Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem
• Installation and configuration procedures
• Usage and updating best practices

Kali Linux File Systems, Directories, and Permissions

• Customizing the workspace and panel layouts
• Creating and organizing directories and files
• Techniques for locating specific files and directories
• Utilizing core commands and consulting man pages
• Managing Linux file permissions and handling hidden files
• Process management and termination techniques in Linux

Advanced Command-Line Proficiency

• Utilizing HTOP and ATOP for extended system monitoring
• Searching text using head, tail, wc, and history
• Setting persistent aliases and real-world application examples
• Downloading content via command-line tools
• Writing scripts in the bash shell
• Sorting and processing results using grep and cut

Pre-Engagement and Information Gathering

• Defining rules of engagement
• Adhering to penetration testing execution standards
• Analyzing DNS records and network routes
• Performing network and port scanning
• Conducting SMB and OSINT (Open Source Intelligence) analysis

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities
• Identifying Content Management Systems (CMS) and frameworks
• Forcing browsing of directories and files using ZAP
• Web crawling and enumerating directory listings
• Conducting vulnerability analysis with Nmap NSE scripts and Nikto
• Performing vulnerability analysis using legion and Unix-privesc-check
• Evaluating firewall and IDS evasion techniques using Nmap

Exploitation Techniques

• Exploiting SQL injection vulnerabilities
• Executing blind SQL injection attacks in real scenarios
• Transitioning from compromised web applications to server compromise

Reporting and Documentation

• Structuring penetration testing reports
• Documenting engagement details and findings