Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem
• Installation and configuration processes
• System maintenance and updating procedures

Managing Files, Directories, and Permissions

• Customizing the workspace and panel layout
• Creating and organizing directories and files
• Locating specific files and directories efficiently
• Utilizing standard commands and man pages
• Handling Linux file permissions and hidden files
• Managing and terminating Linux processes

Advanced Command Line Operations

• Using extended monitoring tools like HTOP and ATOP
• Extracting data using head, tail, wc, and history
• Creating persistent aliases for real-world scenarios
• Using command-line web downloaders
• Writing basic scripts in the bash shell
• Sorting and filtering results with grep and cut

Pre-engagement and Information Gathering

• Establishing rules of engagement
• Adhering to penetration testing execution standards
• Analyzing DNS records and network routes
• Conducting network and port scans
• Performing SMB and OSINT analysis

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities
• Identifying CMS platforms and frameworks
• Force browsing directories and files using ZAP
• Web crawling and enumerating directory listings
• Analyzing vulnerabilities with Nmap NSE and Nikto
• Using legion and Unix-privesc-check for vulnerability assessment
• Evolving firewall and IDS evasion techniques with Nmap

Exploitation

• Exploiting SQL injection vulnerabilities
• Executing blind SQL injection attacks
• Leveraging outdated web applications for server compromise

Reporting

• Compiling comprehensive penetration testing reports
• Documenting engagement details and findings