Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem
• Installation and initial configuration of Kali Linux
• Day-to-day usage and system updates

Kali Linux Files, Directories, and Permissions

• Customising the workspace and panels
• Creating and organising directories and files
• Locating and identifying specific files and directories
• Using standard commands and man pages
• Understanding Linux file permissions and hidden files
• Managing and terminating Linux processes

Advanced Commands

• Utilising extended HTOP and ATOP commands
• Searching content using head, tail, wc, and history
• Creating persistent aliases and applying them to real-world scenarios
• Downloading via command-line web tools
• Writing scripts in the bash shell
• Sorting and filtering results using grep and cut

Pre-engagement and Information Gathering

• Establishing rules of engagement
• Adhering to penetration testing execution standards
• Analysing DNS and network routes
• Conducting network and port scans
• Performing SMB and OSINT analysis

Vulnerability Scanning and Analysis

• Scanning for web application vulnerabilities
• Identifying CMS platforms and frameworks
• Force browsing directories and files using ZAP
• Web crawling and reviewing directory listings
• Analyse vulnerabilities using Nmap NSE and Nikto
• Analise vulnerabilities using legion and Unix-privesc-check
• Evasion techniques for firewalls and IDS using Nmap

Exploitation

• Exploiting SQL injection vulnerabilities
• Executing blind SQL injection attacks in practice
• Escalating from outdated web applications to server compromise

Reporting

• Structuring penetration testing reports
• Documenting engagement details