Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem
• Installation and initial configuration
• Maintenance and updating procedures

Kali Linux Files, Directories, and Permissions

• Customizing the workspace and panel layout
• Creating and organizing directories and files
• Locating specific files and directory paths
• Utilizing command-line tools and man pages
• Managing Linux file permissions and hidden files
• Process management and termination techniques

Advanced Command-Line Usage

• Using extended monitoring commands like HTOP and ATOP
• Text processing with head, tail, wc, and history
• Creating persistent aliases and applying them to real-world scenarios
• Command-line web downloading tools
• Introduction to bash shell scripting
• Data filtering and sorting using grep and cut

Pre-engagement and Information Gathering

• Establishing rules of engagement
• Standards for executing penetration tests
• DNS and network route analysis
• Network mapping and port scanning
• SMB enumeration and OSINT collection

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities
• Identifying CMS platforms and frameworks
• Directory brute-forcing and file discovery using ZAP
• Web crawling and directory listing techniques
• Analyzing vulnerabilities using Nmap NSE and Nikto
• Assessment using legion and Unix-privesc-check
• Bypassing firewalls and IDS using Nmap

Exploitation

• Techniques for exploiting SQL injection flaws
• Practical demonstration of blind SQL injection attacks
• Escalating from web application vulnerabilities to full server compromise

Reporting

• Structuring professional penetration testing reports
• Documenting engagement details and findings