Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem.
• Installation and initial configuration of Kali Linux.
• Usage patterns and system updates.

Kali Linux Files, Directories, and Permissions

• Customizing the workspace and panel layouts.
• Creating and organizing directories and files.
• Locating specific files and directories efficiently.
• Utilizing core commands and man pages.
• Managing Linux file permissions and hidden files.
• Controlling and terminating Linux processes.

Advanced Commands

• Utilizing extended commands such as HTOP and ATOP.
• Searching content using head, tail, wc, and history.
• Setting up persistent aliases and applying them to real-world scenarios.
• Downloading web resources via command-line tools.
• Writing basic scripts in the bash shell.
• Sorting and filtering results using grep and cut.

Pre-engagement and Information Gathering

• Defining rules of engagement.
• Adhering to penetration testing execution standards.
• Performing DNS and route analysis.
• Conducting network and port scans.
• Analyzing SMB services and OSINT sources.

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities.
• Identifying CMS platforms and frameworks.
• Forcing directory and file browsing using ZAP.
• Web crawling and analyzing directory listings.
• Performing vulnerability analysis with Nmap NSE and Nikto.
• Conducting vulnerability assessments using legion and Unix-privesc-check.
• Evasion techniques for firewalls and IDS using Nmap.

Exploitation

• Exploiting SQL injection vulnerabilities.
• Executing blind SQL injection attacks in a live environment.
• Exploiting outdated web applications to compromise the server.

Reporting

• Structuring comprehensive penetration testing reports.
• Documenting specific engagement details.