Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem
• Installation and initial configuration processes
• System usage patterns and update management

Kali Linux File System, Directories, and Permissions

• Customizing the workspace layout and panel settings
• Creating and organizing files and directories
• Techniques for locating specific files and directories
• Using command-line interfaces and referencing manual pages
• Managing Linux file permissions and handling hidden files
• Controlling and terminating Linux processes

Advanced Command-Line Operations

• Leveraging HTOP and ATOP for extended system monitoring
• Searching and processing text with head, tail, wc, and history
• Setting up persistent aliases and applying real-world scenarios
• Using command-line tools for web downloads
• Writing scripts in the bash shell
• Refining output using grep and cut commands

Pre-engagement and Information Gathering

• Defining rules of engagement
• Adhering to penetration testing execution standards
• Analyzing DNS records and network routes
• Conducting network and port scanning
• Performing SMB and OSINT analysis

Vulnerability Scanning and Analysis

• Scanning for vulnerabilities in web applications
• Identifying Content Management Systems (CMS) and frameworks
• Forced browsing of directories and files using ZAP
• Web crawling and directory listing techniques
• Analyzing vulnerabilities using Nmap NSE and Nikto
• Evaluating privilege escalation opportunities with legion and Unix-privesc-check
• Evasion techniques for firewalls and IDS using Nmap

Exploitation

• Exploiting SQL injection vulnerabilities
• Executing blind SQL injection attacks in real-time scenarios
• Escalating from outdated web applications to server-level access

Reporting

• Structuring professional penetration testing reports
• Documenting engagement details and findings