Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• General overview of the Kali Linux ecosystem
• Steps for installing and configuring the system
• Methods for utilizing and updating Kali Linux

Files, Directories, and Permissions in Kali Linux

• Customizing the workspace and panel layout
• Procedures for creating new directories and files
• Techniques for locating files and directories
• Understanding commands and accessing man pages
• Managing Linux file permissions and hidden files
• Controlling and terminating Linux processes

Advanced Command-Line Operations

• Using HTOP and ATOP for advanced monitoring
• Searching data with head, tail, wc, and history tools
• Setting persistent aliases and applying them in real-world scenarios
• Downloading content via command-line tools
• Writing scripts in the bash shell
• Sorting and filtering results using grep and cut

Pre-engagement and Information Gathering

• Defining rules of engagement
• Adhering to standards for penetration testing execution
• Analyzing DNS records and network routes
• Performing network and port scans
• Conducting SMB and OSINT analysis

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities
• Identifying CMS platforms and frameworks
• Forced browsing of directories and files using ZAP
• Web crawling and generating directory listings
• Performing vulnerability analysis with Nmap NSE and Nikto
• Assessing vulnerabilities using legion and Unix-privesc-check
• Evasion techniques for firewalls and IDS using Nmap

Exploitation Techniques

• Exploiting SQL injection vulnerabilities
• Executing blind SQL injection attacks in practice
• Escalating from outdated web applications to server compromise

Reporting and Documentation

• Structuring penetration testing reports
• Documenting engagement details effectively