Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem
• Installation and configuration processes
• Maintenance and updating procedures

Kali Linux Files, Directories, and Permissions

• Customizing the workspace and panel layout
• Creating new directories and files
• Locating and identifying specific files and directories
• Navigating commands and man pages
• Understanding Linux file permissions and hidden files
• Monitoring and terminating Linux processes

Advanced Commands

• Utilizing HTOP and ATOP for system monitoring
• Text processing with head, tail, wc, and history
• Setting persistent aliases and applying real-world scenarios
• Using command-line web downloaders
• Basic scripting in the Bash shell
• Filtering and sorting output with grep and cut

Pre-engagement and Information Gathering

• Defining rules of engagement
• Adhering to penetration testing execution standards
• Analyzing DNS and routing tables
• Performing network and port scanning
• Conducting SMB and OSINT analysis

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities
• Identifying CMS types and frameworks
• Force browsing directories and files using ZAP
• Web crawling and generating directory listings
• Performing vulnerability analysis using Nmap NSE and Nikto
• Using Legion and Unix-privesc-check for privilege escalation analysis
• Evasion techniques for firewalls and IDS using Nmap

Exploitation

• Exploiting SQL injection vulnerabilities
• Demonstrating blind SQL injection attacks in action
• Progressing from outdated web applications to server compromise

Reporting

• Structuring penetration testing reports
• Documenting engagement details