Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem
• Installation and configuration processes
• Usage patterns and system updates

Kali Linux Files, Directories, and Permissions

• Customizing the workspace and panel layout
• Creating new directories and files
• Techniques for finding and locating files and directories
• Utilizing commands and consulting man pages
• Managing Linux file permissions and identifying hidden files
• Controlling and terminating Linux processes

Advanced Commands

• Using HTOP and ATOP for extended system monitoring
• Searching lines using head, tail, wc, and history
• Setting up persistent aliases and reviewing real-world use cases
• Employing command-line web downloaders
• Writing scripts in the bash shell
• Sorting output results using grep and cut

Pre-engagement and Information Gathering

• Defining rules of engagement
• Standards for executing penetration testing
• Analyzing DNS records and routing paths
• Scanning networks and ports
• Conducting SMB and OSINT analyses

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities
• Identifying CMS platforms and frameworks
• Force browsing directories and files using ZAP
• Performing web crawling and directory listing
• Analyzing vulnerabilities with Nmap NSE and Nikto
• Assessing vulnerabilities using legion and Unix-privesc-check
• Evasion of firewalls and IDS using Nmap

Exploitation

• Exploiting SQL injection vulnerabilities
• Executing blind SQL injection attacks in practice
• Transitioning from outdated web applications to server compromise

Reporting

• Structuring penetration testing reports
• Documenting engagement details