineering to deliver this trojan to the target, to do this you’ll learn how to spoof emails so they appear as if they’re sent from the target’s friend, boss or any email account they’re likely to interact with.

3. Post Exploitation – In this section you will learn how to interact with the systems you compromised so far. You’ll learn how to access the file system (read/write/upload/execute), maintain your access, spy on the target and even use the target computer as a pivot to hack other computer systems.

4. Website / Web Application Hacking– In this section you will learn how websites work, how to gather information about a target website (such as website owner, server location, used technologies ….etc) and how to discover and exploit the following dangerous vulnerabilities to hack into websites:

  • File Upload.

  • Code Execution.

  • Local File Inclusion.

  • Remote File Inclusion.

  • SQL Injection.

  • Cross Site Scripting (XSS).

At the end of each section you will learn how to detect, prevent and secure your system and yourself from the discussed attacks.

All the techniques in this course are practical and work against real systems, you’ll understand the whole mechanism of each technique first, then you’ll learn how to use it to hack into the target system, so by the end of the course you’ll be able to modify the these techniques to launch more powerful attacks, and adopt them to different situations and different scenarios.

With this course you’ll get 24/7 support, so if you have any questions you can post them in the Q&A section and we’ll respond to you within 15 hours.

NOTE: This course is created for educational purposes only and all the attacks are launched in my own lab or against devices that I have permission to test.

NOTE: This course is totally a product of Zaid Sabih and no other organisation is associated with it or a certification exam. Although, you will receive a Course Completion Certification from Udemy, apart from that NO OTHER ORGANISATION IS INVOLVED.

Who this course is for:
  • Anybody who is interested in learning ethical hacking / penetration testing
  • Anybody who wants to learn how hackers hack computer systems
  • Anybody who wants to learn how to secure their systems from hackers