Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem
• Installation and initial configuration of Kali Linux
• System maintenance and updating procedures

Kali Linux File System, Directories, and Permissions

• Customizing the workspace and panel layout
• Creating and organizing directories and files
• Techniques for locating files and directories
• Essential commands and utilizing man pages
• Understanding Linux file permissions and hidden files
• Managing and terminating Linux processes

Advanced Command-Line Operations

• Using HTOP and ATOP for extended system monitoring
• Searching text using head, tail, wc, and history
• Setting up persistent aliases and applying them in real-world scenarios
• Utilizing command-line tools for web downloading
• Basics of scripting in the Bash shell
• Processing and sorting output using grep and cut

Pre-engagement and Information Gathering

• Defining rules of engagement
• Adhering to penetration testing execution standards
• Analyzing DNS records and network routing
• Performing network and port scans
• Conducting SMB and OSINT (Open Source Intelligence) analysis

Vulnerability Scanning and Analysis

• Scanning for vulnerabilities in web applications
• Identifying CMS platforms and frameworks
• Force browsing directories and files using ZAP
• Web crawling and analyzing directory listings
• Analyzing vulnerabilities using Nmap NSE and Nikto
• Assessing vulnerabilities with Legion and Unix-privesc-check
• Techniques for firewall and IDS evasion using Nmap

Exploitation

• Exploiting SQL injection vulnerabilities
• Demonstrating blind SQL injection attacks
• Escalating from outdated web applications to server compromise

Reporting

• Structuring effective penetration testing reports
• Documenting engagement details and findings