Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem.
• Installation and initial configuration of Kali Linux.
• Effective usage and system updating practices.

Kali Linux Files, Directories, and Permissions

• Customizing the workspace and panel layout.
• Creating and organizing directories and files.
• Techniques for locating files and directories.
• Using commands and accessing man pages.
• Managing Linux file permissions and hidden files.
• Monitoring and terminating Linux processes.

Advanced Commands

• Utilizing extended commands such as HTOP and ATOP.
• Searching lines using head, tail, wc, and history.
• Setting up persistent aliases and applying them to real-world scenarios.
• Using command-line web downloaders.
• Introduction to bash shell scripting.
• Sorting and filtering results using grep and cut.

Pre-engagement and Information Gathering

• Defining rules of engagement.
• Adhering to standards for penetration testing execution.
• Analyzing DNS and network routes.
• Conducting network and port scanning.
• Performing SMB and OSINT analysis.

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities.
• Identifying CMS and underlying frameworks.
• Force browsing directories and files using ZAP.
• Web crawling and generating directory listings.
• Analyzing vulnerabilities with Nmap NSE and Nikto.
• Assessing vulnerabilities using Legion and Unix-privesc-check.
• Evasion techniques for firewalls and IDS using Nmap.

Exploitation

• Exploiting SQL injection vulnerabilities.
• Executing blind SQL injection attacks in practice.
• Leveraging outdated web applications for server compromise.

Reporting

• Structuring penetration testing reports.
• Documenting engagement details effectively.