Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem
• Installing and configuring Kali Linux
• Using and updating the distribution

Kali Linux Files, Directories, and Permissions

• Customizing the workspace and panels
• Creating directories and files
• Locating specific files and directories
• Working with commands and man pages
• Linux file permissions and hidden files
• Managing and terminating Linux processes

Advanced Commands

• Utilizing HTOP and ATOP for system monitoring
• Searching text using head, tail, wc, and history
• Creating persistent aliases and applying them in real-world scenarios
• Using command-line web downloaders
• Basic scripting in the bash shell
• Sorting output using grep and cut

Pre-engagement and Information Gathering

• Establishing rules of engagement
• Standards for executing penetration tests
• DNS and route analysis
• Network and port scanning techniques
• SMB and OSINT (Open Source Intelligence) analysis

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities
• Identifying CMS and frameworks
• Forcing browsing of directories and files using ZAP
• Web crawling and directory listing
• Conducting vulnerability analysis with Nmap NSE and Nikto
• Using Legion and Unix-privesc-check for privilege escalation analysis
• Evasion techniques for firewalls and IDS using Nmap

Exploitation

• Exploiting SQL injection vulnerabilities
• Executing blind SQL injection attacks
• Escalating from outdated web applications to server compromise

Reporting

• Structuring penetration testing reports
• Documenting engagement details