Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• General overview of Kali Linux.
• Installation and initial configuration of Kali Linux.
• Usage patterns and system updates for Kali Linux.

Kali Linux Files, Directories, and Permissions

• Customizing the workspace and panel layout.
• Creation of new directories and files.
• Techniques for locating specific files and directories.
• Utilizing commands and consulting manual pages.
• Understanding Linux file permissions and hidden files.
• Process management and termination in Linux.

Advanced Commands

• Using HTOP and ATOP for extended system monitoring.
• Searching specific lines using head, tail, wc, and history.
• Setting persistent aliases and applying them in real-world scenarios.
• Downloading web content via the command line.
• Writing scripts in the bash shell.
• Sorting and filtering results using grep and cut.

Pre-engagement and Information Gathering

• Defining rules of engagement.
• Adhering to standards for penetration testing execution.
• Conducting DNS and route analysis.
• Performing network and port scanning.
• Analyzing SMB shares and gathering OSINT (Open Source Intelligence).

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities.
• Identifying CMS platforms and underlying frameworks.
• Forcing directory and file browsing using ZAP.
• Web crawling and extracting directory listings.
• Analyzing vulnerabilities using Nmap NSE and Nikto.
• Conducting vulnerability analysis with legion and Unix-privesc-check.
• Evasion techniques for firewalls and IDS using Nmap.

Exploitation

• Exploiting SQL injection vulnerabilities.
• Executing blind SQL injection attacks in practical scenarios.
• Compromising servers through outdated web applications.

Reporting

• Structuring penetration testing reports.
• Documenting specific engagement details.