Kali Linux Penetration Testing (Advanced) Training Course

Introduction

• Overview of Kali Linux
• Installing and configuring Kali Linux
• Using and updating Kali Linux

Penetration Testing Standards and Classification

• Open Web Application Security Project (OWASP)
• Licensor Penetration Testing (LPT)
• White box and black box testing
• Differences between penetration testing and vulnerability assessment

Advanced Penetration Methodology

• Defining target framework and scope
• Gathering client requirements
• Creating a checklist for the test plan
• Profiling test boundaries
• Advanced penetration testing using Kali Linux

Information Discovery

• Google hacking techniques
• Gathering DNS and WHOIS information
• Collecting routing and network data
• Consolidating information from multiple sources

Scanning and Enumerating the Target

• Advanced network scanning
• Port and UDP port scanning
• Stealth port scanning techniques
• Packet crafting with Hping
• Nmap scanning and plugins
• Active and passive banner and OS enumeration
• Enumerating users, groups, and shares
• Enumerating DNS resource records and network devices

Vulnerability Assessment Tools

• Nessus
• OpenVAS

Target Exploitation

• Setting up Metasploit
• Exploitation with Metasploit
• Meterpreter sessions
• VNC exploitation
• Stealing password hashes
• Adding custom modules to Metasploit
• Using Immunity Debugger
• Writing exploits

Privilege Escalation and Access Maintenance

• Breaking password hashes
• Cracking telnet, SSH, and FTP passwords
• Using Metasploit post-exploitation modules
• Protocol tunneling
• Proxy configuration
• Installing persistent backdoors

Advanced Sniffing

• ARP poisoning
• DHCP starvation
• MAC flooding
• DNS poisoning
• Sniffing credentials from secured websites

Denial of Service (DoS) Attacks

• SYN flood attack
• Application request flood attack
• Service request flood
• Permanent denial of service attacks

Penetration Testing

• Web penetration testing
• Wireless penetration testing

Exploitation and Client-Side Attacks

• Exploiting browser vulnerabilities
• Buffer overflow techniques
• Fuzzing
• Fast-track hacking
• Phishing for passwords
• Generating backdoors
• Java applet attacks

Firewall Testing

• Firewall overview
• Testing firewalls and ports
• Rules for testing firewalls

Management and Reporting

• Documentation and results verification
• Dradis framework
• Tree and Maltego tools
• Data collection and evidence management
• Report types and presentation
• Post-testing procedures

Summary and Next Steps