Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem.
• Installation and initial configuration procedures.
• System usage and update management.

Kali Linux Files, Directories, and Permissions

• Customizing the workspace and panel settings.
• Creating and managing directories and files.
• Locating specific files and directories.
• Utilizing commands and consulting manual pages.
• Understanding Linux file permissions and hidden files.
• Process management and termination techniques.

Advanced Command Line Skills

• Using extended monitoring tools like HTOP and ATOP.
• Efficient text searching with head, tail, wc, and history.
• Creating persistent aliases for common tasks.
• Using command-line web downloaders.
• Introduction to Bash shell scripting.
• Sorting and processing output using grep and cut.

Pre-engagement and Information Gathering

• Defining rules of engagement.
• Adhering to penetration testing standards.
• Analyzing DNS records and network routes.
• Conducting network and port scans.
• Performing SMB and OSINT (Open Source Intelligence) analysis.

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities.
• Identifying CMS platforms and underlying frameworks.
• Force browsing directories and files using ZAP.
• Web crawling and directory listing techniques.
• Analyzing vulnerabilities using Nmap NSE and Nikto.
• Privilege escalation checks using Legion and Unix-privesc-check.
• Evasion techniques for firewalls and IDS using Nmap.

Exploitation Techniques

• Exploiting SQL injection vulnerabilities.
• Demonstrating blind SQL injection attacks.
• Transitioning from outdated web apps to server compromise.

Reporting

• Structuring and writing penetration testing reports.
• Documenting engagement details and findings.